From mboxrd@z Thu Jan  1 00:00:00 1970
From: Matthias Fischer <matthias.fischer@ipfire.org>
To: development@lists.ipfire.org
Subject: [PATCH] sysklogd: Update to 1.5.1
Date: Sun, 29 Jan 2017 14:37:43 +0100
Message-ID: <20170129133743.14184-1-matthias.fischer@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1330626572250521845=="
List-Id: <development.lists.ipfire.org>

--===============1330626572250521845==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

...and now to something completely different... ;-)

Changelog:

- Bugfix against invalid PRI values (CVE-2014-3634)

CVE-2014-3634:
"...sysklogd 1.5 and earlier allows remote attackers to cause a
denial of service (crash), possibly execute arbitrary code,
or have other unspecified impact via a crafted priority (PRI)
value that triggers an out-of-bounds array access."

Nothing good for a firewall...and besides, 'sysklogd' wasn't updated since 20=
10.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
---
 config/rootfiles/common/sysklogd | 2 ++
 lfs/sysklogd                     | 9 +++------
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/config/rootfiles/common/sysklogd b/config/rootfiles/common/syskl=
ogd
index 9792097ce..f5d55c220 100644
--- a/config/rootfiles/common/sysklogd
+++ b/config/rootfiles/common/sysklogd
@@ -1,6 +1,8 @@
 usr/sbin/klogd
 usr/sbin/syslogd
+#usr/share/man/man5/syslog.conf.5
 #usr/share/man/man8/klogd.8
 #usr/share/man/man8/sysklogd.8
+#usr/share/man/man8/syslogd.8
 var/log/dhcpcd.log
 var/log/messages
diff --git a/lfs/sysklogd b/lfs/sysklogd
index ca6110a6d..75bde5fee 100644
--- a/lfs/sysklogd
+++ b/lfs/sysklogd
@@ -1,7 +1,7 @@
 ############################################################################=
###
 #                                                                           =
  #
 # IPFire.org - A linux based firewall                                       =
  #
-# Copyright (C) 2007  Michael Tremer & Christian Schmidt                    =
  #
+# Copyright (C) 2007-2017  IPFire Team  <info(a)ipfire.org>                 =
    #
 #                                                                           =
  #
 # This program is free software: you can redistribute it and/or modify      =
  #
 # it under the terms of the GNU General Public License as published by      =
  #
@@ -24,7 +24,7 @@
=20
 include Config
=20
-VER        =3D 1.5
+VER        =3D 1.5.1
=20
 THISAPP    =3D sysklogd-$(VER)
 DL_FILE    =3D $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects =3D $(DL_FILE)
=20
 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
=20
-$(DL_FILE)_MD5 =3D e053094e8103165f98ddafe828f6ae4b
+$(DL_FILE)_MD5 =3D c70599ab0d037fde724f7210c2c8d7f8
=20
 install : $(TARGET)
=20
@@ -70,9 +70,6 @@ $(subst %,%_MD5,$(objects)) :
 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
-	#cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/$(THISAPP)-fixes-1.pa=
tch
-	#cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/$(THISAPP)-8bit-1.pat=
ch
-	#cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/$(THISAPP)_xen_empty_=
buffer_check.patch
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	touch /var/log/{dhcpcd.log,messages}
--=20
2.11.0


--===============1330626572250521845==--