diff options
author | V3n3RiX <venerix@redcorelinux.org> | 2020-04-25 11:37:10 +0100 |
---|---|---|
committer | V3n3RiX <venerix@redcorelinux.org> | 2020-04-25 11:37:10 +0100 |
commit | 38423c67c8a23f6a1bc42038193182e2da3116eb (patch) | |
tree | 04e2cf4bd43601b77daa79fe654e409187093c5e /net-ftp/proftpd | |
parent | 623ee73d661e5ed8475cb264511f683407d87365 (diff) |
gentoo resync : 25.04.2020
Diffstat (limited to 'net-ftp/proftpd')
-rw-r--r-- | net-ftp/proftpd/Manifest | 7 | ||||
-rw-r--r-- | net-ftp/proftpd/files/proftpd-1.3.6-EINTR-like-EAGAIN.patch | 54 | ||||
-rw-r--r-- | net-ftp/proftpd/files/proftpd-1.3.6-mod_copy.patch | 96 | ||||
-rw-r--r-- | net-ftp/proftpd/files/proftpd-1.3.6-mysql-8.patch | 24 | ||||
-rw-r--r-- | net-ftp/proftpd/files/proftpd-1.3.6-sighup-crash.patch | 81 | ||||
-rw-r--r-- | net-ftp/proftpd/files/proftpd-1.3.6b-tls-crl-crash.patch | 40 | ||||
-rw-r--r-- | net-ftp/proftpd/proftpd-1.3.7_rc3.ebuild | 2 |
7 files changed, 2 insertions, 302 deletions
diff --git a/net-ftp/proftpd/Manifest b/net-ftp/proftpd/Manifest index 891d30384e86..e335eea015ba 100644 --- a/net-ftp/proftpd/Manifest +++ b/net-ftp/proftpd/Manifest @@ -1,14 +1,9 @@ -AUX proftpd-1.3.6-EINTR-like-EAGAIN.patch 2271 BLAKE2B e040216b0c7fa3590b26f62363680e56b01c6d88bc22d878ab1a29370b3916af569f7a50800d990135826cd7cc371f38d9619a775d97bd717ad8a52ee7e25e04 SHA512 699a42fc05b64309f55e3d4f2e9b5acc3cd05f4e81ec724227ff7a0800d62f00cd08b05fe6a806735e854b4eac01e0bb2192f7469fefd94c7f0981ed3472cb14 -AUX proftpd-1.3.6-mod_copy.patch 3069 BLAKE2B 08b9afdfa32e17d50d1762f4bf8a932b4c5106b91814b707b92e5745835f79c569d07ee18021c53aa961970a7167760a90e967388f0ac64956cde3899d72942c SHA512 2df01ce88d340b097523c10e0287c0a02484daaa11c3acd8975471c2cd346429fe9ef84f372943251af264d8d2713dfd1d259fb7fb30bc6aa75fab7559e8b4ef -AUX proftpd-1.3.6-mysql-8.patch 750 BLAKE2B e8d9a48b2af603f1b50298ba5102242d575eb9b2321508a574ec3e6e0a0e54d058d248706aa2bfc9b85172ee6404ce5e16354e600e5332d8bc388649d10751e9 SHA512 15213f045427611f8ab5af9e064f4aadd448514a1789558f65c83b0703710df547178c15b254a368c1913c82d9fb533c47fd95d42326527809d4150191869bdd -AUX proftpd-1.3.6-sighup-crash.patch 2145 BLAKE2B 60e24fe7f8ee4fdac4a95b73c5e6d76862d6163e6dfbc1a15970f18ab6a38e715bace0adad487606a29dc9de39bbb2987b3d4c5e0283d6468864f877c2030b6f SHA512 d16515e7bf14d1d3a147b93fea330b0342db3ad501f366dd4f1d872262829902cb3c197fe68b20b86048bc3bbe0e5c22470d6d81bf08c72c192a33770c3d499a AUX proftpd-1.3.6-use-trace.patch 477 BLAKE2B f69adc68327f467b44dd19d0da66388945c0d1c35ce734ab8fa5e618ca7dbf1164e785e37a6dcb0e9f8ab671ece0b4e711b6614947f39b55310ffd4522df5e07 SHA512 90164f799d1f6c3768a30161a40d5c369e576c3b1a875047ef65c1224d3e18cf1f4dd5145c5ff6f7aeda80135134df58a1d57046129b922514cb56d1de97f13e AUX proftpd-1.3.6_rc4-diskuse-refresh-api.patch 576 BLAKE2B ce4522896a81fed326ae234810491005c5165fa1bbcd0b64d785c6d070f2ac80c763e75f813655696a9405284cf27c82293026e2d8c68936d7794c20e886dacb SHA512 08a0674600944ff5d13033651a1dea1647c9d22f18efe6505e051b36566bf357bc41439d2dd7c2900e873ef8d600ba7f16332680dda1abb2529808fbe5a4e573 AUX proftpd-1.3.6_rc4-gss-refresh-api.patch 1868 BLAKE2B ff50d3834d6cc0970256dcada8a14db6681440494abc24ccbf53ea5baef2362a9174de3bf7e3e07d562f30a55492735137efa91a9dd09676dbb95e624f3ae77f SHA512 4cc235bdb60ea4c84794d4347826b040057067d8283dcfcb795d5d25a156de480df7d897078ab8ab4faf12d4fc9e714a55f723ce27c9397bc2223550597df674 AUX proftpd-1.3.6_rc4-msg-refresh-api.patch 903 BLAKE2B e335f81685552b0b9a05af3700ce4a09d7f31ca9b24c66e1a1306bbe26c243b553c1cb81c13cc9593ae36e93b03f28faeb64fe2ae2f834575e9dee402f73ee55 SHA512 d0dcc467289b4107aecee66edf122667b2fbb9b1f1a6a6ecea517f286090d22682200b9d11f503465cb9b5387e8fb749cc09c3033825282450fe1d6c0a4bb11d AUX proftpd-1.3.6_rc4-vroot-refresh-api.patch 736 BLAKE2B 9f3c4a1f80a27ce7e6f9348153584bc1134e63ad4c839927b7680439966003c76c7a25821be0f3431c472092ef5c8386166b372645f498fb655559fd683c3e6e SHA512 9cd98e2fb8c17d2ca38f5f7a20f5c6ffb03da7f51e53542237992bd2b98b2ef5b5fc0634cd7f5eef24fba8a601703b70ff7d0404e1c5103394e9fda260b815cd AUX proftpd-1.3.6a-fix-libcheck.patch 726 BLAKE2B e971ccfd5d5cd708054096eef3d8b4910d380933b79d7616225194f71213a07c14139cc7bc76b9fcb4f86f0a97672288837d5a1e7ce68673665db65e75328252 SHA512 8e4aface4c7ca010808e0531b896f8554107ad66c7e1019f25168e71e5f8d2df3673511dd4717eb8bdeedb2ca07bd6a587caca4955c4903991bcfb020ed72636 -AUX proftpd-1.3.6b-tls-crl-crash.patch 1466 BLAKE2B dc8f5cd38d07d2194966005eaf3d52b0230a763e35cb3ccbdd7c603eed5fee26a76a49feb31c6422a8adddd355059f82b6b07ac577a328b90e3e35ee5ece242b SHA512 b32281c717c8b1d1cd1ea86bebb6dc8577596e8dc97ad7fc797c83d34a5bbce1141a72f021d59e81be6437844411635c563baf84ef18eb9c5d576e84c80a786d AUX proftpd-1.3.6c-gcc-10.patch 653 BLAKE2B c756979c01e40b9bb83da39a05e5b8cf49db3e6954df7e31645357411b053b21a3dbc073429e9156ab40d9137286ef5c5469d35781eb3ca56ff4b3e7d09fc382 SHA512 0b735b97b2ccc849d12754323de97b72e049a5a5bca869e76c167ec2527e7e773cf53d4b41645d2a8532385edd23b905f38fe3ab0ad3c44923c1d5ff61557c3a AUX proftpd-tmpfiles.d.conf 34 BLAKE2B 03da2e04c7e0d4c6e889e4414a205942f0762a1ae856d16f95abb1d2e927d68f583ad5bbdbf142b32b141cd82e9288f2ef1faf459cbe8433e2e1127d3b30d686 SHA512 aa6ffbf15e4275941837306259fb426608e82e45a2da4b99c5d7778d11b8c9341e3a12ae9b751d0e173635239b6f1b20f0431be17296c005a83525a48327fa52 AUX proftpd.conf.sample 1275 BLAKE2B db10306f79544b344856e065946e9ae0fa37d43507185f7d2407f23a962750a05bb2682e7c97e3979ca42dfe35921c3db7e98c095431796d82144869df0e324e SHA512 1c26f3e98ed07d89192c640f7823af168c045abee6ab076791aee9d50be5446be870a189979df4b828e7ae907dd40a346f1b92998fa39195195bfada4061c5df @@ -25,5 +20,5 @@ DIST proftpd-mod-diskuse-0.9.tar.gz 18596 BLAKE2B 38c704c8607f0f93b080e77fe793cf DIST proftpd-mod-msg-0.4.1.tar.gz 8082 BLAKE2B 970b46b19d25bac22ecb01495270a523997a0b7d5b53b9470b4744b919adcf03d5bcee2df85ba88c4a4c20a9fc30dc01459ffb58c5dae8e78a52a7379bf36f11 SHA512 38ea63b1d355e1e10a6a4477596bf3fa28529a871c9fb8dbf093b5317f0743ef9cb59b986d0b8c1c7ed932dad5d5d571883d596fad2d3b793431824db4487012 DIST proftpd-mod_clamav-0.14rc2.tar.gz 19710 BLAKE2B 3435e198cf029337904d4666910414124a3b7e1529d4b12f7acd8a9be563009fff4d9a30eb132a2d7361d2c830e5601c4a00a8814282585b6915e991cc29bc13 SHA512 b8e56880fadf36513215fa4c20be6db7cdf1274337072a9b29c3c3477b3de4743ebcdb1179572ec4cb1501fac0064330c855b1f818bf0cc52f0e91170f059772 EBUILD proftpd-1.3.6c.ebuild 8678 BLAKE2B 9f02b99da55a9528466538a0d889bb94dae0633f44f2eb7fcd8feb7d0bdeca9fa299d2b7e2ed8ae3d43ac457b47f908e51cc9f27e79caba5688668221be29b92 SHA512 f74170b4ddbced1a35db736e755420a10281c9e4bbdc8c5fc9ee387260fee97b5145ed5e8aae340a869a1648f7b9dab77337970c604f8fe6d567ab1e21be21a3 -EBUILD proftpd-1.3.7_rc3.ebuild 8630 BLAKE2B 334ca9731d3c4b952212d45c3ec7120d6f9135f45fc62da406bb1d580c7173d5c61aee8e0fe409bd47503d8158d3bc519bff547e4b266bc7e7b09375d6753eb2 SHA512 910b5600bdaa9ff8e8d4d0bdf3c749d7f43d480a162430ad3e4bd7e4be35e17e3d327aaff38bc0b6eb32c6a0856188d85b065cbf990c9adb8bd0ea136940d3d3 +EBUILD proftpd-1.3.7_rc3.ebuild 8624 BLAKE2B 68fd4a55032025659ddbba3c1b556e2c33c6b08fdd4422c240636cc1f96423215dcd3cfd9664632f2b5b6a6c72dce7683750cd7a2569b044a45be04a0651ce13 SHA512 5fa038ade54fe40f8da2bd1e3177eb627a8e74a88118b13a01f2ce0d7fe2b78d3d7709b5dbdcada1bcc70c78b51d5910c7285d85a78d99f2d5220d8266b35483 MISC metadata.xml 2930 BLAKE2B f3f8218a737f50599ff687030bd8c84f1818b290d6d89bd6627ab8eb02598d196f1bae03d7b15e4eb02967fb7e0d826cdda10588c8bfe4f8a387a49d70d9cab0 SHA512 c90941671532512e4d085f3c6b4f56f3c2a252a613bf5c978d763fb0f8f9190431a41816f4fddde47e28eaeddcd17a7aef52064e5825499801bcdfbd72745be8 diff --git a/net-ftp/proftpd/files/proftpd-1.3.6-EINTR-like-EAGAIN.patch b/net-ftp/proftpd/files/proftpd-1.3.6-EINTR-like-EAGAIN.patch deleted file mode 100644 index 43608d96492c..000000000000 --- a/net-ftp/proftpd/files/proftpd-1.3.6-EINTR-like-EAGAIN.patch +++ /dev/null @@ -1,54 +0,0 @@ -https://bugs.gentoo.org/695972 -https://github.com/proftpd/proftpd/commit/f09f0c661621eb22cb1ce579194478007ba62866 - -From f09f0c661621eb22cb1ce579194478007ba62866 Mon Sep 17 00:00:00 2001 -From: Justin Maggard <jmaggard@netgear.com> -Date: Tue, 10 Oct 2017 18:20:06 -0700 -Subject: [PATCH] Bug #4319: Treat EINTR like EAGAIN - -This bug described a situation where an ongoing transfer would be -prematurely aborted when one of our timers fired. The timer could have -fired for an unrelated reason, but if we were in the process of reading -or writing with pr_netio_read() or pr_netio_write(), those calls would -be interrupted with errno set to EINTR, and an error would be returned. -Then pr_data_xfer() would abort the transfer. - -EAGAIN was already being handled properly, and we can just use the same -treatment for EINTR so that we only respond to the timers we should -actually care about. ---- - src/data.c | 6 +++--- - 1 file changed, 3 insertions(+), 3 deletions(-) - ---- a/src/data.c -+++ b/src/data.c -@@ -1143,7 +1143,7 @@ int pr_data_xfer(char *cl_buf, size_t cl_size) { - while (len < 0) { - int xerrno = errno; - -- if (xerrno == EAGAIN) { -+ if (xerrno == EAGAIN || xerrno == EINTR) { - /* Since our socket is in non-blocking mode, read(2) can return - * EAGAIN if there is no data yet for us. Handle this by - * delaying temporarily, then trying again. -@@ -1265,7 +1265,7 @@ int pr_data_xfer(char *cl_buf, size_t cl_size) { - while (len < 0) { - int xerrno = errno; - -- if (xerrno == EAGAIN) { -+ if (xerrno == EAGAIN || xerrno == EINTR) { - /* Since our socket is in non-blocking mode, read(2) can return - * EAGAIN if there is no data yet for us. Handle this by - * delaying temporarily, then trying again. -@@ -1362,7 +1362,7 @@ int pr_data_xfer(char *cl_buf, size_t cl_size) { - while (bwrote < 0) { - int xerrno = errno; - -- if (xerrno == EAGAIN) { -+ if (xerrno == EAGAIN || xerrno == EINTR) { - /* Since our socket is in non-blocking mode, write(2) can return - * EAGAIN if there is not enough from for our data yet. Handle - * this by delaying temporarily, then trying again. --- -2.23.0 - diff --git a/net-ftp/proftpd/files/proftpd-1.3.6-mod_copy.patch b/net-ftp/proftpd/files/proftpd-1.3.6-mod_copy.patch deleted file mode 100644 index 40d912eb2b50..000000000000 --- a/net-ftp/proftpd/files/proftpd-1.3.6-mod_copy.patch +++ /dev/null @@ -1,96 +0,0 @@ -https://bugs.gentoo.org/690528 -CVE-2019-12815 - -From a73dbfe3b61459e7c2806d5162b12f0957990cb3 Mon Sep 17 00:00:00 2001 -From: TJ Saunders <tj@castaglia.org> -Date: Wed, 17 Jul 2019 09:48:39 -0700 -Subject: [PATCH] Backport of fix for Bug#4372 to the 1.3.6 branch. - ---- - NEWS | 1 + - contrib/mod_copy.c | 36 +++++++++++++++++++++++++++++++++--- - 2 files changed, 34 insertions(+), 3 deletions(-) - ---- a/contrib/mod_copy.c -+++ b/contrib/mod_copy.c -@@ -1,7 +1,7 @@ - /* - * ProFTPD: mod_copy -- a module supporting copying of files on the server - * without transferring the data to the client and back -- * Copyright (c) 2009-2016 TJ Saunders -+ * Copyright (c) 2009-2019 TJ Saunders - * - * This program is free software; you can redistribute it and/or modify - * it under the terms of the GNU General Public License as published by -@@ -657,7 +657,7 @@ MODRET copy_copy(cmd_rec *cmd) { - MODRET copy_cpfr(cmd_rec *cmd) { - register unsigned int i; - int res; -- char *path = ""; -+ char *cmd_name, *path = ""; - unsigned char *authenticated = NULL; - - if (copy_engine == FALSE) { -@@ -705,6 +705,21 @@ MODRET copy_cpfr(cmd_rec *cmd) { - path = pstrcat(cmd->tmp_pool, path, *path ? " " : "", decoded_path, NULL); - } - -+ cmd_name = cmd->argv[0]; -+ pr_cmd_set_name(cmd, "SITE_CPFR"); -+ if (!dir_check(cmd->tmp_pool, cmd, G_READ, path, NULL)) { -+ int xerrno = EPERM; -+ -+ pr_cmd_set_name(cmd, cmd_name); -+ pr_response_add_err(R_550, "%s: %s", (char *) cmd->argv[3], -+ strerror(xerrno)); -+ -+ pr_cmd_set_errno(cmd, xerrno); -+ errno = xerrno; -+ return PR_ERROR(cmd); -+ } -+ pr_cmd_set_name(cmd, cmd_name); -+ - res = pr_filter_allow_path(CURRENT_CONF, path); - switch (res) { - case 0: -@@ -758,6 +773,7 @@ MODRET copy_cpfr(cmd_rec *cmd) { - MODRET copy_cpto(cmd_rec *cmd) { - register unsigned int i; - const char *from, *to = ""; -+ char *cmd_name; - unsigned char *authenticated = NULL; - - if (copy_engine == FALSE) { -@@ -816,6 +832,20 @@ MODRET copy_cpto(cmd_rec *cmd) { - - to = dir_canonical_vpath(cmd->tmp_pool, to); - -+ cmd_name = cmd->argv[0]; -+ pr_cmd_set_name(cmd, "SITE_CPTO"); -+ if (!dir_check(cmd->tmp_pool, cmd, G_WRITE, to, NULL)) { -+ int xerrno = EPERM; -+ -+ pr_cmd_set_name(cmd, cmd_name); -+ pr_response_add_err(R_550, "%s: %s", to, strerror(xerrno)); -+ -+ pr_cmd_set_errno(cmd, xerrno); -+ errno = xerrno; -+ return PR_ERROR(cmd); -+ } -+ pr_cmd_set_name(cmd, cmd_name); -+ - if (copy_paths(cmd->tmp_pool, from, to) < 0) { - int xerrno = errno; - const char *err_code = R_550; -@@ -940,7 +970,7 @@ static conftable copy_conftab[] = { - - static cmdtable copy_cmdtab[] = { - { CMD, C_SITE, G_WRITE, copy_copy, FALSE, FALSE, CL_MISC }, -- { CMD, C_SITE, G_DIRS, copy_cpfr, FALSE, FALSE, CL_MISC }, -+ { CMD, C_SITE, G_READ, copy_cpfr, FALSE, FALSE, CL_MISC }, - { CMD, C_SITE, G_WRITE, copy_cpto, FALSE, FALSE, CL_MISC }, - { POST_CMD, C_PASS, G_NONE, copy_post_pass, FALSE, FALSE }, - { LOG_CMD, C_SITE, G_NONE, copy_log_site, FALSE, FALSE }, --- -2.22.0 - diff --git a/net-ftp/proftpd/files/proftpd-1.3.6-mysql-8.patch b/net-ftp/proftpd/files/proftpd-1.3.6-mysql-8.patch deleted file mode 100644 index 4149a6540595..000000000000 --- a/net-ftp/proftpd/files/proftpd-1.3.6-mysql-8.patch +++ /dev/null @@ -1,24 +0,0 @@ -https://bugs.gentoo.org/692434 -https://github.com/proftpd/proftpd/issues/824 ---- a/contrib/mod_sql_mysql.c -+++ b/contrib/mod_sql_mysql.c -@@ -132,6 +132,7 @@ - #include "../contrib/mod_sql.h" - - #include <mysql.h> -+#include <stdbool.h> - - /* The my_make_scrambled_password{,_323} functions are not part of the public - * MySQL API and are not declared in any of the MySQL header files. But the -@@ -495,7 +495,11 @@ MODRET cmd_open(cmd_rec *cmd) { - * http://dev.mysql.com/doc/refman/5.0/en/auto-reconnect.html - */ - if (!(pr_sql_opts & SQL_OPT_NO_RECONNECT)) { -+#if MYSQL_VERSION_ID >= 80000 -+ bool reconnect = true; -+#else - my_bool reconnect = TRUE; -+#endif - mysql_options(conn->mysql, MYSQL_OPT_RECONNECT, &reconnect); - } - #endif diff --git a/net-ftp/proftpd/files/proftpd-1.3.6-sighup-crash.patch b/net-ftp/proftpd/files/proftpd-1.3.6-sighup-crash.patch deleted file mode 100644 index cca550405e11..000000000000 --- a/net-ftp/proftpd/files/proftpd-1.3.6-sighup-crash.patch +++ /dev/null @@ -1,81 +0,0 @@ -https://bugs.gentoo.org/678490 - -From 345aa19ee2a98a3612d9b64a49107461455031a0 Mon Sep 17 00:00:00 2001 -From: TJ Saunders <tj@castaglia.org> -Date: Tue, 18 Jul 2017 23:00:22 -0700 -Subject: [PATCH] Bug#4310: Use of mod_facl as static module causes ProFTPD to - die on SIGHUP/restart. - ---- - modules/mod_facl.c | 35 +++++++++++++++++++++++++++++++---- - 1 file changed, 31 insertions(+), 4 deletions(-) - -diff --git a/modules/mod_facl.c b/modules/mod_facl.c -index b3ac42b7b..258708cf5 100644 ---- a/modules/mod_facl.c -+++ b/modules/mod_facl.c -@@ -1260,16 +1260,34 @@ MODRET set_faclengine(cmd_rec *cmd) { - return PR_HANDLED(cmd); - } - -+/* Event listeners -+ */ -+ -+static void unmount_facl(void) { -+ pr_fs_t *fs; -+ -+ fs = pr_unmount_fs("/", "facl"); -+ if (fs != NULL) { -+ destroy_pool(fs->fs_pool); -+ fs->fs_pool = NULL; -+ return; -+ } -+ -+ if (errno != ENOENT) { -+ pr_log_debug(DEBUG0, MOD_FACL_VERSION -+ ": error unmounting 'facl' FS: %s", strerror(errno)); -+ } -+} -+ - #if defined(PR_SHARED_MODULE) && \ - defined(PR_USE_FACL) && \ - defined(HAVE_POSIX_ACL) - static void facl_mod_unload_ev(const void *event_data, void *user_data) { - if (strcmp("mod_facl.c", (const char *) event_data) == 0) { -+ pr_fs_t *fs; -+ - pr_event_unregister(&facl_module, NULL, NULL); -- if (pr_unregister_fs("/") < 0) { -- pr_log_debug(DEBUG0, MOD_FACL_VERSION -- ": error unregistering 'facl' FS: %s", strerror(errno)); -- } -+ unmount_facl(); - } - } - #endif /* !PR_SHARED_MODULE */ -@@ -1303,6 +1321,14 @@ static void facl_postparse_ev(const void *event_data, void *user_data) { - #endif /* PR_USE_FACL and HAVE_POSIX_ACL */ - } - -+static void facl_restart_ev(const void *event_data, void *user_data) { -+ if (facl_engine == FALSE) { -+ return; -+ } -+ -+ unmount_facl(); -+} -+ - /* Initialization routines - */ - -@@ -1315,6 +1341,7 @@ static int facl_init(void) { - # endif /* !PR_SHARED_MODULE */ - #endif /* PR_USE_FACL and HAVE_POSIX_ACL */ - pr_event_register(&facl_module, "core.postparse", facl_postparse_ev, NULL); -+ pr_event_register(&facl_module, "core.restart", facl_restart_ev, NULL); - - return 0; - } --- -2.20.1 - diff --git a/net-ftp/proftpd/files/proftpd-1.3.6b-tls-crl-crash.patch b/net-ftp/proftpd/files/proftpd-1.3.6b-tls-crl-crash.patch deleted file mode 100644 index 3cfd81867215..000000000000 --- a/net-ftp/proftpd/files/proftpd-1.3.6b-tls-crl-crash.patch +++ /dev/null @@ -1,40 +0,0 @@ -https://bugs.gentoo.org/701814 -https://github.com/proftpd/proftpd/commit/be8e1687819cb665359bd62b4c896ff4b1a09c3f - -From be8e1687819cb665359bd62b4c896ff4b1a09c3f Mon Sep 17 00:00:00 2001 -From: TJ Saunders <tj@castaglia.org> -Date: Sun, 24 Nov 2019 14:03:54 -0800 -Subject: [PATCH] Issue #859, #861: Fix handling of CRL lookups by properly - using issuer for lookups, and guarding against null pointers. - ---- - contrib/mod_tls.c | 7 +++++-- - 1 file changed, 5 insertions(+), 2 deletions(-) - ---- a/contrib/mod_tls.c -+++ b/contrib/mod_tls.c -@@ -9066,10 +9066,10 @@ static int tls_verify_crl(int ok, X509_STORE_CTX *ctx) { - - #if OPENSSL_VERSION_NUMBER >= 0x10100000L && \ - !defined(HAVE_LIBRESSL) -- crls = X509_STORE_CTX_get1_crls(store_ctx, subject); -+ crls = X509_STORE_CTX_get1_crls(store_ctx, issuer); - #elif OPENSSL_VERSION_NUMBER >= 0x10000000L && \ - !defined(HAVE_LIBRESSL) -- crls = X509_STORE_get1_crls(store_ctx, subject); -+ crls = X509_STORE_get1_crls(store_ctx, issuer); - #else - /* Your OpenSSL is before 1.0.0. You really need to upgrade. */ - crls = NULL; -@@ -9088,6 +9088,9 @@ static int tls_verify_crl(int ok, X509_STORE_CTX *ctx) { - ASN1_INTEGER *sn; - - revoked = sk_X509_REVOKED_value(X509_CRL_get_REVOKED(crl), j); -+ if (revoked == NULL) { -+ continue; -+ } - #if OPENSSL_VERSION_NUMBER >= 0x10100000L && \ - !defined(HAVE_LIBRESSL) - sn = X509_REVOKED_get0_serialNumber(revoked); --- -2.24.0 diff --git a/net-ftp/proftpd/proftpd-1.3.7_rc3.ebuild b/net-ftp/proftpd/proftpd-1.3.7_rc3.ebuild index 40523c9d6937..2bbf557ee9bc 100644 --- a/net-ftp/proftpd/proftpd-1.3.7_rc3.ebuild +++ b/net-ftp/proftpd/proftpd-1.3.7_rc3.ebuild @@ -26,7 +26,7 @@ SRC_URI="ftp://ftp.proftpd.org/distrib/source/${P/_/}.tar.gz LICENSE="GPL-2" SLOT="0" -KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~sparc ~x86" +KEYWORDS="~alpha amd64 arm ~hppa ~ia64 ~mips ppc ppc64 sparc x86" IUSE="acl authfile ban +caps case clamav copy ctrls deflate diskuse dso dynmasq exec ifsession ifversion ident ipv6 kerberos ldap libressl log-forensic memcache msg mysql ncurses nls pam +pcre postgres qos radius ratio readme rewrite selinux sftp shaper sitemisc snmp sodium softquota sqlite ssl tcpd test unique-id vroot" |