[arch-commits] Commit in rpcbind/repos (14 files)
Andreas Radke
andyrtr at archlinux.org
Fri May 5 18:29:13 UTC 2017
Date: Friday, May 5, 2017 @ 18:29:12
Author: andyrtr
Revision: 295332
archrelease: copy trunk to testing-i686, testing-x86_64
Added:
rpcbind/repos/testing-i686/
rpcbind/repos/testing-i686/CVE-2017-8779.diff
(from rev 295331, rpcbind/trunk/CVE-2017-8779.diff)
rpcbind/repos/testing-i686/PKGBUILD
(from rev 295331, rpcbind/trunk/PKGBUILD)
rpcbind/repos/testing-i686/rpcbind-sunrpc.patch
(from rev 295331, rpcbind/trunk/rpcbind-sunrpc.patch)
rpcbind/repos/testing-i686/rpcbind.conf
(from rev 295331, rpcbind/trunk/rpcbind.conf)
rpcbind/repos/testing-i686/rpcbind.install
(from rev 295331, rpcbind/trunk/rpcbind.install)
rpcbind/repos/testing-i686/systemd_service.diff
(from rev 295331, rpcbind/trunk/systemd_service.diff)
rpcbind/repos/testing-x86_64/
rpcbind/repos/testing-x86_64/CVE-2017-8779.diff
(from rev 295331, rpcbind/trunk/CVE-2017-8779.diff)
rpcbind/repos/testing-x86_64/PKGBUILD
(from rev 295331, rpcbind/trunk/PKGBUILD)
rpcbind/repos/testing-x86_64/rpcbind-sunrpc.patch
(from rev 295331, rpcbind/trunk/rpcbind-sunrpc.patch)
rpcbind/repos/testing-x86_64/rpcbind.conf
(from rev 295331, rpcbind/trunk/rpcbind.conf)
rpcbind/repos/testing-x86_64/rpcbind.install
(from rev 295331, rpcbind/trunk/rpcbind.install)
rpcbind/repos/testing-x86_64/systemd_service.diff
(from rev 295331, rpcbind/trunk/systemd_service.diff)
-------------------------------------+
testing-i686/CVE-2017-8779.diff | 21 ++++++++++++
testing-i686/PKGBUILD | 59 ++++++++++++++++++++++++++++++++++
testing-i686/rpcbind-sunrpc.patch | 11 ++++++
testing-i686/rpcbind.conf | 3 +
testing-i686/rpcbind.install | 8 ++++
testing-i686/systemd_service.diff | 10 +++++
testing-x86_64/CVE-2017-8779.diff | 21 ++++++++++++
testing-x86_64/PKGBUILD | 59 ++++++++++++++++++++++++++++++++++
testing-x86_64/rpcbind-sunrpc.patch | 11 ++++++
testing-x86_64/rpcbind.conf | 3 +
testing-x86_64/rpcbind.install | 8 ++++
testing-x86_64/systemd_service.diff | 10 +++++
12 files changed, 224 insertions(+)
Copied: rpcbind/repos/testing-i686/CVE-2017-8779.diff (from rev 295331, rpcbind/trunk/CVE-2017-8779.diff)
===================================================================
--- testing-i686/CVE-2017-8779.diff (rev 0)
+++ testing-i686/CVE-2017-8779.diff 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,21 @@
+diff --git a/src/rpcb_svc_com.c b/src/rpcb_svc_com.c
+index 5862c26..e11f61b 100644
+--- a/src/rpcb_svc_com.c
++++ b/src/rpcb_svc_com.c
+@@ -48,6 +48,7 @@
+ #include <rpc/rpc.h>
+ #include <rpc/rpcb_prot.h>
+ #include <rpc/svc_dg.h>
++#include <rpc/rpc_com.h>
+ #include <netconfig.h>
+ #include <errno.h>
+ #include <syslog.h>
+@@ -432,7 +433,7 @@ rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp /*__unused*/,
+ static bool_t
+ xdr_encap_parms(XDR *xdrs, struct encap_parms *epp)
+ {
+- return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0));
++ return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), RPC_MAXDATASIZE));
+ }
+
+ /*
Copied: rpcbind/repos/testing-i686/PKGBUILD (from rev 295331, rpcbind/trunk/PKGBUILD)
===================================================================
--- testing-i686/PKGBUILD (rev 0)
+++ testing-i686/PKGBUILD 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,59 @@
+# $Id$
+# Maintainer: AndyRTR <andyrtr at archlinux.org>
+# Maintainer: Tobias Powalowski <tpowa at archlinux.org>
+
+pkgname=rpcbind
+pkgver=0.2.4
+pkgrel=3
+pkgdesc="portmap replacement which supports RPC over various protocols"
+arch=(i686 x86_64)
+backup=('etc/conf.d/rpcbind')
+makedepends=('systemd')
+depends=('bash' 'glibc' 'libtirpc' 'libsystemd')
+url="http://rpcbind.sourceforge.net"
+license=('custom')
+replaces=('portmap')
+# see also http://git.infradead.org/users/steved/rpcbind.git
+source=(https://downloads.sourceforge.net/sourceforge/$pkgname/$pkgname-$pkgver.tar.bz2
+ rpcbind-sunrpc.patch
+ rpcbind.conf
+ systemd_service.diff
+ CVE-2017-8779.diff)
+install=rpcbind.install
+sha1sums=('8a6045dd3397e9f71bf3a7c9d269e255cca537bd'
+ '1b997ce76f9727efc8c72fc5f97189591c9a60e2'
+ '08246ff18d12cee01e5c9391c6ba8f5597cac936'
+ '3ebfcf09d01e41c70135124e68b3db681c768aa0'
+ '38044ce8f3376a0b69da8e078e988fd1645bd435')
+
+prepare() {
+ cd $srcdir/$pkgname-$pkgver
+ # patch for iana services file # FS#20273
+ patch -Np1 -i ../rpcbind-sunrpc.patch
+ # use distro config file; FS#52058
+ patch -Np1 -i ../systemd_service.diff
+ # http://seclists.org/oss-sec/2017/q2/209
+ patch -Np1 -i ../CVE-2017-8779.diff
+}
+
+build() {
+ cd $srcdir/$pkgname-$pkgver
+ ./configure --prefix=/usr \
+ --with-rpcuser=rpc \
+ --enable-warmstarts \
+ --with-statedir=/var/lib/rpcbind
+ make
+}
+
+package() {
+ cd $srcdir/$pkgname-$pkgver
+ make DESTDIR=$pkgdir install
+ # install rpcbind config file
+ install -D -m644 $srcdir/rpcbind.conf $pkgdir/etc/conf.d/rpcbind
+ # install missing man page - https://bugs.archlinux.org/task/21271
+ install -m644 man/rpcinfo.8 $pkgdir/usr/share/man/man8/
+ # add state directory
+ install -d -m 700 -o 32 -g 32 $pkgdir/var/lib/rpcbind
+ # install license
+ install -D -m644 COPYING $pkgdir/usr/share/licenses/rpcbind/COPYING
+}
Copied: rpcbind/repos/testing-i686/rpcbind-sunrpc.patch (from rev 295331, rpcbind/trunk/rpcbind-sunrpc.patch)
===================================================================
--- testing-i686/rpcbind-sunrpc.patch (rev 0)
+++ testing-i686/rpcbind-sunrpc.patch 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,11 @@
+--- rpcbind-0.2.3/src/rpcbind.c 2015-04-27 16:07:43.000000000 +0200
++++ rpcbind-0.2.3/src/rpcbind.c.new 2015-04-27 19:48:44.518124944 +0200
+@@ -132,7 +132,7 @@
+ char *udp_uaddr; /* Universal UDP address */
+ char *tcp_uaddr; /* Universal TCP address */
+ #endif
+-static char servname[] = "rpcbind";
++static char servname[] = "sunrpc";
+ static char superuser[] = "superuser";
+
+ int main __P((int, char *[]));
Copied: rpcbind/repos/testing-i686/rpcbind.conf (from rev 295331, rpcbind/trunk/rpcbind.conf)
===================================================================
--- testing-i686/rpcbind.conf (rev 0)
+++ testing-i686/rpcbind.conf 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,3 @@
+#
+# Optional arguments passed to rpcbind. See rpcbind(8)
+RPCBIND_ARGS=""
Copied: rpcbind/repos/testing-i686/rpcbind.install (from rev 295331, rpcbind/trunk/rpcbind.install)
===================================================================
--- testing-i686/rpcbind.install (rev 0)
+++ testing-i686/rpcbind.install 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,8 @@
+post_install() {
+ getent group rpc &>/dev/null || groupadd -r -g 32 rpc >/dev/null
+ getent passwd rpc &>/dev/null || useradd -r -u 32 -g rpc -d /dev/null -s /bin/false -c "Rpcbind Daemon" rpc >/dev/null
+}
+
+post_upgrade() {
+ post_install
+}
Copied: rpcbind/repos/testing-i686/systemd_service.diff (from rev 295331, rpcbind/trunk/systemd_service.diff)
===================================================================
--- testing-i686/systemd_service.diff (rev 0)
+++ testing-i686/systemd_service.diff 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,10 @@
+--- rpcbind-0.2.4/systemd/rpcbind.service.in 2016-11-28 21:47:28.000000000 +0100
++++ rpcbind-0.2.4/systemd/rpcbind.service.in.new 2016-12-06 16:18:54.429326613 +0100
+@@ -11,6 +11,7 @@
+ [Service]
+ Type=notify
+ # distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
++EnvironmentFile=/etc/conf.d/rpcbind
+ ExecStart=@_bindir@/rpcbind $RPCBIND_OPTIONS -w -f
+
+ [Install]
Copied: rpcbind/repos/testing-x86_64/CVE-2017-8779.diff (from rev 295331, rpcbind/trunk/CVE-2017-8779.diff)
===================================================================
--- testing-x86_64/CVE-2017-8779.diff (rev 0)
+++ testing-x86_64/CVE-2017-8779.diff 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,21 @@
+diff --git a/src/rpcb_svc_com.c b/src/rpcb_svc_com.c
+index 5862c26..e11f61b 100644
+--- a/src/rpcb_svc_com.c
++++ b/src/rpcb_svc_com.c
+@@ -48,6 +48,7 @@
+ #include <rpc/rpc.h>
+ #include <rpc/rpcb_prot.h>
+ #include <rpc/svc_dg.h>
++#include <rpc/rpc_com.h>
+ #include <netconfig.h>
+ #include <errno.h>
+ #include <syslog.h>
+@@ -432,7 +433,7 @@ rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp /*__unused*/,
+ static bool_t
+ xdr_encap_parms(XDR *xdrs, struct encap_parms *epp)
+ {
+- return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0));
++ return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), RPC_MAXDATASIZE));
+ }
+
+ /*
Copied: rpcbind/repos/testing-x86_64/PKGBUILD (from rev 295331, rpcbind/trunk/PKGBUILD)
===================================================================
--- testing-x86_64/PKGBUILD (rev 0)
+++ testing-x86_64/PKGBUILD 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,59 @@
+# $Id$
+# Maintainer: AndyRTR <andyrtr at archlinux.org>
+# Maintainer: Tobias Powalowski <tpowa at archlinux.org>
+
+pkgname=rpcbind
+pkgver=0.2.4
+pkgrel=3
+pkgdesc="portmap replacement which supports RPC over various protocols"
+arch=(i686 x86_64)
+backup=('etc/conf.d/rpcbind')
+makedepends=('systemd')
+depends=('bash' 'glibc' 'libtirpc' 'libsystemd')
+url="http://rpcbind.sourceforge.net"
+license=('custom')
+replaces=('portmap')
+# see also http://git.infradead.org/users/steved/rpcbind.git
+source=(https://downloads.sourceforge.net/sourceforge/$pkgname/$pkgname-$pkgver.tar.bz2
+ rpcbind-sunrpc.patch
+ rpcbind.conf
+ systemd_service.diff
+ CVE-2017-8779.diff)
+install=rpcbind.install
+sha1sums=('8a6045dd3397e9f71bf3a7c9d269e255cca537bd'
+ '1b997ce76f9727efc8c72fc5f97189591c9a60e2'
+ '08246ff18d12cee01e5c9391c6ba8f5597cac936'
+ '3ebfcf09d01e41c70135124e68b3db681c768aa0'
+ '38044ce8f3376a0b69da8e078e988fd1645bd435')
+
+prepare() {
+ cd $srcdir/$pkgname-$pkgver
+ # patch for iana services file # FS#20273
+ patch -Np1 -i ../rpcbind-sunrpc.patch
+ # use distro config file; FS#52058
+ patch -Np1 -i ../systemd_service.diff
+ # http://seclists.org/oss-sec/2017/q2/209
+ patch -Np1 -i ../CVE-2017-8779.diff
+}
+
+build() {
+ cd $srcdir/$pkgname-$pkgver
+ ./configure --prefix=/usr \
+ --with-rpcuser=rpc \
+ --enable-warmstarts \
+ --with-statedir=/var/lib/rpcbind
+ make
+}
+
+package() {
+ cd $srcdir/$pkgname-$pkgver
+ make DESTDIR=$pkgdir install
+ # install rpcbind config file
+ install -D -m644 $srcdir/rpcbind.conf $pkgdir/etc/conf.d/rpcbind
+ # install missing man page - https://bugs.archlinux.org/task/21271
+ install -m644 man/rpcinfo.8 $pkgdir/usr/share/man/man8/
+ # add state directory
+ install -d -m 700 -o 32 -g 32 $pkgdir/var/lib/rpcbind
+ # install license
+ install -D -m644 COPYING $pkgdir/usr/share/licenses/rpcbind/COPYING
+}
Copied: rpcbind/repos/testing-x86_64/rpcbind-sunrpc.patch (from rev 295331, rpcbind/trunk/rpcbind-sunrpc.patch)
===================================================================
--- testing-x86_64/rpcbind-sunrpc.patch (rev 0)
+++ testing-x86_64/rpcbind-sunrpc.patch 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,11 @@
+--- rpcbind-0.2.3/src/rpcbind.c 2015-04-27 16:07:43.000000000 +0200
++++ rpcbind-0.2.3/src/rpcbind.c.new 2015-04-27 19:48:44.518124944 +0200
+@@ -132,7 +132,7 @@
+ char *udp_uaddr; /* Universal UDP address */
+ char *tcp_uaddr; /* Universal TCP address */
+ #endif
+-static char servname[] = "rpcbind";
++static char servname[] = "sunrpc";
+ static char superuser[] = "superuser";
+
+ int main __P((int, char *[]));
Copied: rpcbind/repos/testing-x86_64/rpcbind.conf (from rev 295331, rpcbind/trunk/rpcbind.conf)
===================================================================
--- testing-x86_64/rpcbind.conf (rev 0)
+++ testing-x86_64/rpcbind.conf 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,3 @@
+#
+# Optional arguments passed to rpcbind. See rpcbind(8)
+RPCBIND_ARGS=""
Copied: rpcbind/repos/testing-x86_64/rpcbind.install (from rev 295331, rpcbind/trunk/rpcbind.install)
===================================================================
--- testing-x86_64/rpcbind.install (rev 0)
+++ testing-x86_64/rpcbind.install 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,8 @@
+post_install() {
+ getent group rpc &>/dev/null || groupadd -r -g 32 rpc >/dev/null
+ getent passwd rpc &>/dev/null || useradd -r -u 32 -g rpc -d /dev/null -s /bin/false -c "Rpcbind Daemon" rpc >/dev/null
+}
+
+post_upgrade() {
+ post_install
+}
Copied: rpcbind/repos/testing-x86_64/systemd_service.diff (from rev 295331, rpcbind/trunk/systemd_service.diff)
===================================================================
--- testing-x86_64/systemd_service.diff (rev 0)
+++ testing-x86_64/systemd_service.diff 2017-05-05 18:29:12 UTC (rev 295332)
@@ -0,0 +1,10 @@
+--- rpcbind-0.2.4/systemd/rpcbind.service.in 2016-11-28 21:47:28.000000000 +0100
++++ rpcbind-0.2.4/systemd/rpcbind.service.in.new 2016-12-06 16:18:54.429326613 +0100
+@@ -11,6 +11,7 @@
+ [Service]
+ Type=notify
+ # distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
++EnvironmentFile=/etc/conf.d/rpcbind
+ ExecStart=@_bindir@/rpcbind $RPCBIND_OPTIONS -w -f
+
+ [Install]
More information about the arch-commits
mailing list