From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] sysklogd: Update to 1.5.1
Date: Sun, 29 Jan 2017 19:35:18 +0000
Message-ID: <1485718518.3907.4.camel@ipfire.org>
In-Reply-To: <20170129133743.14184-1-matthias.fischer@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1304326440174649550=="
List-Id: <development.lists.ipfire.org>

--===============1304326440174649550==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi,

On Sun, 2017-01-29 at 14:37 +0100, Matthias Fischer wrote:
> ...and now to something completely different... ;-)
>=20
> Changelog:
>=20
> - Bugfix against invalid PRI values (CVE-2014-3634)
>=20
> CVE-2014-3634:
> "...sysklogd 1.5 and earlier allows remote attackers to cause a
> denial of service (crash), possibly execute arbitrary code,
> or have other unspecified impact via a crafted priority (PRI)
> value that triggers an out-of-bounds array access."
>=20
> Nothing good for a firewall...and besides, 'sysklogd' wasn't updated
> since 2010.

Very very true.

If we are behind on any other important package, please feel free to
send updates, as always.

Best,
-Michael

>=20
> Best,
> Matthias
>=20
> Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
> ---
> =C2=A0config/rootfiles/common/sysklogd | 2 ++
> =C2=A0lfs/sysklogd=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0| 9 +++-=
-----
> =C2=A02 files changed, 5 insertions(+), 6 deletions(-)
>=20
> diff --git a/config/rootfiles/common/sysklogd
> b/config/rootfiles/common/sysklogd
> index 9792097ce..f5d55c220 100644
> --- a/config/rootfiles/common/sysklogd
> +++ b/config/rootfiles/common/sysklogd
> @@ -1,6 +1,8 @@
> =C2=A0usr/sbin/klogd
> =C2=A0usr/sbin/syslogd
> +#usr/share/man/man5/syslog.conf.5
> =C2=A0#usr/share/man/man8/klogd.8
> =C2=A0#usr/share/man/man8/sysklogd.8
> +#usr/share/man/man8/syslogd.8
> =C2=A0var/log/dhcpcd.log
> =C2=A0var/log/messages
> diff --git a/lfs/sysklogd b/lfs/sysklogd
> index ca6110a6d..75bde5fee 100644
> --- a/lfs/sysklogd
> +++ b/lfs/sysklogd
> @@ -1,7 +1,7 @@
> =C2=A0####################################################################
> ###########
> =C2=A0#=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0#
> =C2=A0# IPFire.org - A linux based
> firewall=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0#
> -# Copyright (C) 2007=C2=A0=C2=A0Michael Tremer & Christian
> Schmidt=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0#
> +# Copyright (C) 2007-2017=C2=A0=C2=A0IPFire Team=C2=A0=C2=A0<info(a)ipfire=
.org>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0#
> =C2=A0#=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0#
> =C2=A0# This program is free software: you can redistribute it and/or
> modify=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0#
> =C2=A0# it under the terms of the GNU General Public License as published
> by=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0#
> @@ -24,7 +24,7 @@
> =C2=A0
> =C2=A0include Config
> =C2=A0
> -VER=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=3D 1.5
> +VER=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=3D 1.5.1
> =C2=A0
> =C2=A0THISAPP=C2=A0=C2=A0=C2=A0=C2=A0=3D sysklogd-$(VER)
> =C2=A0DL_FILE=C2=A0=C2=A0=C2=A0=C2=A0=3D $(THISAPP).tar.gz
> @@ -40,7 +40,7 @@ objects =3D $(DL_FILE)
> =C2=A0
> =C2=A0$(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
> =C2=A0
> -$(DL_FILE)_MD5 =3D e053094e8103165f98ddafe828f6ae4b
> +$(DL_FILE)_MD5 =3D c70599ab0d037fde724f7210c2c8d7f8
> =C2=A0
> =C2=A0install : $(TARGET)
> =C2=A0
> @@ -70,9 +70,6 @@ $(subst %,%_MD5,$(objects)) :
> =C2=A0$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
> =C2=A0	@$(PREBUILD)
> =C2=A0	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf
> $(DIR_DL)/$(DL_FILE)
> -	#cd $(DIR_APP) && patch -Np1 <
> $(DIR_SRC)/src/patches/$(THISAPP)-fixes-1.patch
> -	#cd $(DIR_APP) && patch -Np1 <
> $(DIR_SRC)/src/patches/$(THISAPP)-8bit-1.patch
> -	#cd $(DIR_APP) && patch -Np1 <
> $(DIR_SRC)/src/patches/$(THISAPP)_xen_empty_buffer_check.patch
> =C2=A0	cd $(DIR_APP) && make $(MAKETUNING)
> =C2=A0	cd $(DIR_APP) && make install
> =C2=A0	touch /var/log/{dhcpcd.log,messages}

--===============1304326440174649550==
Content-Type: application/pgp-signature
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="signature.asc"
MIME-Version: 1.0
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--===============1304326440174649550==--