diff options
Diffstat (limited to 'sys-kernel')
| -rw-r--r-- | sys-kernel/aa-sources/ChangeLog | 6 | ||||
| -rw-r--r-- | sys-kernel/aa-sources/Manifest | 5 | ||||
| -rw-r--r-- | sys-kernel/aa-sources/aa-sources-2.6.5-r5.ebuild | 4 | ||||
| -rw-r--r-- | sys-kernel/aa-sources/files/aa-sources-2.6.5.IPTables-RDoS.patch | 11 |
4 files changed, 21 insertions, 5 deletions
diff --git a/sys-kernel/aa-sources/ChangeLog b/sys-kernel/aa-sources/ChangeLog index 837609bd2715..2af8e1030fef 100644 --- a/sys-kernel/aa-sources/ChangeLog +++ b/sys-kernel/aa-sources/ChangeLog @@ -1,6 +1,10 @@ # ChangeLog for sys-kernel/aa-sources # Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/sys-kernel/aa-sources/ChangeLog,v 1.42 2004/06/29 17:10:53 plasmaroo Exp $ +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/aa-sources/ChangeLog,v 1.43 2004/06/30 17:56:49 plasmaroo Exp $ + + 30 Jun 2004; <plasmaroo@gentoo.org> aa-sources-2.6.5-r5.ebuild, + +files/aa-sources-2.6.5.IPTables-RDoS.patch: + Added a patch for the IPTables RDoS vulnerability; bug #55694. 29 Jun 2004; <plasmaroo@gentoo.org> aa-sources-2.4.23-r2.ebuild, +files/aa-sources-2.4.23.CAN-2004-0495.patch, diff --git a/sys-kernel/aa-sources/Manifest b/sys-kernel/aa-sources/Manifest index 6b6ca972c6b7..e592f5f1d1ce 100644 --- a/sys-kernel/aa-sources/Manifest +++ b/sys-kernel/aa-sources/Manifest @@ -1,11 +1,12 @@ -MD5 17c438e401b7c2687585ea649d4061ef ChangeLog 7052 +MD5 7e9f7db941bb3e52b43ded7d8c701042 ChangeLog 7231 MD5 399eb7607b8f1f3f597e93566b1bda7c metadata.xml 453 -MD5 04d913fae4967ab50b77dbba5ca53c83 aa-sources-2.6.5-r5.ebuild 825 +MD5 3c5f81195e8ed4fe2f2e3b6d73778dae aa-sources-2.6.5-r5.ebuild 863 MD5 6b0ff5fa57d5fcdf7e915098a6399a28 aa-sources-2.4.23-r2.ebuild 3515 MD5 eaeda68a619caaddd5b8fdc5e7c39932 files/aa-sources-2.4.23.CAN-2004-0177.patch 384 MD5 c9da1bc82b906f6abc648c056e7bf662 files/aa-sources-2.4.23.FPULockup-53804.patch 354 MD5 de75cfa969ed092578d9ddda6c5be334 files/aa-sources-2.4.23.CAN-2004-0181.patch 1233 MD5 7b08e3780e3b7c8c671db00ce6010125 files/digest-aa-sources-2.4.23-r2 126 +MD5 39361f8d16b1fe5891aab62e92f8cd30 files/aa-sources-2.6.5.IPTables-RDoS.patch 390 MD5 6f4bba5dda7a99d77b1564f5489fef6e files/aa-sources-2.6.5.CAN-2004-0075.patch 1129 MD5 e2e2b545b6fcdcecf49e33798efa5b84 files/aa-sources-2.4.23.rtc_fix.patch 7073 MD5 e77a93fdf26f06cf3ea5080b27211725 files/aa-sources-2.4.23.CAN-2003-0985.patch 414 diff --git a/sys-kernel/aa-sources/aa-sources-2.6.5-r5.ebuild b/sys-kernel/aa-sources/aa-sources-2.6.5-r5.ebuild index 23ca268068b2..34577d4161c2 100644 --- a/sys-kernel/aa-sources/aa-sources-2.6.5-r5.ebuild +++ b/sys-kernel/aa-sources/aa-sources-2.6.5-r5.ebuild @@ -1,8 +1,8 @@ # Copyright 1999-2004 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/sys-kernel/aa-sources/aa-sources-2.6.5-r5.ebuild,v 1.5 2004/06/24 22:55:10 agriffis Exp $ +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/aa-sources/aa-sources-2.6.5-r5.ebuild,v 1.6 2004/06/30 17:56:49 plasmaroo Exp $ -UNIPATCH_LIST="${DISTDIR}/${KV}.bz2 ${FILESDIR}/${P}.CAN-2004-0075.patch ${FILESDIR}/${P}.CAN-2004-0228.patch ${FILESDIR}/${P}.CAN-2004-0229.patch ${FILESDIR}/${P}.CAN-2004-0427.patch ${FILESDIR}/${P}.FPULockup-53804.patch" +UNIPATCH_LIST="${DISTDIR}/${KV}.bz2 ${FILESDIR}/${P}.CAN-2004-0075.patch ${FILESDIR}/${P}.CAN-2004-0228.patch ${FILESDIR}/${P}.CAN-2004-0229.patch ${FILESDIR}/${P}.CAN-2004-0427.patch ${FILESDIR}/${P}.FPULockup-53804.patch ${FILESDIR}/${P}.IPTables-RDoS.patch" K_PREPATCHED="yes" UNIPATCH_STRICTORDER="yes" diff --git a/sys-kernel/aa-sources/files/aa-sources-2.6.5.IPTables-RDoS.patch b/sys-kernel/aa-sources/files/aa-sources-2.6.5.IPTables-RDoS.patch new file mode 100644 index 000000000000..8f89d1605c9a --- /dev/null +++ b/sys-kernel/aa-sources/files/aa-sources-2.6.5.IPTables-RDoS.patch @@ -0,0 +1,11 @@ +--- net/ipv4/netfilter/ip_tables.c.orig 2004-04-04 05:36:47.000000000 +0200 ++++ net/ipv4/netfilter/ip_tables.c 2004-06-24 21:24:26.000000000 +0200 +@@ -1461,7 +1461,7 @@ + int *hotdrop) + { + /* tcp.doff is only 4 bits, ie. max 15 * 4 bytes */ +- char opt[60 - sizeof(struct tcphdr)]; ++ u_int8_t opt[60 - sizeof(struct tcphdr)]; + unsigned int i; + + duprintf("tcp_match: finding option\n"); |