From a0c98503cb14678d52d0983b1ff82188ff444230 Mon Sep 17 00:00:00 2001 From: citrus-it Date: Wed, 26 Jul 2017 12:57:09 +0000 Subject: [PATCH 1/2] ncurses: update to 6.0-20170722 Fixes: CVE 2017-10684 CVE-2017-10685 CVE-2017-11112 CVE-2017-11113 --- build/ncurses/build.sh | 6 ++++-- doc/packages.md | 2 +- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/build/ncurses/build.sh b/build/ncurses/build.sh index 15471f6d2c..067035fd6d 100755 --- a/build/ncurses/build.sh +++ b/build/ncurses/build.sh @@ -28,8 +28,10 @@ . ../../lib/functions.sh PROG=ncurses -VER=6.0 +VER=6.0-20170722 VERHUMAN=$VER +BUILDDIR=$PROG-$VER +VER=${VER/-/.} PKG=library/ncurses SUMMARY="A CRT screen handling and optimization package." DESC="$SUMMARY" @@ -92,7 +94,7 @@ build_abi6() { } init -download_source $PROG $PROG $VER +download_source $PROG $PROG $VERHUMAN patch_source prep_build build_abi5 diff --git a/doc/packages.md b/doc/packages.md index 2f4bbdfdb3..f51653c145 100644 --- a/doc/packages.md +++ b/doc/packages.md @@ -33,7 +33,7 @@ | library/libffi | 3.2.1 | https://sourceware.org/libffi/ | library/libxml2 | 2.9.4 | http://xmlsoft.org/news.html | library/libxslt | 1.1.29 | http://xmlsoft.org/libxslt/news.html -| library/ncurses | 6.0 | https://ftp.gnu.org/gnu/ncurses/ +| library/ncurses | 6.0.20170722 | https://ftp.gnu.org/gnu/ncurses/ | library/nghttp2 | 1.24.0 | https://nghttp2.org/blog/ | library/nspr | 4.14 | http://archive.mozilla.org/pub/nspr/releases/ | library/pcre | 8.41 | https://ftp.pcre.org/pub/pcre/ From ea931478782df10ee3ce24e082a0a36ff58d9a72 Mon Sep 17 00:00:00 2001 From: citrus-it Date: Wed, 26 Jul 2017 13:03:25 +0000 Subject: [PATCH 2/2] add additional ncurses URL --- doc/packages.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/packages.md b/doc/packages.md index f51653c145..4d201e76cf 100644 --- a/doc/packages.md +++ b/doc/packages.md @@ -33,7 +33,7 @@ | library/libffi | 3.2.1 | https://sourceware.org/libffi/ | library/libxml2 | 2.9.4 | http://xmlsoft.org/news.html | library/libxslt | 1.1.29 | http://xmlsoft.org/libxslt/news.html -| library/ncurses | 6.0.20170722 | https://ftp.gnu.org/gnu/ncurses/ +| library/ncurses | 6.0.20170722 | https://ftp.gnu.org/gnu/ncurses/ http://invisible-mirror.net/archives/ncurses/current/ | library/nghttp2 | 1.24.0 | https://nghttp2.org/blog/ | library/nspr | 4.14 | http://archive.mozilla.org/pub/nspr/releases/ | library/pcre | 8.41 | https://ftp.pcre.org/pub/pcre/