[arch-commits] Commit in rpcbind/repos (8 files)
Andreas Radke
andyrtr at archlinux.org
Mon Dec 18 09:45:45 UTC 2017
Date: Monday, December 18, 2017 @ 09:45:44
Author: andyrtr
Revision: 313287
archrelease: copy trunk to testing-x86_64
Added:
rpcbind/repos/testing-x86_64/
rpcbind/repos/testing-x86_64/CVE-2017-8779.diff
(from rev 313286, rpcbind/trunk/CVE-2017-8779.diff)
rpcbind/repos/testing-x86_64/PKGBUILD
(from rev 313286, rpcbind/trunk/PKGBUILD)
rpcbind/repos/testing-x86_64/rpcbind-sunrpc.patch
(from rev 313286, rpcbind/trunk/rpcbind-sunrpc.patch)
rpcbind/repos/testing-x86_64/rpcbind.conf
(from rev 313286, rpcbind/trunk/rpcbind.conf)
rpcbind/repos/testing-x86_64/systemd_service.diff
(from rev 313286, rpcbind/trunk/systemd_service.diff)
rpcbind/repos/testing-x86_64/sysusers.d
(from rev 313286, rpcbind/trunk/sysusers.d)
rpcbind/repos/testing-x86_64/tmpfiles.d
(from rev 313286, rpcbind/trunk/tmpfiles.d)
----------------------+
CVE-2017-8779.diff | 21 ++++++++++++++++
PKGBUILD | 63 +++++++++++++++++++++++++++++++++++++++++++++++++
rpcbind-sunrpc.patch | 11 ++++++++
rpcbind.conf | 3 ++
systemd_service.diff | 10 +++++++
sysusers.d | 1
tmpfiles.d | 1
7 files changed, 110 insertions(+)
Copied: rpcbind/repos/testing-x86_64/CVE-2017-8779.diff (from rev 313286, rpcbind/trunk/CVE-2017-8779.diff)
===================================================================
--- testing-x86_64/CVE-2017-8779.diff (rev 0)
+++ testing-x86_64/CVE-2017-8779.diff 2017-12-18 09:45:44 UTC (rev 313287)
@@ -0,0 +1,21 @@
+diff --git a/src/rpcb_svc_com.c b/src/rpcb_svc_com.c
+index 5862c26..e11f61b 100644
+--- a/src/rpcb_svc_com.c
++++ b/src/rpcb_svc_com.c
+@@ -48,6 +48,7 @@
+ #include <rpc/rpc.h>
+ #include <rpc/rpcb_prot.h>
+ #include <rpc/svc_dg.h>
++#include <rpc/rpc_com.h>
+ #include <netconfig.h>
+ #include <errno.h>
+ #include <syslog.h>
+@@ -432,7 +433,7 @@ rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp /*__unused*/,
+ static bool_t
+ xdr_encap_parms(XDR *xdrs, struct encap_parms *epp)
+ {
+- return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0));
++ return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), RPC_MAXDATASIZE));
+ }
+
+ /*
Copied: rpcbind/repos/testing-x86_64/PKGBUILD (from rev 313286, rpcbind/trunk/PKGBUILD)
===================================================================
--- testing-x86_64/PKGBUILD (rev 0)
+++ testing-x86_64/PKGBUILD 2017-12-18 09:45:44 UTC (rev 313287)
@@ -0,0 +1,63 @@
+# $Id$
+# Maintainer: AndyRTR <andyrtr at archlinux.org>
+# Maintainer: Tobias Powalowski <tpowa at archlinux.org>
+
+pkgname=rpcbind
+pkgver=0.2.4
+pkgrel=4
+pkgdesc="portmap replacement which supports RPC over various protocols"
+arch=(x86_64)
+backup=('etc/conf.d/rpcbind')
+makedepends=('systemd')
+depends=('bash' 'glibc' 'libtirpc' 'libsystemd')
+url="http://rpcbind.sourceforge.net"
+license=('custom')
+replaces=('portmap')
+# see also http://git.infradead.org/users/steved/rpcbind.git
+source=(https://downloads.sourceforge.net/sourceforge/$pkgname/$pkgname-$pkgver.tar.bz2
+ rpcbind-sunrpc.patch
+ rpcbind.conf
+ systemd_service.diff
+ tmpfiles.d
+ sysusers.d
+ CVE-2017-8779.diff)
+sha1sums=('8a6045dd3397e9f71bf3a7c9d269e255cca537bd'
+ '1b997ce76f9727efc8c72fc5f97189591c9a60e2'
+ '08246ff18d12cee01e5c9391c6ba8f5597cac936'
+ '3ebfcf09d01e41c70135124e68b3db681c768aa0'
+ 'eb8b7375a4ca31b3f61fa726f387884d5e4ca7a3'
+ '97fed152572790a44e972114cbb436ca517254f9'
+ '38044ce8f3376a0b69da8e078e988fd1645bd435')
+
+prepare() {
+ cd $srcdir/$pkgname-$pkgver
+ # patch for iana services file # FS#20273
+ patch -Np1 -i ../rpcbind-sunrpc.patch
+ # use distro config file; FS#52058
+ patch -Np1 -i ../systemd_service.diff
+ # http://seclists.org/oss-sec/2017/q2/209
+ patch -Np1 -i ../CVE-2017-8779.diff
+}
+
+build() {
+ cd $srcdir/$pkgname-$pkgver
+ ./configure --prefix=/usr \
+ --with-rpcuser=rpc \
+ --enable-warmstarts \
+ --with-statedir=/var/lib/rpcbind
+ make
+}
+
+package() {
+ cd $srcdir/$pkgname-$pkgver
+ make DESTDIR=$pkgdir install
+ # install rpcbind config file
+ install -D -m644 $srcdir/rpcbind.conf $pkgdir/etc/conf.d/rpcbind
+ # install missing man page - https://bugs.archlinux.org/task/21271
+ install -m644 man/rpcinfo.8 $pkgdir/usr/share/man/man8/
+ # systemd sysusers/tempfile
+ install -Dm644 ../tmpfiles.d ${pkgdir}/usr/lib/tmpfiles.d/rpcbind.conf
+ install -Dm644 ../sysusers.d ${pkgdir}/usr/lib/sysusers.d/rpcbind.conf
+ # install license
+ install -D -m644 COPYING $pkgdir/usr/share/licenses/rpcbind/COPYING
+}
Copied: rpcbind/repos/testing-x86_64/rpcbind-sunrpc.patch (from rev 313286, rpcbind/trunk/rpcbind-sunrpc.patch)
===================================================================
--- testing-x86_64/rpcbind-sunrpc.patch (rev 0)
+++ testing-x86_64/rpcbind-sunrpc.patch 2017-12-18 09:45:44 UTC (rev 313287)
@@ -0,0 +1,11 @@
+--- rpcbind-0.2.3/src/rpcbind.c 2015-04-27 16:07:43.000000000 +0200
++++ rpcbind-0.2.3/src/rpcbind.c.new 2015-04-27 19:48:44.518124944 +0200
+@@ -132,7 +132,7 @@
+ char *udp_uaddr; /* Universal UDP address */
+ char *tcp_uaddr; /* Universal TCP address */
+ #endif
+-static char servname[] = "rpcbind";
++static char servname[] = "sunrpc";
+ static char superuser[] = "superuser";
+
+ int main __P((int, char *[]));
Copied: rpcbind/repos/testing-x86_64/rpcbind.conf (from rev 313286, rpcbind/trunk/rpcbind.conf)
===================================================================
--- testing-x86_64/rpcbind.conf (rev 0)
+++ testing-x86_64/rpcbind.conf 2017-12-18 09:45:44 UTC (rev 313287)
@@ -0,0 +1,3 @@
+#
+# Optional arguments passed to rpcbind. See rpcbind(8)
+RPCBIND_ARGS=""
Copied: rpcbind/repos/testing-x86_64/systemd_service.diff (from rev 313286, rpcbind/trunk/systemd_service.diff)
===================================================================
--- testing-x86_64/systemd_service.diff (rev 0)
+++ testing-x86_64/systemd_service.diff 2017-12-18 09:45:44 UTC (rev 313287)
@@ -0,0 +1,10 @@
+--- rpcbind-0.2.4/systemd/rpcbind.service.in 2016-11-28 21:47:28.000000000 +0100
++++ rpcbind-0.2.4/systemd/rpcbind.service.in.new 2016-12-06 16:18:54.429326613 +0100
+@@ -11,6 +11,7 @@
+ [Service]
+ Type=notify
+ # distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
++EnvironmentFile=/etc/conf.d/rpcbind
+ ExecStart=@_bindir@/rpcbind $RPCBIND_OPTIONS -w -f
+
+ [Install]
Copied: rpcbind/repos/testing-x86_64/sysusers.d (from rev 313286, rpcbind/trunk/sysusers.d)
===================================================================
--- testing-x86_64/sysusers.d (rev 0)
+++ testing-x86_64/sysusers.d 2017-12-18 09:45:44 UTC (rev 313287)
@@ -0,0 +1 @@
+u rpc 32 "Rpcbind Daemon" /var/lib/rpcbind
Copied: rpcbind/repos/testing-x86_64/tmpfiles.d (from rev 313286, rpcbind/trunk/tmpfiles.d)
===================================================================
--- testing-x86_64/tmpfiles.d (rev 0)
+++ testing-x86_64/tmpfiles.d 2017-12-18 09:45:44 UTC (rev 313287)
@@ -0,0 +1 @@
+d /var/lib/rpcbind 0700 rpc rpc
More information about the arch-commits
mailing list