diff options
author | Peter Volkov <pva@gentoo.org> | 2009-04-09 12:19:30 +0000 |
---|---|---|
committer | Peter Volkov <pva@gentoo.org> | 2009-04-09 12:19:30 +0000 |
commit | 7f7eb93c2243b2a224e77a77b388cb46f531b433 (patch) | |
tree | 47ce1f3e7b570252e830b5d843194fa7c42eac07 | |
parent | Sparc stable, Bug #265522. (diff) | |
download | gentoo-2-7f7eb93c2243b2a224e77a77b388cb46f531b433.tar.gz gentoo-2-7f7eb93c2243b2a224e77a77b388cb46f531b433.tar.bz2 gentoo-2-7f7eb93c2243b2a224e77a77b388cb46f531b433.zip |
Version bump, fixes security bug #264571, thank Robert Buchholz for report.
(Portage version: 2.1.6.11/cvs/Linux x86_64)
-rw-r--r-- | net-analyzer/wireshark/ChangeLog | 8 | ||||
-rw-r--r-- | net-analyzer/wireshark/wireshark-1.0.7.ebuild (renamed from net-analyzer/wireshark/wireshark-1.0.6.ebuild) | 5 | ||||
-rw-r--r-- | net-analyzer/wireshark/wireshark-1.1.2.ebuild | 162 |
3 files changed, 10 insertions, 165 deletions
diff --git a/net-analyzer/wireshark/ChangeLog b/net-analyzer/wireshark/ChangeLog index d94122d03295..fb57f551091f 100644 --- a/net-analyzer/wireshark/ChangeLog +++ b/net-analyzer/wireshark/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for net-analyzer/wireshark # Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/ChangeLog,v 1.160 2009/04/02 17:19:33 armin76 Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/ChangeLog,v 1.161 2009/04/09 12:19:30 pva Exp $ + +*wireshark-1.0.7 (09 Apr 2009) + + 09 Apr 2009; Peter Volkov <pva@gentoo.org> -wireshark-1.0.6.ebuild, + +wireshark-1.0.7.ebuild, -wireshark-1.1.2.ebuild: + Version bump, fixes security bug #264571, thank Robert Buchholz for report. 02 Apr 2009; Raúl Porcel <armin76@gentoo.org> wireshark-1.0.6-r1.ebuild: alpha/ia64 stable wrt #263443 diff --git a/net-analyzer/wireshark/wireshark-1.0.6.ebuild b/net-analyzer/wireshark/wireshark-1.0.7.ebuild index 652de7819b03..2ea2d53f2767 100644 --- a/net-analyzer/wireshark/wireshark-1.0.6.ebuild +++ b/net-analyzer/wireshark/wireshark-1.0.7.ebuild @@ -1,6 +1,6 @@ # Copyright 1999-2009 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/wireshark-1.0.6.ebuild,v 1.7 2009/02/11 17:14:37 dertobi123 Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/wireshark-1.0.7.ebuild,v 1.1 2009/04/09 12:19:30 pva Exp $ EAPI=1 WANT_AUTOMAKE="1.9" @@ -17,7 +17,7 @@ SRC_URI="http://www.wireshark.org/download/src/all-versions/${P}.tar.bz2" LICENSE="GPL-2" SLOT="0" -KEYWORDS="alpha amd64 hppa ia64 ppc ppc64 sparc x86 ~x86-fbsd" +KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd" IUSE="adns gtk ipv6 lua portaudio gnutls gcrypt zlib kerberos threads profile smi +pcap pcre +caps selinux" RDEPEND="zlib? ( sys-libs/zlib ) @@ -61,6 +61,7 @@ src_unpack() { epatch "${FILESDIR}/${PN}-0.99.7-asneeded.patch" epatch "${FILESDIR}/${PN}-0.99.8-as-needed.patch" epatch "${FILESDIR}/${PN}-1.0.5-text2pcap-protos.patch" + epatch "${FILESDIR}/wireshark-1.0-sigpipe.patch" #260457 cd "${S}/epan" epatch "${FILESDIR}/wireshark-except-double-free.diff" diff --git a/net-analyzer/wireshark/wireshark-1.1.2.ebuild b/net-analyzer/wireshark/wireshark-1.1.2.ebuild deleted file mode 100644 index 12a7a0632a82..000000000000 --- a/net-analyzer/wireshark/wireshark-1.1.2.ebuild +++ /dev/null @@ -1,162 +0,0 @@ -# Copyright 1999-2009 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/wireshark-1.1.2.ebuild,v 1.2 2009/03/08 11:54:00 pva Exp $ - -EAPI=1 -inherit autotools libtool flag-o-matic eutils toolchain-funcs - -DESCRIPTION="A network protocol analyzer formerly known as ethereal" -HOMEPAGE="http://www.wireshark.org/" - -# _rc versions has different download location. -[[ -n ${PV#*_rc} && ${PV#*_rc} != ${PV} ]] && { -SRC_URI="http://www.wireshark.org/download/prerelease/${PN}-${PV/_rc/pre}.tar.gz"; -S=${WORKDIR}/${PN}-${PV/_rc/pre} ; } || \ -SRC_URI="http://www.wireshark.org/download/src/${P}.tar.gz" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd" -IUSE="adns ares +gtk ipv6 lua portaudio gnutls gcrypt geoip zlib kerberos threads profile smi +pcap pcre +caps selinux" - -RDEPEND=">=dev-libs/glib-2.4.0:2 - zlib? ( sys-libs/zlib ) - smi? ( net-libs/libsmi ) - gtk? ( >=x11-libs/gtk+-2.4.0:2 - x11-libs/pango - dev-libs/atk ) - gnutls? ( net-libs/gnutls ) - gcrypt? ( dev-libs/libgcrypt ) - pcap? ( net-libs/libpcap ) - pcre? ( dev-libs/libpcre ) - caps? ( sys-libs/libcap ) - kerberos? ( virtual/krb5 ) - portaudio? ( media-libs/portaudio ) - ares? ( >=net-dns/c-ares-1.5 ) - !ares? ( adns? ( net-libs/adns ) ) - geoip? ( dev-libs/geoip ) - lua? ( >=dev-lang/lua-5.1 ) - selinux? ( sec-policy/selinux-wireshark )" - -DEPEND="${RDEPEND} - >=dev-util/pkgconfig-0.15.0 - dev-lang/perl - sys-devel/bison - sys-devel/flex" - -pkg_setup() { - if ! use gtk; then - ewarn "USE=-gtk will means no gui called wireshark will be created and" - ewarn "only command line utils are available" - fi - - if use ares && use adns; then - einfo "You asked for both, ares and adns, but we can use only one of them." - einfo "c-ares supersedes adns resolver thus using c-ares (ares USE flag)." - myconf="$(use_with ares c-ares) --without-adns" - else - myconf="$(use_with adns) $(use_with ares c-ares)" - fi - - # Add group for users allowed to sniff. - enewgroup wireshark -} - -src_unpack() { - unpack ${A} - - # our hardened toolchain bug... - cd "${S}"/epan - epatch "${FILESDIR}/wireshark-except-double-free.diff" - - cd "${S}" - epatch "${FILESDIR}/${PN}-1.1.2--as-needed.patch" - epatch "${FILESDIR}/${P}-misc-warnings.patch" - eautoreconf -} - -src_compile() { - # optimization bug, see bug #165340, bug #40660 - if [[ $(gcc-version) == 3.4 ]] ; then - elog "Found gcc 3.4, forcing -O3 into CFLAGS" - replace-flags -O? -O3 - elif [[ $(gcc-version) == 3.3 || $(gcc-version) == 3.2 ]] ; then - elog "Found <=gcc-3.3, forcing -O into CFLAGS" - replace-flags -O? -O - fi - - # see bug #133092; bugs.wireshark.org/bugzilla/show_bug.cgi?id=1001 - # our hardened toolchain bug - filter-flags -fstack-protector - - # profile and -fomit-frame-pointer are incompatible, bug #215806 - use profile && filter-flags -fomit-frame-pointer - - # Workaround bug #213705. If krb5-config --libs has -lcrypto then pass - # --with-ssl to ./configure. (Mimics code from acinclude.m4). - if use kerberos; then - case `krb5-config --libs` in - *-lcrypto*) myconf="${myconf} --with-ssl" ;; - esac - fi - - # dumpcap requires libcap, setuid-install requires dumpcap - econf $(use_enable gtk wireshark) \ - $(use_enable profile profile-build) \ - $(use_with gnutls) \ - $(use_with gcrypt) \ - $(use_enable ipv6) \ - $(use_enable threads) \ - $(use_with lua) \ - $(use_with kerberos krb5) \ - $(use_with smi libsmi) \ - $(use_with pcap) \ - $(use_with zlib) \ - $(use_with pcre) \ - $(use_with geoip) \ - $(use_with portaudio) \ - $(use_with caps libcap) \ - $(use_enable pcap setuid-install) \ - --sysconfdir=/etc/wireshark \ - ${myconf} - - emake || die "emake failed" -} - -src_install() { - emake DESTDIR="${D}" install || die "emake install failed" - - fowners 0:wireshark /usr/bin/tshark - fperms 6550 /usr/bin/tshark - use pcap && fowners 0:wireshark /usr/bin/dumpcap - use pcap && fperms 6550 /usr/bin/dumpcap - - insinto /usr/include/wiretap - doins wiretap/wtap.h - - # FAQ is not required as is installed from help/faq.txt - dodoc AUTHORS ChangeLog NEWS README{,.bsd,.linux,.macos,.vmware} doc/randpkt.txt - - if use gtk; then - for c in hi lo; do - for d in 16 32 48; do - insinto /usr/share/icons/${c}color/${d}x${d}/apps - newins image/${c}${d}-app-wireshark.png wireshark.png - done - done - insinto /usr/share/applications - doins wireshark.desktop - fi -} - -pkg_postinst() { - echo - ewarn "With version 0.99.7, all function calls that require elevated privileges" - ewarn "have been moved out of the GUI to dumpcap. WIRESHARK CONTAINS OVER ONE" - ewarn "POINT FIVE MILLION LINES OF SOURCE CODE. DO NOT RUN THEM AS ROOT." - ewarn - ewarn "NOTE: To run wireshark as normal user you have to add yourself into" - ewarn "wireshark group. This security measure ensures that only trusted" - ewarn "users allowed to sniff your traffic." - echo -} |