Date: Tuesday, November 15, 2022 @ 21:38:59
Author: andyrtr
Revision: 461841
archrelease: copy trunk to testing-x86_64
Added:
rpcbind/repos/testing-x86_64/
rpcbind/repos/testing-x86_64/CVE-2017-8779.diff
(from rev 461840, rpcbind/trunk/CVE-2017-8779.diff)
rpcbind/repos/testing-x86_64/PKGBUILD
(from rev 461840, rpcbind/trunk/PKGBUILD)
rpcbind/repos/testing-x86_64/rpcbind-sunrpc.patch
(from rev 461840, rpcbind/trunk/rpcbind-sunrpc.patch)
rpcbind/repos/testing-x86_64/rpcbind.conf
(from rev 461840, rpcbind/trunk/rpcbind.conf)
rpcbind/repos/testing-x86_64/systemd_service.diff
(from rev 461840, rpcbind/trunk/systemd_service.diff)
rpcbind/repos/testing-x86_64/sysusers.d
(from rev 461840, rpcbind/trunk/sysusers.d)
rpcbind/repos/testing-x86_64/tmpfiles.d
(from rev 461840, rpcbind/trunk/tmpfiles.d)
----------------------+
CVE-2017-8779.diff | 21 ++++++++++++++
PKGBUILD | 71 +++++++++++++++++++++++++++++++++++++++++++++++++
rpcbind-sunrpc.patch | 11 +++++++
rpcbind.conf | 3 ++
systemd_service.diff | 10 ++++++
sysusers.d | 1
tmpfiles.d | 1
7 files changed, 118 insertions(+)
Copied: rpcbind/repos/testing-x86_64/CVE-2017-8779.diff (from rev 461840,
rpcbind/trunk/CVE-2017-8779.diff)
===================================================================
--- testing-x86_64/CVE-2017-8779.diff (rev 0)
+++ testing-x86_64/CVE-2017-8779.diff 2022-11-15 21:38:59 UTC (rev 461841)
@@ -0,0 +1,21 @@
+diff --git a/src/rpcb_svc_com.c b/src/rpcb_svc_com.c
+index 5862c26..e11f61b 100644
+--- a/src/rpcb_svc_com.c
++++ b/src/rpcb_svc_com.c
+@@ -48,6 +48,7 @@
+ #include <rpc/rpc.h>
+ #include <rpc/rpcb_prot.h>
+ #include <rpc/svc_dg.h>
++#include <rpc/rpc_com.h>
+ #include <netconfig.h>
+ #include <errno.h>
+ #include <syslog.h>
+@@ -432,7 +433,7 @@ rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp
/*__unused*/,
+ static bool_t
+ xdr_encap_parms(XDR *xdrs, struct encap_parms *epp)
+ {
+- return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0));
++ return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen),
RPC_MAXDATASIZE));
+ }
+
+ /*
Copied: rpcbind/repos/testing-x86_64/PKGBUILD (from rev 461840,
rpcbind/trunk/PKGBUILD)
===================================================================
--- testing-x86_64/PKGBUILD (rev 0)
+++ testing-x86_64/PKGBUILD 2022-11-15 21:38:59 UTC (rev 461841)
@@ -0,0 +1,71 @@
+# Maintainer: AndyRTR <andy...@archlinux.org>
+# Maintainer: Tobias Powalowski <tp...@archlinux.org>
+
+pkgname=rpcbind
+pkgver=1.2.6
+pkgrel=3
+pkgdesc="portmap replacement which supports RPC over various protocols"
+arch=(x86_64)
+url="http://rpcbind.sourceforge.net";
+license=('custom')
+backup=('etc/conf.d/rpcbind')
+depends=('bash' 'glibc' 'libtirpc' 'systemd-libs')
+makedepends=('systemd')
+options=('debug')
+replaces=('portmap')
+# see also http://git.linux-nfs.org/?p=steved/rpcbind.git;a=summary
+source=(https://downloads.sourceforge.net/sourceforge/$pkgname/$pkgname-$pkgver.tar.bz2
+ rpcbind-sunrpc.patch
+ rpcbind.conf
+ systemd_service.diff
+ tmpfiles.d
+ sysusers.d
+ CVE-2017-8779.diff)
+sha1sums=('a6dad1d9454f42f2f25a92caba8d3d7bddf527e3'
+ '1b997ce76f9727efc8c72fc5f97189591c9a60e2'
+ 'ce58b8fccf0440aa81eeb21c99ef7dd654f03b7f'
+ '5baeed59090b3bfa08c0852333e061194efcc4e7'
+ 'eb8b7375a4ca31b3f61fa726f387884d5e4ca7a3'
+ '97fed152572790a44e972114cbb436ca517254f9'
+ '38044ce8f3376a0b69da8e078e988fd1645bd435')
+sha256sums=('5613746489cae5ae23a443bb85c05a11741a5f12c8f55d2bb5e83b9defeee8de'
+ '7a32111c74e708ad431b7114580c60d7405c591273e6cc00baf5baff05952573'
+ '7d13186a6dfdc855cf9c6d41de56aa1efd04bd4a6bd7ab36f81bb29e4699a976'
+ '11c34eb2790da8f4da1715af3ab208705847e141f24fc669aaf899da1d73d30f'
+ '08b04f4da12b34d66cc8fefa0a6dcac239019b0de0090e08d61cb18cc36a6045'
+ '288edf4d317dbeb6607a049d4451ae7e708ab2ad284c674bed19f444036d55c1'
+ 'bfb7f022b44ca83309dec6dfcb1ff4a5e0b0a40078e3688a2c7ceaaaa19a9686')
+
+prepare() {
+ cd $pkgname-$pkgver
+ # patch for iana services file # FS#20273
+ patch -Np1 -i ../rpcbind-sunrpc.patch
+ # use distro config file; FS#52058
+ patch -Np1 -i ../systemd_service.diff
+ # http://seclists.org/oss-sec/2017/q2/209
+ patch -Np1 -i ../CVE-2017-8779.diff
+}
+
+build() {
+ cd $pkgname-$pkgver
+ ./configure --prefix=/usr --sbindir=/usr/bin \
+ --with-rpcuser=rpc \
+ --enable-warmstarts \
+ --with-statedir=/var/lib/rpcbind \
+ --enable-rmtcalls
+ make
+}
+
+package() {
+ cd $pkgname-$pkgver
+ make DESTDIR="$pkgdir" install
+ # install rpcbind config file
+ install -D -m644 "$srcdir"/rpcbind.conf "$pkgdir"/etc/conf.d/rpcbind
+ # install missing man page - https://bugs.archlinux.org/task/21271
+ install -m644 man/rpcinfo.8 "$pkgdir"/usr/share/man/man8/
+ # systemd sysusers/tempfile
+ install -Dm644 ../tmpfiles.d "${pkgdir}"/usr/lib/tmpfiles.d/rpcbind.conf
+ install -Dm644 ../sysusers.d "${pkgdir}"/usr/lib/sysusers.d/rpcbind.conf
+ # install license
+ install -D -m644 COPYING "$pkgdir"/usr/share/licenses/rpcbind/COPYING
+}
Copied: rpcbind/repos/testing-x86_64/rpcbind-sunrpc.patch (from rev 461840,
rpcbind/trunk/rpcbind-sunrpc.patch)
===================================================================
--- testing-x86_64/rpcbind-sunrpc.patch (rev 0)
+++ testing-x86_64/rpcbind-sunrpc.patch 2022-11-15 21:38:59 UTC (rev 461841)
@@ -0,0 +1,11 @@
+--- rpcbind-0.2.3/src/rpcbind.c 2015-04-27 16:07:43.000000000 +0200
++++ rpcbind-0.2.3/src/rpcbind.c.new 2015-04-27 19:48:44.518124944 +0200
+@@ -132,7 +132,7 @@
+ char *udp_uaddr; /* Universal UDP address */
+ char *tcp_uaddr; /* Universal TCP address */
+ #endif
+-static char servname[] = "rpcbind";
++static char servname[] = "sunrpc";
+ static char superuser[] = "superuser";
+
+ int main __P((int, char *[]));
Copied: rpcbind/repos/testing-x86_64/rpcbind.conf (from rev 461840,
rpcbind/trunk/rpcbind.conf)
===================================================================
--- testing-x86_64/rpcbind.conf (rev 0)
+++ testing-x86_64/rpcbind.conf 2022-11-15 21:38:59 UTC (rev 461841)
@@ -0,0 +1,3 @@
+#
+# Optional arguments passed to rpcbind. See rpcbind(8)
+RPCBIND_OPTIONS=""
Copied: rpcbind/repos/testing-x86_64/systemd_service.diff (from rev 461840,
rpcbind/trunk/systemd_service.diff)
===================================================================
--- testing-x86_64/systemd_service.diff (rev 0)
+++ testing-x86_64/systemd_service.diff 2022-11-15 21:38:59 UTC (rev 461841)
@@ -0,0 +1,10 @@
+--- rpcbind-1.2.5/systemd/rpcbind.service.in 2018-08-15 16:51:19.000000000
+0200
++++ rpcbind-1.2.5/systemd/rpcbind.service.in.new 2018-08-15
21:11:56.598858968 +0200
+@@ -12,6 +12,7 @@
+ [Service]
+ Type=notify
+ # distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
++EnvironmentFile=/etc/conf.d/rpcbind
+ ExecStart=@_sbindir@/rpcbind $RPCBIND_OPTIONS -w -f
+
+ [Install]
Copied: rpcbind/repos/testing-x86_64/sysusers.d (from rev 461840,
rpcbind/trunk/sysusers.d)
===================================================================
--- testing-x86_64/sysusers.d (rev 0)
+++ testing-x86_64/sysusers.d 2022-11-15 21:38:59 UTC (rev 461841)
@@ -0,0 +1 @@
+u rpc 32 "Rpcbind Daemon" /var/lib/rpcbind
Copied: rpcbind/repos/testing-x86_64/tmpfiles.d (from rev 461840,
rpcbind/trunk/tmpfiles.d)
===================================================================
--- testing-x86_64/tmpfiles.d (rev 0)
+++ testing-x86_64/tmpfiles.d 2022-11-15 21:38:59 UTC (rev 461841)
@@ -0,0 +1 @@
+d /var/lib/rpcbind 0700 rpc rpc
