CVS: moonbase/libs/glibc BUILD,1.21,1.22 DETAILS,1.9,1.10

[elaine at lunar-linux.org]

Update of /var/cvs/lunar/moonbase/libs/glibc
In directory dbguin.lunar-linux.org:/tmp/cvs-serv29104

Modified Files:
	BUILD DETAILS 
Log Message:
Fixes for initgroups vulnerability, added patch and added md5's to
all sources. Tested on 3 systems, minimal change, security issue


Index: BUILD
===================================================================
RCS file: /var/cvs/lunar/moonbase/libs/glibc/BUILD,v
retrieving revision 1.21
retrieving revision 1.22
diff -u -d -r1.21 -r1.22
--- BUILD	17 Oct 2003 20:53:31 -0000	1.21
+++ BUILD	20 Oct 2003 19:17:05 -0000	1.22
@@ -3,6 +3,7 @@
   patch_it $SOURCE_CACHE/$SOURCE3 1             # Via c3
   patch_it $SOURCE_CACHE/$SOURCE4 1             # old static-bin segfault
   patch_it $SOURCE_CACHE/$SOURCE5 1		# gcc 3.3 glibc patch
+  patch_it $SOURCE_CACHE/$SOURCE6 1             # initgroups fault patch
   if [ -n "$MAKES" ] && [ "$MAKES" -gt 1 ] ; then
     sedit "s/# PARALLELMFLAGS = -j 4/PARALLELMFLAGS = -j $MAKES/" Makefile.in
   fi

Index: DETAILS
===================================================================
RCS file: /var/cvs/lunar/moonbase/libs/glibc/DETAILS,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -d -r1.9 -r1.10
--- DETAILS	14 May 2003 23:57:11 -0000	1.9
+++ DETAILS	20 Oct 2003 19:17:05 -0000	1.10
@@ -6,6 +6,7 @@
          SOURCE3=glibc-2.3.2-cmove.patch
          SOURCE4=glibc-2.3.2-ctype-compat.patch
 	 SOURCE5=glibc-2.3.2-newstyle.patch
+         SOURCE6=glibc-2.3.2-initgroups.patch
 SOURCE_DIRECTORY=$BUILD_DIRECTORY/$MODULE-$VERSION
    SOURCE_URL[0]=$GNU_URL/$MODULE/$SOURCE
    SOURCE_URL[1]=ftp://ftp.gnu.org/pub/gnu/$MODULE/$SOURCE
@@ -14,6 +15,13 @@
   SOURCE3_URL[0]=$PATCH_URL/$SOURCE3
   SOURCE4_URL[0]=$PATCH_URL/$SOURCE4
   SOURCE5_URL[0]=$PATCH_URL/$SOURCE5
+  SOURCE6_URL[0]=$PATCH_URL/$SOURCE6
+   SOURCE_VFY[0]=md5:ede969aad568f48083e413384f20753c
+  SOURCE2_VFY[0]=md5:894b8969cfbdf787c73e139782167607
+  SOURCE3_VFY[0]=md5:546fe531bfc0f72e0678d4cabbfe7298
+  SOURCE4_VFY[0]=md5:8dbdd09eed303c18d2eba8bc967712a3
+  SOURCE5_VFY[0]=md5:576c8ce5faae8ff6706b683617007118
+  SOURCE6_VFY[0]=md5:868e61ea1d703a7ca7ce916592b77db1
         WEB_SITE=http://www.gnu.org/software/libc
       MAINTAINER=dem at lunar-linux.org
          ENTERED=20010922