Fix for security bug #99520. Thanks to Anarchy for confirming ~ppc. Removed older vulnerable versions.

Package-Manager: portage-2.0.51.22-r1

8 files changed, 25 insertions, 50 deletions

diff --git a/net-dns/dnrd/ChangeLog b/net-dns/dnrd/ChangeLog
index 976970b17c9d..a02408e451d6 100644
--- a/net-dns/dnrd/ChangeLog
+++ b/net-dns/dnrd/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for net-dns/dnrd
 # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/dnrd/ChangeLog,v 1.4 2005/04/19 10:21:03 beu Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/dnrd/ChangeLog,v 1.5 2005/07/21 15:11:48 chriswhite Exp $
+
+*dnrd-2.19.1 (21 Jul 2005)
+
+  21 Jul 2005; Chris White <chriswhite@gentoo.org> files/dnrd,
+  -dnrd-2.17.2.ebuild, -dnrd-2.18.ebuild, +dnrd-2.19.1.ebuild:
+  Fix for security bug #99520. Thanks to Anarchy for confirming ~ppc. Removed
+  older vulnerable versions.
 
   19 Apr 2005; Elfyn McBratney <beu@gentoo.org> metadata.xml:
   Remove retired developer from metadata.xml.
diff --git a/net-dns/dnrd/Manifest b/net-dns/dnrd/Manifest
index 87c7ffd2e837..7e3ec441fa9d 100644
--- a/net-dns/dnrd/Manifest
+++ b/net-dns/dnrd/Manifest
@@ -1,18 +1,16 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
+MD5 cf032ad013c47f578bfbdd363ab2a423 ChangeLog 1227
 MD5 6efe55b5bdb519265c5f988e988be965 metadata.xml 373
-MD5 e563768727a4c965013e06510b0d997d dnrd-2.18.ebuild 743
-MD5 15ddcf474c41f888e80c3d67a39b844a ChangeLog 958
-MD5 7a4e4dab2fd918ab73a67810a68ebc31 dnrd-2.17.2.ebuild 707
-MD5 37af42cf55f4b5e709d87a79e89fd760 files/dnrd 465
-MD5 59a8af5b8e044f741c3077e196ab080d files/digest-dnrd-2.18 61
+MD5 a14580cf7095380143a8cd158c04767d dnrd-2.19.1.ebuild 832
+MD5 eb8a7236afb2e7c90d7bc1500cfd2783 files/digest-dnrd-2.19.1 63
+MD5 1a7c6063be69d8859ed77fedb8b78d5f files/dnrd 476
 MD5 7d30e0bd4d61ae20ed63339d3cc5739d files/dnrd.conf 250
-MD5 adabeaf8e108dbbac72ac51528b3fc12 files/digest-dnrd-2.17.2 63
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.1 (GNU/Linux)
 
-iD8DBQFCZNuwjUHll2nfF60RAt0MAKCxXYREtg+sHfER411r7NmkkdeMRQCbBz8b
-XMuAmfvgcPos6ccEL+UTw3c=
-=RC+6
+iD8DBQFC4DMoFdQwWVoAgN4RApAaAKDBYWGU0I2I4Sy3tTSoboaKBO+kjACfTaLR
+ZYs6GuDnlxt1FUDpLxGwvLk=
+=Q3Qf
 -----END PGP SIGNATURE-----
diff --git a/net-dns/dnrd/dnrd-2.17.2.ebuild b/net-dns/dnrd/dnrd-2.17.2.ebuild
deleted file mode 100644
index 25edbb377d64..000000000000
--- a/net-dns/dnrd/dnrd-2.17.2.ebuild
+++ /dev/null
@@ -1,34 +0,0 @@
-# Copyright 1999-2005 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/dnrd/dnrd-2.17.2.ebuild,v 1.1 2005/01/11 05:38:04 chriswhite Exp $
-
-inherit gnuconfig
-
-DESCRIPTION="A caching DNS proxy server"
-HOMEPAGE="http://dnrd.sourceforge.net/"
-SRC_URI="mirror://sourceforge/dnrd/${P}.tar.gz"
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~x86"
-IUSE="debug"
-DEPEND=""
-
-src_unpack() {
-	unpack ${A}
-	gnuconfig_update
-}
-
-src_compile() {
-	econf \
-	$(use_enable debug) \
-	|| die "configuration failed"
-
-	emake || die "Make failed"
-}
-
-src_install() {
-	make DESTDIR=${D} install || die
-
-	doinitd ${FILESDIR}/dnrd
-	newconfd ${FILESDIR}/dnrd.conf dnrd
-}
diff --git a/net-dns/dnrd/dnrd-2.18.ebuild b/net-dns/dnrd/dnrd-2.19.1.ebuild
index 814436f24aae..042f8df21e13 100644
--- a/net-dns/dnrd/dnrd-2.18.ebuild
+++ b/net-dns/dnrd/dnrd-2.19.1.ebuild
@@ -1,8 +1,8 @@
 # Copyright 1999-2005 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/dnrd/dnrd-2.18.ebuild,v 1.1 2005/01/11 05:49:28 chriswhite Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/dnrd/dnrd-2.19.1.ebuild,v 1.1 2005/07/21 15:11:48 chriswhite Exp $
 
-inherit gnuconfig
+inherit gnuconfig eutils
 
 DESCRIPTION="A caching DNS proxy server"
 HOMEPAGE="http://dnrd.sourceforge.net/"
@@ -33,3 +33,8 @@ src_install() {
 	doinitd ${FILESDIR}/dnrd
 	newconfd ${FILESDIR}/dnrd.conf dnrd
 }
+
+pkg_postinst() {
+	enewgroup dnrd
+	enewuser dnrd -1 /bin/false /etc/dnrd dnrd
+}
diff --git a/net-dns/dnrd/files/digest-dnrd-2.17.2 b/net-dns/dnrd/files/digest-dnrd-2.17.2
deleted file mode 100644
index 54871b0ffe14..000000000000
--- a/net-dns/dnrd/files/digest-dnrd-2.17.2
+++ /dev/null
@@ -1 +0,0 @@
-MD5 7f7644a2d5440bcff2232eeddb4e0c76 dnrd-2.17.2.tar.gz 145881
diff --git a/net-dns/dnrd/files/digest-dnrd-2.18 b/net-dns/dnrd/files/digest-dnrd-2.18
deleted file mode 100644
index f24b63ea8c0e..000000000000
--- a/net-dns/dnrd/files/digest-dnrd-2.18
+++ /dev/null
@@ -1 +0,0 @@
-MD5 904fbf787196685eb21ee8f03660fa0d dnrd-2.18.tar.gz 152286
diff --git a/net-dns/dnrd/files/digest-dnrd-2.19.1 b/net-dns/dnrd/files/digest-dnrd-2.19.1
new file mode 100644
index 000000000000..8be066c2bc88
--- /dev/null
+++ b/net-dns/dnrd/files/digest-dnrd-2.19.1
@@ -0,0 +1 @@
+MD5 58de30f0b09e333ca008444ca25848bc dnrd-2.19.1.tar.gz 157686
diff --git a/net-dns/dnrd/files/dnrd b/net-dns/dnrd/files/dnrd
index c0a9a1d583d9..e3b34ed6ff85 100644
--- a/net-dns/dnrd/files/dnrd
+++ b/net-dns/dnrd/files/dnrd
@@ -1,7 +1,7 @@
 #!/sbin/runscript
 # Copyright 1999-2003 Gentoo Technologies, Inc.
 # Distributed under the terms of the GNU General Public License, v2 or later
-# $Header: /var/cvsroot/gentoo-x86/net-dns/dnrd/files/dnrd,v 1.1 2005/01/11 05:38:04 chriswhite Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/dnrd/files/dnrd,v 1.2 2005/07/21 15:11:48 chriswhite Exp $
 
 PIDFILE="/var/run/dnrd.pid"
 
@@ -12,7 +12,7 @@ depend() {
 
 start() {
 	ebegin "Starting dnrd"
-	/usr/sbin/dnrd $DNRD_OPTS &> /dev/null &
+	/usr/sbin/dnrd --uid dnrd $DNRD_OPTS &> /dev/null &
 	eend $?
 }