# HG changeset patch # User Pascal Bellard # Date 1643368031 0 # Node ID 21f65cda07b99dc19f0b09bc4ba0595559a94c59 # Parent 4310a82e5109f9c0bac4528718896f7704099cbc polkit: CVE-2021-4034 diff -r 4310a82e5109 -r 21f65cda07b9 at/receipt --- a/at/receipt Fri Jan 28 08:53:07 2022 +0100 +++ b/at/receipt Fri Jan 28 11:07:11 2022 +0000 @@ -14,6 +14,13 @@ DEPENDS="flex" BUILD_DEPENDS="bison flex ssmtp" +# What is the latest version available today? +current_version() +{ + wget -O - $(dirname $WGET_URL) 2>/dev/null | \ + sed "/${PACKAGE}_[0-9]/!d;/orig.tar/!d;s|.*${PACKAGE}_\\(.*\\).orig.tar.*\".*|\\1|" | sort -Vr | sed q +} + # Rules to configure and make the package. compile_rules() { diff -r 4310a82e5109 -r 21f65cda07b9 atftp/receipt --- a/atftp/receipt Fri Jan 28 08:53:07 2022 +0100 +++ b/atftp/receipt Fri Jan 28 11:07:11 2022 +0000 @@ -16,7 +16,12 @@ HOST_ARCH="i486 arm" -# @maintainer: Please update also atftpd +# What is the latest version available today? +current_version() +{ + wget -O - https://sourceforge.net/projects/atftp/files/ 2>/dev/null | \ + sed "/$PACKAGE-/!d;/tar/!d;s|.*$PACKAGE-\\(.*\\).tar.*|\\1|;q" +} # Rules to configure and make the package. compile_rules() diff -r 4310a82e5109 -r 21f65cda07b9 audacious-plugins/receipt --- a/audacious-plugins/receipt Fri Jan 28 08:53:07 2022 +0100 +++ b/audacious-plugins/receipt Fri Jan 28 11:07:11 2022 +0000 @@ -20,6 +20,13 @@ libmcs-dev libmowgli-dev libogg-dev libsamplerate-dev libvorbis-dev libxml2-dev mesa-dev mpg123-dev neon-dev wavpack-dev" +# What is the latest version available today? +current_version() +{ + wget -O - $(dirname $WGET_URL) 2>/dev/null | \ + sed "/beta/d;/$PACKAGE-[0-9]/!d;/tar/!d;s|.*$PACKAGE-\\(.*\\).tar.*\".*|\\1|" | sort -Vr | sed q +} + # Rules to configure and make the package. compile_rules() { diff -r 4310a82e5109 -r 21f65cda07b9 audacious/receipt --- a/audacious/receipt Fri Jan 28 08:53:07 2022 +0100 +++ b/audacious/receipt Fri Jan 28 11:07:11 2022 +0000 @@ -18,6 +18,13 @@ BUILD_DEPENDS="dbus-dev dbus-glib-dev gcc83 gtk+-dev libmcs libmcs-dev libmowgli libmowgli-dev libsamplerate-dev libxml2-dev" +# What is the latest version available today? +current_version() +{ + wget -O - $(dirname $WGET_URL) 2>/dev/null | \ + sed "/beta/d;/$PACKAGE-[0-9]/!d;/tar/!d;s|.*$PACKAGE-\\(.*\\).tar.*\".*|\\1|" | sort -Vr | sed q +} + # Rules to configure and make the package. compile_rules() { diff -r 4310a82e5109 -r 21f65cda07b9 autoconf/receipt --- a/autoconf/receipt Fri Jan 28 08:53:07 2022 +0100 +++ b/autoconf/receipt Fri Jan 28 11:07:11 2022 +0000 @@ -14,6 +14,13 @@ DEPENDS="gettext-tools m4 perl xz" BUILD_DEPENDS="m4 perl" +# What is the latest version available today? +current_version() +{ + wget -O - $(dirname $WGET_URL) 2>/dev/null | \ + sed "/latest/d;/$PACKAGE-/!d;/tar/!d;s|.*$PACKAGE-\\(.*\\).tar.*\".*|\\1|" | sort -Vr | sed q +} + # Rules to compile & install the temporary toolchain. cook_tmp_toolchain() { diff -r 4310a82e5109 -r 21f65cda07b9 polkit/receipt --- a/polkit/receipt Fri Jan 28 08:53:07 2022 +0100 +++ b/polkit/receipt Fri Jan 28 11:07:11 2022 +0000 @@ -24,6 +24,7 @@ # Rules to configure and make the package. compile_rules() { + patch -p0 < $stuff/CVE-2021-4034.u ./configure \ --prefix=/usr \ --sysconfdir=/etc \ diff -r 4310a82e5109 -r 21f65cda07b9 polkit/stuff/CVE-2021-4034.u --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/polkit/stuff/CVE-2021-4034.u Fri Jan 28 11:07:11 2022 +0000 @@ -0,0 +1,14 @@ +--- src/programs/pkcheck.c ++++ src/programs/pkcheck.c +@@ -353,6 +353,11 @@ + local_agent_handle = NULL; + ret = 126; + ++ if (argc < 1) ++ { ++ exit(126); ++ } ++ + g_type_init (); + + details = polkit_details_new ();