This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 3.x development tree".

The branch, master has been updated via cfd8f205287154f02fc1c37c6a7aee8db086bc5b (commit) via 3cf85f498bf4ece9b287727dd0b445f66b311026 (commit) from 909e15a83786f929d31af9387fdc772041bf6d7a (commit)

Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.

- Log ----------------------------------------------------------------- commit cfd8f205287154f02fc1c37c6a7aee8db086bc5b Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Aug 23 20:33:15 2017 +0100

strongswan: Update to 5.6.0

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation when verifying RSA signatures, which requires decryption with the operation m^e mod n, where m is the signature, and e and n are the exponent and modulus of the public key. The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this. So if m equals n the calculation results in 0, in which case mpz_export() returns NULL. This result wasn't handled properly causing a null-pointer dereference.

This vulnerability has been registered as CVE-2017-11185.

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 3cf85f498bf4ece9b287727dd0b445f66b311026 Author: Michael Tremer michael.tremer@ipfire.org Date: Sun Aug 13 13:12:23 2017 +0100

gcc: Update to 6.4.0

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

-----------------------------------------------------------------------

Summary of changes: gcc/gcc.nm | 4 ++-- gcc/patches/gcc49-libstdc++-docs.patch0 | 26 ------------------------- strongswan/patches/compile-fix-glibc-2.26.patch | 11 +++++++++++ strongswan/strongswan.nm | 4 ++-- 4 files changed, 15 insertions(+), 30 deletions(-) delete mode 100644 gcc/patches/gcc49-libstdc++-docs.patch0 create mode 100644 strongswan/patches/compile-fix-glibc-2.26.patch

Difference in files: diff --git a/gcc/gcc.nm b/gcc/gcc.nm index 8ec13d9..c58dd9e 100644 --- a/gcc/gcc.nm +++ b/gcc/gcc.nm @@ -7,8 +7,8 @@ build_graphite = 1

name = gcc -version = 6.2.0 -release = 3 +version = 6.4.0 +release = 1

maintainer = Michael Tremer michael.tremer@ipfire.org groups = Development/Compilers diff --git a/gcc/patches/gcc49-libstdc++-docs.patch0 b/gcc/patches/gcc49-libstdc++-docs.patch0 deleted file mode 100644 index 2c8c2b8..0000000 --- a/gcc/patches/gcc49-libstdc++-docs.patch0 +++ /dev/null @@ -1,26 +0,0 @@ ---- libstdc++-v3/doc/html/index.html.jj 2011-01-03 12:53:21.282829010 +0100 -+++ libstdc++-v3/doc/html/index.html 2011-01-04 18:06:28.999851145 +0100 -@@ -5,6 +5,8 @@ - <a class="link" href="http://www.fsf.org/" target="_top">FSF - </a> - </p><p> -+ Release 4.9.1 -+ </p><p> - Permission is granted to copy, distribute and/or modify this - document under the terms of the GNU Free Documentation - License, Version 1.2 or any later version published by the ---- libstdc++-v3/doc/html/api.html.jj 2011-01-03 12:53:21.000000000 +0100 -+++ libstdc++-v3/doc/html/api.html 2011-01-04 18:12:01.672757784 +0100 -@@ -18,8 +18,11 @@ - member functions for the library classes, finding out what is in a - particular include file, looking at inheritance diagrams, etc. - </p><p> -- The API documentation, rendered into HTML, can be viewed online: -+ The API documentation, rendered into HTML, can be viewed here: - </p><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p> -+ <a class="link" href="api/index.html" target="_top">for the 4.9.1 release, local -+ </a> -+ </p></li><li class="listitem"><p> - <a class="link" href="http://gcc.gnu.org/onlinedocs/libstdc++/libstdc++-html-USERS-3.4/index.html" target="_top">for the 3.4 release - </a> - </p></li><li class="listitem"><p> diff --git a/strongswan/patches/compile-fix-glibc-2.26.patch b/strongswan/patches/compile-fix-glibc-2.26.patch new file mode 100644 index 0000000..a79b210 --- /dev/null +++ b/strongswan/patches/compile-fix-glibc-2.26.patch @@ -0,0 +1,11 @@ +--- a/src/libstrongswan/utils/utils/memory.h~ 2017-08-23 19:27:47.033658351 +0000 ++++ b/src/libstrongswan/utils/utils/memory.h 2017-08-23 19:28:09.468390261 +0000 +@@ -22,6 +22,8 @@ + #ifndef MEMORY_H_ + #define MEMORY_H_ + ++#include <stdint.h> ++ + /** + * Helper function that compares two binary blobs for equality + */ diff --git a/strongswan/strongswan.nm b/strongswan/strongswan.nm index dd7a0a4..949ebd7 100644 --- a/strongswan/strongswan.nm +++ b/strongswan/strongswan.nm @@ -4,8 +4,8 @@ ###############################################################################

name = strongswan -version = 5.5.3 -release = 3 +version = 5.6.0 +release = 1

groups = Networking/VPN url = http://www.strongswan.org/

hooks/post-receive -- IPFire 3.x development tree