mirror of
https://git.FreeBSD.org/ports.git
synced 2024-10-19 19:59:43 +00:00
Fix a local root exploit in SGE and SGEEE. In sysutils/sge upgrade to
the security release 6.0.7.1. For sysutils/sge53 and sysutils/sgeee53 (a slave of sge53), patch directly. While I'm here deprecate SGE 5.3. Obtained from: Sun Security: 57a0242d-8c4e-11da-8ddf-000ae42e9b93 (VuXML)
This commit is contained in:
Brooks Davis
parent
3e974a1f30
commit
c4e811d664
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=154293
@ -9,10 +9,10 @@ PORTNAME= sge
|
||||
PORTVERSION= ${SGE_VERSION}
|
||||
PORTREVISION= 0
|
||||
CATEGORIES= sysutils parallel
|
||||
MASTER_SITES= http://gridengine.sunsource.net/files/documents/7/40/
|
||||
MASTER_SITES= http://gridengine.sunsource.net/files/documents/7/51/
|
||||
MASTER_SITES+= ${MASTER_SITE_LOCAL}
|
||||
MASTER_SITE_SUBDIR= brooks
|
||||
DISTNAME= sge-V60u7_TAG-src
|
||||
DISTNAME= sge-V60u7_1_TAG-src
|
||||
|
||||
MAINTAINER= brooks@FreeBSD.org
|
||||
COMMENT= Sun Grid Engine, a batch queueing system
|
||||
@ -51,8 +51,8 @@ FETCH_CMD= wget -c
|
||||
SGE_BASE?= sge
|
||||
SGE_ROOT= ${PREFIX}/${SGE_BASE}
|
||||
SGE_ARCH= fbsd-${ARCH}
|
||||
SGE_VERSION= 6.0.7
|
||||
SGE_RELEASE= 6.0u7
|
||||
SGE_VERSION= 6.0.7.1
|
||||
SGE_RELEASE= 6.0u7_1
|
||||
|
||||
PLIST_SUB+= SGE_ARCH=${SGE_ARCH}
|
||||
PLIST_SUB+= SGE_BASE=${SGE_BASE}
|
||||
|
||||
@ -1,2 +1,2 @@
|
||||
MD5 (sge-V60u7_TAG-src.tar.gz) = 6a8eb9cf7ff284ee106f8792c6691873
|
||||
SIZE (sge-V60u7_TAG-src.tar.gz) = 10569054
|
||||
MD5 (sge-V60u7_1_TAG-src.tar.gz) = a242676d3090e89d8389ac18313b2dda
|
||||
SIZE (sge-V60u7_1_TAG-src.tar.gz) = 10570395
|
||||
|
||||
@ -7,7 +7,7 @@
|
||||
|
||||
PORTNAME= sge
|
||||
PORTVERSION= ${SGE_VERSION}.${SGE_SNAPDATE}
|
||||
PORTREVISION= 0
|
||||
PORTREVISION= 1
|
||||
CATEGORIES= sysutils parallel
|
||||
MASTER_SITES= ${MASTER_SITE_LOCAL}
|
||||
MASTER_SITE_SUBDIR= brooks
|
||||
@ -15,6 +15,9 @@ MASTER_SITE_SUBDIR= brooks
|
||||
MAINTAINER= brooks@FreeBSD.org
|
||||
COMMENT?= Sun Grid Engine, a batch queueing system
|
||||
|
||||
DEPRECATED= SGE 5.3 is no longer maintained. \
|
||||
Please consider sysutils/sge instead
|
||||
|
||||
NO_LATEST_LINK= yes
|
||||
|
||||
USE_BZIP2= yes
|
||||
|
||||
49
sysutils/sge53/files/patch-3rdparty_remote_rsh.c
Normal file
49
sysutils/sge53/files/patch-3rdparty_remote_rsh.c
Normal file
@ -0,0 +1,49 @@
|
||||
|
||||
$FreeBSD$
|
||||
|
||||
--- 3rdparty/remote/rsh.c.orig
|
||||
+++ 3rdparty/remote/rsh.c
|
||||
@@ -141,7 +141,7 @@
|
||||
struct passwd *pw;
|
||||
struct servent *sp;
|
||||
long omask = 0;
|
||||
- int argoff, asrsh, ch, dflag, nflag, one, rem;
|
||||
+ int argoff, ch, dflag, nflag, one, rem;
|
||||
pid_t pid = 0;
|
||||
uid_t uid;
|
||||
char *args, *host, *p, *user;
|
||||
@@ -156,7 +156,7 @@
|
||||
sigset_t set;
|
||||
#endif
|
||||
|
||||
- argoff = asrsh = dflag = nflag = 0;
|
||||
+ argoff = dflag = nflag = 0;
|
||||
one = 1;
|
||||
host = user = NULL;
|
||||
|
||||
@@ -167,8 +167,6 @@
|
||||
p = argv[0];
|
||||
if (strcmp(p, "rsh"))
|
||||
host = p;
|
||||
- else
|
||||
- asrsh = 1;
|
||||
|
||||
/* handle "rsh host flags" */
|
||||
if (!host && argc > 2 && argv[1][0] != '-') {
|
||||
@@ -241,13 +239,9 @@
|
||||
if (!host && !(host = argv[optind++]))
|
||||
usage();
|
||||
|
||||
- /* if no further arguments, must have been called as rlogin. */
|
||||
- if (!argv[optind]) {
|
||||
- if (asrsh)
|
||||
- *argv = "rlogin";
|
||||
- execvp("rlogin", argv);
|
||||
- fprintf(stderr, "can't exec %s", "rlogin");
|
||||
- }
|
||||
+ /* if no further arguments, error. We don't call rlogin! */
|
||||
+ if (!argv[optind])
|
||||
+ usage();
|
||||
|
||||
argc -= optind;
|
||||
argv += optind;
|
||||
@ -9,10 +9,10 @@ PORTNAME= sge
|
||||
PORTVERSION= ${SGE_VERSION}
|
||||
PORTREVISION= 0
|
||||
CATEGORIES= sysutils parallel
|
||||
MASTER_SITES= http://gridengine.sunsource.net/files/documents/7/40/
|
||||
MASTER_SITES= http://gridengine.sunsource.net/files/documents/7/51/
|
||||
MASTER_SITES+= ${MASTER_SITE_LOCAL}
|
||||
MASTER_SITE_SUBDIR= brooks
|
||||
DISTNAME= sge-V60u7_TAG-src
|
||||
DISTNAME= sge-V60u7_1_TAG-src
|
||||
|
||||
MAINTAINER= brooks@FreeBSD.org
|
||||
COMMENT= Sun Grid Engine, a batch queueing system
|
||||
@ -51,8 +51,8 @@ FETCH_CMD= wget -c
|
||||
SGE_BASE?= sge
|
||||
SGE_ROOT= ${PREFIX}/${SGE_BASE}
|
||||
SGE_ARCH= fbsd-${ARCH}
|
||||
SGE_VERSION= 6.0.7
|
||||
SGE_RELEASE= 6.0u7
|
||||
SGE_VERSION= 6.0.7.1
|
||||
SGE_RELEASE= 6.0u7_1
|
||||
|
||||
PLIST_SUB+= SGE_ARCH=${SGE_ARCH}
|
||||
PLIST_SUB+= SGE_BASE=${SGE_BASE}
|
||||
|
||||
@ -1,2 +1,2 @@
|
||||
MD5 (sge-V60u7_TAG-src.tar.gz) = 6a8eb9cf7ff284ee106f8792c6691873
|
||||
SIZE (sge-V60u7_TAG-src.tar.gz) = 10569054
|
||||
MD5 (sge-V60u7_1_TAG-src.tar.gz) = a242676d3090e89d8389ac18313b2dda
|
||||
SIZE (sge-V60u7_1_TAG-src.tar.gz) = 10570395
|
||||
|
||||
@ -9,10 +9,10 @@ PORTNAME= sge
|
||||
PORTVERSION= ${SGE_VERSION}
|
||||
PORTREVISION= 0
|
||||
CATEGORIES= sysutils parallel
|
||||
MASTER_SITES= http://gridengine.sunsource.net/files/documents/7/40/
|
||||
MASTER_SITES= http://gridengine.sunsource.net/files/documents/7/51/
|
||||
MASTER_SITES+= ${MASTER_SITE_LOCAL}
|
||||
MASTER_SITE_SUBDIR= brooks
|
||||
DISTNAME= sge-V60u7_TAG-src
|
||||
DISTNAME= sge-V60u7_1_TAG-src
|
||||
|
||||
MAINTAINER= brooks@FreeBSD.org
|
||||
COMMENT= Sun Grid Engine, a batch queueing system
|
||||
@ -51,8 +51,8 @@ FETCH_CMD= wget -c
|
||||
SGE_BASE?= sge
|
||||
SGE_ROOT= ${PREFIX}/${SGE_BASE}
|
||||
SGE_ARCH= fbsd-${ARCH}
|
||||
SGE_VERSION= 6.0.7
|
||||
SGE_RELEASE= 6.0u7
|
||||
SGE_VERSION= 6.0.7.1
|
||||
SGE_RELEASE= 6.0u7_1
|
||||
|
||||
PLIST_SUB+= SGE_ARCH=${SGE_ARCH}
|
||||
PLIST_SUB+= SGE_BASE=${SGE_BASE}
|
||||
|
||||
@ -1,2 +1,2 @@
|
||||
MD5 (sge-V60u7_TAG-src.tar.gz) = 6a8eb9cf7ff284ee106f8792c6691873
|
||||
SIZE (sge-V60u7_TAG-src.tar.gz) = 10569054
|
||||
MD5 (sge-V60u7_1_TAG-src.tar.gz) = a242676d3090e89d8389ac18313b2dda
|
||||
SIZE (sge-V60u7_1_TAG-src.tar.gz) = 10570395
|
||||
|
||||
@ -9,10 +9,10 @@ PORTNAME= sge
|
||||
PORTVERSION= ${SGE_VERSION}
|
||||
PORTREVISION= 0
|
||||
CATEGORIES= sysutils parallel
|
||||
MASTER_SITES= http://gridengine.sunsource.net/files/documents/7/40/
|
||||
MASTER_SITES= http://gridengine.sunsource.net/files/documents/7/51/
|
||||
MASTER_SITES+= ${MASTER_SITE_LOCAL}
|
||||
MASTER_SITE_SUBDIR= brooks
|
||||
DISTNAME= sge-V60u7_TAG-src
|
||||
DISTNAME= sge-V60u7_1_TAG-src
|
||||
|
||||
MAINTAINER= brooks@FreeBSD.org
|
||||
COMMENT= Sun Grid Engine, a batch queueing system
|
||||
@ -51,8 +51,8 @@ FETCH_CMD= wget -c
|
||||
SGE_BASE?= sge
|
||||
SGE_ROOT= ${PREFIX}/${SGE_BASE}
|
||||
SGE_ARCH= fbsd-${ARCH}
|
||||
SGE_VERSION= 6.0.7
|
||||
SGE_RELEASE= 6.0u7
|
||||
SGE_VERSION= 6.0.7.1
|
||||
SGE_RELEASE= 6.0u7_1
|
||||
|
||||
PLIST_SUB+= SGE_ARCH=${SGE_ARCH}
|
||||
PLIST_SUB+= SGE_BASE=${SGE_BASE}
|
||||
|
||||
@ -1,2 +1,2 @@
|
||||
MD5 (sge-V60u7_TAG-src.tar.gz) = 6a8eb9cf7ff284ee106f8792c6691873
|
||||
SIZE (sge-V60u7_TAG-src.tar.gz) = 10569054
|
||||
MD5 (sge-V60u7_1_TAG-src.tar.gz) = a242676d3090e89d8389ac18313b2dda
|
||||
SIZE (sge-V60u7_1_TAG-src.tar.gz) = 10570395
|
||||
|
||||
Loading…
Reference in New Issue
Block a user