Commit d5456c04 authored by Leonardo Arena's avatar Leonardo Arena

community/keepalived: security upgrade to 2.0.11

CVE-2018-19044, CVE-2018-19045, CVE-2018-19046

Fixes #9823
parent 327df2ce
......@@ -2,12 +2,12 @@
# Contributor: Jakub Jirutka <jakub@jirutka.cz>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=keepalived
pkgver=2.0.7
pkgrel=1
pkgver=2.0.11
pkgrel=0
pkgdesc="Health Checking for Linux Virtual Server & High-Availability"
url="http://www.keepalived.org/"
arch="all"
license="GPL"
license="GPL-2.0-only"
depends="$pkgname-common !$pkgname-snmp"
makedepends="openssl-dev popt-dev linux-headers net-snmp-dev libnl-dev
libnfnetlink-dev automake autoconf"
......@@ -16,12 +16,17 @@ subpackages="$pkgname-doc $pkgname-sample-config:samples:noarch
$pkgname-common $pkgname-snmp"
source="http://www.keepalived.org/software/$pkgname-$pkgver.tar.gz
always-use-pid-dir.patch
fix-bool.patch
$pkgname.initd
$pkgname.confd
"
builddir="$srcdir/$pkgname-$pkgver"
# secfixes:
# 2.0.11-r0:
# - CVE-2018-19044
# - CVE-2018-19045
# - CVE-2018-19046
prepare() {
default_prepare
......@@ -47,7 +52,6 @@ _build() {
--sysconfdir=/etc \
--mandir=/usr/share/man \
--localstatedir=/var \
--with-kernel-dir=/usr/include/linux \
--enable-vrrp \
--enable-sha1 \
$@
......@@ -104,8 +108,7 @@ samples() {
mv "$pkgdir"/etc/keepalived/samples "$subpkgdir"/etc/keepalived/
}
sha512sums="5ba269afb334d25c17305b7adbbf5ed1ebd62480106945d7d382aab99285691968e26e90a69507c2fed20d7a721dfce187fde803835213c3b915e06177268088 keepalived-2.0.7.tar.gz
sha512sums="ead982aeacdf329109089dfc58a42915ff44b0c4897006000c74642fa3747b2cac1a472faa438ce517f47b80d193d466875ab7130d2206400c8b2ad52f17c6d4 keepalived-2.0.11.tar.gz
922d74619821b3db394fa5a829b5c7f0f62732a77016a4dcf56db18ebed5daf1a98ac67d9a5543215b5a3f913dce48dcf2b34d1fbac45365c548b1629e102010 always-use-pid-dir.patch
73912144234ac422228b50c46721e1ded4b85595a157199b346a5990dfbb15be82f3d6fd099b72a62f436add949e86605a2c728e4a67b3c6003bced4520829da fix-bool.patch
4f1a3fdb0a936707a234efa063296f575fa8168551c87d2f9d43b7681d24605f852b4ddb2c674d1e311111f85232a708939a71cf128eb57c940ccb6927518dd4 keepalived.initd
2e6a9411d78fb954b5ede75d04225bf3f37d9ef4773c2b3587e1de1a0795f61a1ed784fa229854c2ee97f153205c3f76b3ff79cd55ede07f211731f0d17569cb keepalived.confd"
From 6c7a281473083f7ac47b426b2127a8c8e76caca5 Mon Sep 17 00:00:00 2001
From: Quentin Armitage <quentin@armitage.org.uk>
Date: Sat, 25 Aug 2018 11:36:11 +0100
Subject: [PATCH] Include stdbool.h in process.c
Signed-off-by: Quentin Armitage <quentin@armitage.org.uk>
---
keepalived/core/process.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/keepalived/core/process.c b/keepalived/core/process.c
index f11c32a3..22bcf254 100644
--- a/keepalived/core/process.c
+++ b/keepalived/core/process.c
@@ -30,6 +30,7 @@
#ifdef _HAVE_SCHED_RT_
#include <sched.h>
#endif
+#include <stdbool.h>
#include "process.h"
#include "logger.h"
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment