From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:470:142:3::10]:57892) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jAZEN-000804-Ho for guix-patches@gnu.org; Sat, 07 Mar 2020 08:11:04 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1jAZEM-0002Ic-12 for guix-patches@gnu.org; Sat, 07 Mar 2020 08:11:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:40414) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1jAZEL-0002I6-TH for guix-patches@gnu.org; Sat, 07 Mar 2020 08:11:01 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1jAZEL-0002LE-Nn for guix-patches@gnu.org; Sat, 07 Mar 2020 08:11:01 -0500 Subject: [bug#39973] [PATCH] gnu: ppp: Update to 2.4.8-1.8d45443bb Resent-Message-ID: Received: from eggs.gnu.org ([2001:470:142:3::10]:57791) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jAZEA-0007zy-Kv for guix-patches@gnu.org; Sat, 07 Mar 2020 08:10:51 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1jAZE9-0001Vv-Au for guix-patches@gnu.org; Sat, 07 Mar 2020 08:10:50 -0500 Received: from mail-il1-x133.google.com ([2607:f8b0:4864:20::133]:33578) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1jAZE9-0001Tg-4r for guix-patches@gnu.org; Sat, 07 Mar 2020 08:10:49 -0500 Received: by mail-il1-x133.google.com with SMTP id r4so4636969iln.0 for ; Sat, 07 Mar 2020 05:10:49 -0800 (PST) MIME-Version: 1.0 From: Vincent Legoll Date: Sat, 7 Mar 2020 14:10:37 +0100 Message-ID: Content-Type: multipart/mixed; boundary="000000000000a3981905a0437fb5" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: 39973@debbugs.gnu.org --000000000000a3981905a0437fb5 Content-Type: text/plain; charset="UTF-8" This is an update of ppp, following the release of patches for CVE-2020-8597. https://www.kb.cert.org/vuls/id/782301/ -- Vincent Legoll --000000000000a3981905a0437fb5 Content-Type: text/x-patch; charset="US-ASCII"; name="0001-gnu-ppp-Update-to-2.4.8-1.8d45443bb.patch" Content-Disposition: attachment; filename="0001-gnu-ppp-Update-to-2.4.8-1.8d45443bb.patch" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_k7hmlfdr0 RnJvbSBkYTg3NmUwNGY2ZmYyZjQyMzEzMWUyYzhhN2Y1Zjc5OTNjNGIxM2M4IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBWaW5jZW50IExlZ29sbCA8dmluY2VudC5sZWdvbGxAZ21haWwu Y29tPgpEYXRlOiBTYXQsIDcgTWFyIDIwMjAgMTQ6MDE6MzQgKzAxMDAKU3ViamVjdDogW1BBVENI XSBnbnU6IHBwcDogVXBkYXRlIHRvIDIuNC44LTEuOGQ0NTQ0M2JiCgpnbnUvcGFja2FnZXMvc2Ft YmEuc2NtIChwcHApOiBVcGRhdGUgdG8gMi40LjgtMS44ZDQ1NDQzYmIKLS0tCiBnbnUvcGFja2Fn ZXMvc2FtYmEuc2NtIHwgODcgKysrKysrKysrKysrKysrKysrKysrKy0tLS0tLS0tLS0tLS0tLS0t LS0tCiAxIGZpbGUgY2hhbmdlZCwgNDUgaW5zZXJ0aW9ucygrKSwgNDIgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEvZ251L3BhY2thZ2VzL3NhbWJhLnNjbSBiL2dudS9wYWNrYWdlcy9zYW1iYS5z Y20KaW5kZXggNGVlZjdkZTVkNy4uZmJmNjNjNThiOSAxMDA2NDQKLS0tIGEvZ251L3BhY2thZ2Vz L3NhbWJhLnNjbQorKysgYi9nbnUvcGFja2FnZXMvc2FtYmEuc2NtCkBAIC00MjEsNDcgKzQyMSw1 MCBAQCBrZXktdmFsdWUgcGFpciBkYXRhYmFzZXMgYW5kIGEgcmVhbCBMREFQIGRhdGFiYXNlLiIp CiAgICAgKGxpY2Vuc2UgbGdwbDMrKSkpCiAKIChkZWZpbmUtcHVibGljIHBwcAotICAocGFja2Fn ZQotICAgIChuYW1lICJwcHAiKQotICAgICh2ZXJzaW9uICIyLjQuOCIpCi0gICAgKHNvdXJjZSAo b3JpZ2luCi0gICAgICAgICAgICAgIChtZXRob2QgZ2l0LWZldGNoKQotICAgICAgICAgICAgICAo dXJpIChnaXQtcmVmZXJlbmNlCi0gICAgICAgICAgICAgICAgICAgICh1cmwgImh0dHBzOi8vZ2l0 aHViLmNvbS9wYXVsdXNtYWNrL3BwcCIpCi0gICAgICAgICAgICAgICAgICAgIChjb21taXQgKHN0 cmluZy1hcHBlbmQgInBwcC0iIHZlcnNpb24pKSkpCi0gICAgICAgICAgICAgIChmaWxlLW5hbWUg KGdpdC1maWxlLW5hbWUgbmFtZSB2ZXJzaW9uKSkKLSAgICAgICAgICAgICAgKHNoYTI1NgotICAg ICAgICAgICAgICAgKGJhc2UzMgotICAgICAgICAgICAgICAgICIxaTg4bTc5aDZnM2Z6c2I0eXcz azhicTFncnN4M2hzeWF3bTdpZDJ2Y2FhYjBnZnF6amp2IikpKSkKLSAgICAoYnVpbGQtc3lzdGVt IGdudS1idWlsZC1zeXN0ZW0pCi0gICAgKGFyZ3VtZW50cwotICAgICAnKCM6dGVzdHM/ICNmIDsg bm8gY2hlY2sgdGFyZ2V0Ci0gICAgICAgIzptYWtlLWZsYWdzICcoIkNDPWdjYyIpCi0gICAgICAg IzpwaGFzZXMKLSAgICAgICAobW9kaWZ5LXBoYXNlcyAlc3RhbmRhcmQtcGhhc2VzCi0gICAgICAg ICAoYWRkLWJlZm9yZSAnY29uZmlndXJlICdwYXRjaC1NYWtlZmlsZQotICAgICAgICAgICAobGFt YmRhKiAoIzprZXkgaW5wdXRzICM6YWxsb3ctb3RoZXIta2V5cykKLSAgICAgICAgICAgICAobGV0 ICgobGliYyAgICAoYXNzb2MtcmVmIGlucHV0cyAibGliYyIpKQotICAgICAgICAgICAgICAgICAg IChvcGVuc3NsIChhc3NvYy1yZWYgaW5wdXRzICJvcGVuc3NsIikpCi0gICAgICAgICAgICAgICAg ICAgKGxpYnBjYXAgKGFzc29jLXJlZiBpbnB1dHMgImxpYnBjYXAiKSkpCi0gICAgICAgICAgICAg ICAoc3Vic3RpdHV0ZSogInBwcGQvTWFrZWZpbGUubGludXgiCi0gICAgICAgICAgICAgICAgICgo Ii91c3IvaW5jbHVkZS9jcnlwdFxcLmgiKQotICAgICAgICAgICAgICAgICAgKHN0cmluZy1hcHBl bmQgbGliYyAiL2luY2x1ZGUvY3J5cHQuaCIpKQotICAgICAgICAgICAgICAgICAoKCIvdXNyL2lu Y2x1ZGUvb3BlbnNzbCIpCi0gICAgICAgICAgICAgICAgICAoc3RyaW5nLWFwcGVuZCBvcGVuc3Ns ICIvaW5jbHVkZS9vcGVuc3NsIikpCi0gICAgICAgICAgICAgICAgICgoIi91c3IvaW5jbHVkZS9w Y2FwLWJwZi5oIikKLSAgICAgICAgICAgICAgICAgIChzdHJpbmctYXBwZW5kIGxpYnBjYXAgIi9p bmNsdWRlL3BjYXAtYnBmLmgiKSkpCi0gICAgICAgICAgICAgICAjdCkpKSkpKQotICAgIChpbnB1 dHMKLSAgICAgYCgoImxpYnBjYXAiICxsaWJwY2FwKQotICAgICAgICgib3BlbnNzbCIgLChAIChn bnUgcGFja2FnZXMgdGxzKSBvcGVuc3NsKSkpKQotICAgIChzeW5vcHNpcyAiSW1wbGVtZW50YXRp b24gb2YgdGhlIFBvaW50LXRvLVBvaW50IFByb3RvY29sIikKLSAgICAoaG9tZS1wYWdlICJodHRw czovL3BwcC5zYW1iYS5vcmcvIikKLSAgICAoZGVzY3JpcHRpb24KLSAgICAgIlRoZSBQb2ludC10 by1Qb2ludCBQcm90b2NvbCAoUFBQKSBwcm92aWRlcyBhIHN0YW5kYXJkIHdheSB0byBlc3RhYmxp c2gKKyAgKGxldCAoKHJldmlzaW9uICIxIikKKyAgICAgICAgKGNvbW1pdCAiOGQ0NTQ0M2JiNWM5 MzcyYjRjNmEzNjJiYTJmNDQzZDQxYzU2MzZhZiIpKQorICAgIChwYWNrYWdlCisgICAgICAobmFt ZSAicHBwIikKKyAgICAgICh2ZXJzaW9uIChzdHJpbmctYXBwZW5kICIyLjQuOC0iIHJldmlzaW9u ICIuIiAoc3RyaW5nLXRha2UgY29tbWl0IDkpKSkKKyAgICAgIChzb3VyY2UgKG9yaWdpbgorICAg ICAgICAgICAgICAgIChtZXRob2QgZ2l0LWZldGNoKQorICAgICAgICAgICAgICAgICh1cmkgKGdp dC1yZWZlcmVuY2UKKyAgICAgICAgICAgICAgICAgICAgICAodXJsICJodHRwczovL2dpdGh1Yi5j b20vcGF1bHVzbWFjay9wcHAiKQorICAgICAgICAgICAgICAgICAgICAgIChjb21taXQgY29tbWl0 KSkpCisgICAgICAgICAgICAgICAgKGZpbGUtbmFtZSAoc3RyaW5nLWFwcGVuZCBuYW1lICItIiB2 ZXJzaW9uICItY2hlY2tvdXQiKSkKKyAgICAgICAgICAgICAgICAoc2hhMjU2CisgICAgICAgICAg ICAgICAgIChiYXNlMzIKKyAgICAgICAgICAgICAgICAgICIwNmNmOGZiODRsM2gyenk1ZGE0ajdr MmoxcWp2MmdmcW45ODZzZjQzeGdqNzU2MDVha3MyIikpKSkKKyAgICAgIChidWlsZC1zeXN0ZW0g Z251LWJ1aWxkLXN5c3RlbSkKKyAgICAgIChhcmd1bWVudHMKKyAgICAgICAnKCM6dGVzdHM/ICNm IDsgbm8gY2hlY2sgdGFyZ2V0CisgICAgICAgICAjOm1ha2UtZmxhZ3MgJygiQ0M9Z2NjIikKKyAg ICAgICAgICM6cGhhc2VzCisgICAgICAgICAobW9kaWZ5LXBoYXNlcyAlc3RhbmRhcmQtcGhhc2Vz CisgICAgICAgICAgIChhZGQtYmVmb3JlICdjb25maWd1cmUgJ3BhdGNoLU1ha2VmaWxlCisgICAg ICAgICAgICAgKGxhbWJkYSogKCM6a2V5IGlucHV0cyAjOmFsbG93LW90aGVyLWtleXMpCisgICAg ICAgICAgICAgICAobGV0ICgobGliYyAgICAoYXNzb2MtcmVmIGlucHV0cyAibGliYyIpKQorICAg ICAgICAgICAgICAgICAgICAgKG9wZW5zc2wgKGFzc29jLXJlZiBpbnB1dHMgIm9wZW5zc2wiKSkK KyAgICAgICAgICAgICAgICAgICAgIChsaWJwY2FwIChhc3NvYy1yZWYgaW5wdXRzICJsaWJwY2Fw IikpKQorICAgICAgICAgICAgICAgICAoc3Vic3RpdHV0ZSogInBwcGQvTWFrZWZpbGUubGludXgi CisgICAgICAgICAgICAgICAgICAgKCgiL3Vzci9pbmNsdWRlL2NyeXB0XFwuaCIpCisgICAgICAg ICAgICAgICAgICAgIChzdHJpbmctYXBwZW5kIGxpYmMgIi9pbmNsdWRlL2NyeXB0LmgiKSkKKyAg ICAgICAgICAgICAgICAgICAoKCIvdXNyL2luY2x1ZGUvb3BlbnNzbCIpCisgICAgICAgICAgICAg ICAgICAgIChzdHJpbmctYXBwZW5kIG9wZW5zc2wgIi9pbmNsdWRlL29wZW5zc2wiKSkKKyAgICAg ICAgICAgICAgICAgICAoKCIvdXNyL2luY2x1ZGUvcGNhcC1icGYuaCIpCisgICAgICAgICAgICAg ICAgICAgIChzdHJpbmctYXBwZW5kIGxpYnBjYXAgIi9pbmNsdWRlL3BjYXAtYnBmLmgiKSkpCisg ICAgICAgICAgICAgICAgICN0KSkpKSkpCisgICAgICAoaW5wdXRzCisgICAgICAgYCgoImxpYnBj YXAiICxsaWJwY2FwKQorICAgICAgICAgKCJvcGVuc3NsIiAsKEAgKGdudSBwYWNrYWdlcyB0bHMp IG9wZW5zc2wpKSkpCisgICAgICAoc3lub3BzaXMgIkltcGxlbWVudGF0aW9uIG9mIHRoZSBQb2lu dC10by1Qb2ludCBQcm90b2NvbCIpCisgICAgICAoaG9tZS1wYWdlICJodHRwczovL3BwcC5zYW1i YS5vcmcvIikKKyAgICAgIChkZXNjcmlwdGlvbgorICAgICAgICJUaGUgUG9pbnQtdG8tUG9pbnQg UHJvdG9jb2wgKFBQUCkgcHJvdmlkZXMgYSBzdGFuZGFyZCB3YXkgdG8gZXN0YWJsaXNoCiBhIG5l dHdvcmsgY29ubmVjdGlvbiBvdmVyIGEgc2VyaWFsIGxpbmsuICBBdCBwcmVzZW50LCB0aGlzIHBh Y2thZ2Ugc3VwcG9ydHMgSVAKIGFuZCBJUFY2IGFuZCB0aGUgcHJvdG9jb2xzIGxheWVyZWQgYWJv dmUgdGhlbSwgc3VjaCBhcyBUQ1AgYW5kIFVEUC4iKQotICAgIDs7IHBwcGQsIHBwcHN0YXRzIGFu ZCBwcHBkdW1wIGFyZSB1bmRlciBCU0Qtc3R5bGUgbm90aWNlcy4KLSAgICA7OyBzb21lIG9mIHRo ZSBwcHBkIHBsdWdpbnMgYXJlIEdQTCdkLgotICAgIDs7IGNoYXQgaXMgcHVibGljIGRvbWFpbi4K LSAgICAobGljZW5zZSAobGlzdCBic2QtMyBic2QtNCBncGwyKyBwdWJsaWMtZG9tYWluKSkpKQor ICAgICAgOzsgcHBwZCwgcHBwc3RhdHMgYW5kIHBwcGR1bXAgYXJlIHVuZGVyIEJTRC1zdHlsZSBu b3RpY2VzLgorICAgICAgOzsgc29tZSBvZiB0aGUgcHBwZCBwbHVnaW5zIGFyZSBHUEwnZC4KKyAg ICAgIDs7IGNoYXQgaXMgcHVibGljIGRvbWFpbi4KKyAgICAgIChsaWNlbnNlIChsaXN0IGJzZC0z IGJzZC00IGdwbDIrIHB1YmxpYy1kb21haW4pKSkpKQorCi0tIAoyLjI1LjEKCg== --000000000000a3981905a0437fb5--