summaryrefslogtreecommitdiff
path: root/source
diff options
context:
space:
mode:
authorPatrick J Volkerding <volkerdi@slackware.com>2021-10-21 19:36:32 +0000
committerEric Hameleers <alien@slackware.com>2021-10-22 08:59:59 +0200
commit1bb03caa091f9fa14d1e6120ad2bd1dfa25c76c5 (patch)
tree221809562de7738cdbec0c41c8e986d5d5f7210b /source
parent710e4856cfbc7bd60e022472779a298df5036fc0 (diff)
downloadcurrent-1bb03caa091f9fa14d1e6120ad2bd1dfa25c76c5.tar.gz
Thu Oct 21 19:36:32 UTC 202120211021193632
a/lvm2-2.03.13-x86_64-1.txz: Upgraded. Reverted to working version. d/rust-1.56.0-x86_64-1.txz: Upgraded. l/pipewire-0.3.39-x86_64-1.txz: Upgraded. n/krb5-1.19.2-x86_64-2.txz: Rebuilt. [PATCH] Fix KDC null deref on TGS inner body null server. This fixes an issue where an authenticated attacker can cause a denial of service in the KDC by sending a FAST TGS request with no server field. Thanks to nobodino. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37750 (* Security fix *) x/ibus-m17n-1.4.8-x86_64-1.txz: Upgraded. x/libinput-1.19.2-x86_64-1.txz: Upgraded. xap/freerdp-2.4.1-x86_64-1.txz: Upgraded. This update fixes two security issues: Improper client input validation for gateway connections allows to overwrite memory. Improper region checks in all clients allow out of bound write to memory. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41159 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41160 (* Security fix *) xap/gftp-2.7.1b-x86_64-1.txz: Upgraded. extra/php8/php8-8.0.12-x86_64-1.txz: Upgraded. This update fixes bugs and a security issue: FPM: PHP-FPM oob R/W in root process leading to privilege escalation. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21703 (* Security fix *)
Diffstat (limited to 'source')
-rwxr-xr-xsource/d/rust/rust.SlackBuild10
-rw-r--r--source/d/rust/rust.url8
-rw-r--r--source/n/krb5/d775c95af7606a51bf79547a94fa52ddd1cb7f49.patch43
-rwxr-xr-xsource/n/krb5/krb5.SlackBuild4
-rwxr-xr-xsource/xap/gftp/gftp.SlackBuild2
5 files changed, 56 insertions, 11 deletions
diff --git a/source/d/rust/rust.SlackBuild b/source/d/rust/rust.SlackBuild
index 286c7bd1..f4cf63b1 100755
--- a/source/d/rust/rust.SlackBuild
+++ b/source/d/rust/rust.SlackBuild
@@ -26,17 +26,17 @@ cd $(dirname $0) ; CWD=$(pwd)
PKGNAM=rust
SRCNAM="${PKGNAM}c"
-VERSION=${VERSION:-1.55.0}
-BUILD=${BUILD:-2}
+VERSION=${VERSION:-1.56.0}
+BUILD=${BUILD:-1}
# Set this to YES to build with the system LLVM, or NO to use the bundled LLVM.
# YES is probably better (when it works...)
SYSTEM_LLVM=${SYSTEM_LLVM:-YES}
# Bootstrap variables (might not be kept updated for latest Rust):
-RSTAGE0_VERSION=${RSTAGE0_VERSION:-1.54.0}
-RSTAGE0_DIR=${RSTAGE0_DIR:-2021-07-29}
-CSTAGE0_VERSION=${CSTAGE0_VERSION:-1.54.0}
+RSTAGE0_VERSION=${RSTAGE0_VERSION:-1.55.0}
+RSTAGE0_DIR=${RSTAGE0_DIR:-2021-09-09}
+CSTAGE0_VERSION=${CSTAGE0_VERSION:-1.55.0}
CSTAGE0_DIR=${CSTAGE0_DIR:-$RSTAGE0_DIR}
# Automatically determine the architecture we're building on:
diff --git a/source/d/rust/rust.url b/source/d/rust/rust.url
index 1f4a237b..e12e4ebf 100644
--- a/source/d/rust/rust.url
+++ b/source/d/rust/rust.url
@@ -1,5 +1,5 @@
# Source code (repacked to .tar.lz):
-VERSION=1.55.0
+VERSION=1.56.0
rm -f rustc-${VERSION}-src.tar.*
lftpget https://static.rust-lang.org/dist/rustc-${VERSION}-src.tar.gz
lftpget https://static.rust-lang.org/dist/rustc-${VERSION}-src.tar.gz.asc
@@ -20,9 +20,9 @@ fi
# update the settings below, look at src/stage0.txt in the Rust sources.
exit 0
-BOOTSTRAP_DATE=2021-07-29
-BOOTSTRAP_CARGO=1.54.0
-BOOTSTRAP_VERSION=1.54.0
+BOOTSTRAP_DATE=2021-09-09
+BOOTSTRAP_CARGO=1.55.0
+BOOTSTRAP_VERSION=1.55.0
# i686 bootstrap:
lftpget https://static.rust-lang.org/dist/${BOOTSTRAP_DATE}/cargo-${BOOTSTRAP_CARGO}-i686-unknown-linux-gnu.tar.xz
diff --git a/source/n/krb5/d775c95af7606a51bf79547a94fa52ddd1cb7f49.patch b/source/n/krb5/d775c95af7606a51bf79547a94fa52ddd1cb7f49.patch
new file mode 100644
index 00000000..7623d829
--- /dev/null
+++ b/source/n/krb5/d775c95af7606a51bf79547a94fa52ddd1cb7f49.patch
@@ -0,0 +1,43 @@
+From d775c95af7606a51bf79547a94fa52ddd1cb7f49 Mon Sep 17 00:00:00 2001
+From: Greg Hudson <ghudson@mit.edu>
+Date: Tue, 3 Aug 2021 01:15:27 -0400
+Subject: [PATCH] Fix KDC null deref on TGS inner body null server
+
+After the KDC decodes a FAST inner body, it does not check for a null
+server. Prior to commit 39548a5b17bbda9eeb63625a201cfd19b9de1c5b this
+would typically result in an error from krb5_unparse_name(), but with
+the addition of get_local_tgt() it results in a null dereference. Add
+a null check.
+
+Reported by Joseph Sutton of Catalyst.
+
+CVE-2021-37750:
+
+In MIT krb5 releases 1.14 and later, an authenticated attacker can
+cause a null dereference in the KDC by sending a FAST TGS request with
+no server field.
+
+ticket: 9008 (new)
+tags: pullup
+target_version: 1.19-next
+target_version: 1.18-next
+---
+ src/kdc/do_tgs_req.c | 5 +++++
+ 1 file changed, 5 insertions(+)
+
+diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
+index 582e497cc9..32dc65fa8e 100644
+--- a/src/kdc/do_tgs_req.c
++++ b/src/kdc/do_tgs_req.c
+@@ -204,6 +204,11 @@ process_tgs_req(krb5_kdc_req *request, krb5_data *pkt,
+ status = "FIND_FAST";
+ goto cleanup;
+ }
++ if (sprinc == NULL) {
++ status = "NULL_SERVER";
++ errcode = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
++ goto cleanup;
++ }
+
+ errcode = get_local_tgt(kdc_context, &sprinc->realm, header_server,
+ &local_tgt, &local_tgt_storage, &local_tgt_key);
diff --git a/source/n/krb5/krb5.SlackBuild b/source/n/krb5/krb5.SlackBuild
index fbc5123a..e39bf7ed 100755
--- a/source/n/krb5/krb5.SlackBuild
+++ b/source/n/krb5/krb5.SlackBuild
@@ -26,7 +26,7 @@ cd $(dirname $0) ; CWD=$(pwd)
PKGNAM=krb5
VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)}
-BUILD=${BUILD:-1}
+BUILD=${BUILD:-2}
if [ -z "$ARCH" ]; then
case "$( uname -m )" in
@@ -79,6 +79,8 @@ find . \
sed -i "/KRB5ROOT=/s/\/local//" src/util/ac_check_krb5.m4
+cat $CWD/d775c95af7606a51bf79547a94fa52ddd1cb7f49.patch | patch -p1 --verbose || exit 1
+
cd src
CFLAGS="$SLKCFLAGS" \
diff --git a/source/xap/gftp/gftp.SlackBuild b/source/xap/gftp/gftp.SlackBuild
index 502aae21..cf670bbc 100755
--- a/source/xap/gftp/gftp.SlackBuild
+++ b/source/xap/gftp/gftp.SlackBuild
@@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd)
PKGNAM=gftp
VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)}
-BUILD=${BUILD:-3}
+BUILD=${BUILD:-1}
# Automatically determine the architecture we're building on:
if [ -z "$ARCH" ]; then