devel/libqb: update 2.0.6 → 2.0.8, fix CVE-2023-39976, take maintainership

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long
log messages because the header size is not considered.
https://nvd.nist.gov/vuln/detail/CVE-2023-39976

Changelogs:
https://github.com/ClusterLabs/libqb/releases/tag/v2.0.7
https://github.com/ClusterLabs/libqb/releases/tag/v2.0.8

Improve port: remove GNU_CONFIGURE_MANPREFIX, update pkg-descr, fix
warnings from portclippy.

PR:	282536
MFH:	2024Q4
This commit is contained in:
Älven 2024-11-04 23:34:07 +03:00 committed by Vladimir Druzenko
parent 41b83c53f8
commit c08f528cd3
5 changed files with 23 additions and 30 deletions

View file

@ -1,44 +1,44 @@
PORTNAME= libqb PORTNAME= libqb
DISTVERSION= 2.0.6 DISTVERSION= 2.0.8
PORTREVISION= 1
CATEGORIES= devel CATEGORIES= devel
MASTER_SITES= https://github.com/ClusterLabs/${PORTNAME}/releases/download/v${DISTVERSION}/ MASTER_SITES= https://github.com/ClusterLabs/${PORTNAME}/releases/download/v${DISTVERSION}/
MAINTAINER= ports@FreeBSD.org MAINTAINER= alster@vinterdalen.se
COMMENT= High performance logging, tracing, ipc, and polling library COMMENT= High performance logging, tracing, ipc, and polling library
WWW= https://github.com/ClusterLabs/libqb/wiki WWW= https://github.com/ClusterLabs/libqb/wiki
LICENSE= LGPL21 LICENSE= LGPL21
LICENSE_FILE= ${WRKSRC}/COPYING LICENSE_FILE= ${WRKSRC}/COPYING
TEST_DEPENDS= checkmk:devel/check TEST_DEPENDS= checkmk:devel/check
GROUPS= haclient
QB_SOCKET_DIR?= /var/run/qb
PLIST_SUB+= QB_SOCKET_DIR=${QB_SOCKET_DIR}
USES= cpe gmake gnome libtool pkgconfig python tar:xz USES= cpe gmake gnome libtool pkgconfig python tar:xz
CPE_VENDOR= clusterlabs CPE_VENDOR= clusterlabs
GNU_CONFIGURE= yes
GNU_CONFIGURE_MANPREFIX= ${PREFIX}/share
USE_GNOME= libxml2 USE_GNOME= libxml2
USE_LDCONFIG= yes USE_LDCONFIG= yes
GNU_CONFIGURE= yes
CONFIGURE_ARGS= --with-socket-dir=${QB_SOCKET_DIR} \ CONFIGURE_ARGS= --with-socket-dir=${QB_SOCKET_DIR} \
PACKAGE_STRING="${PORTNAME} ${DISTVERSION}" \ PACKAGE_STRING="${PORTNAME} ${DISTVERSION}" \
PACKAGE_VERSION=${DISTVERSION} PACKAGE_VERSION=${DISTVERSION}
LDFLAGS= -B${LOCALBASE}/bin
INSTALL_TARGET= install-strip INSTALL_TARGET= install-strip
TEST_TARGET= check TEST_TARGET= check
LDFLAGS+= -B${LOCALBASE}/bin
GROUPS= haclient
PLIST_SUB+= QB_SOCKET_DIR=${QB_SOCKET_DIR}
OPTIONS_DEFINE= DOCS DOXYGEN OPTIONS_DEFINE= DOCS DOXYGEN
OPTIONS_SUB= yes OPTIONS_SUB= yes
DOXYGEN_IMPLIES= DOCS DOXYGEN_IMPLIES= DOCS
DOXYGEN_BUILD_DEPENDS= doxygen:devel/doxygen DOXYGEN_BUILD_DEPENDS= doxygen:devel/doxygen
QB_SOCKET_DIR?= /var/run/qb
post-configure: post-configure:
${REINPLACE_CMD} -e 's/install: install-am/install:/g' ${WRKSRC}/doxygen2man/Makefile ${REINPLACE_CMD} -e 's/install: install-am/install:/g' ${WRKSRC}/doxygen2man/Makefile

View file

@ -1,3 +1,3 @@
TIMESTAMP = 1678190523 TIMESTAMP = 1730659822
SHA256 (libqb-2.0.6.tar.xz) = f1e744208e8f69934804c14e05d9707668f99d4867de9cccf2f7a6bf4d48331c SHA256 (libqb-2.0.8.tar.xz) = b42531fc20b8ac02f4c6d0a4dc49f7c4a1eef09bdb13af5f6927b7fc49522ee6
SIZE (libqb-2.0.6.tar.xz) = 507400 SIZE (libqb-2.0.8.tar.xz) = 521600

View file

@ -1,11 +0,0 @@
--- configure.orig 2022-01-19 20:58:44 UTC
+++ configure
@@ -21201,7 +21201,7 @@ done
CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
LIBS="$LIBS $PTHREAD_LIBS"
-for ac_func in pthread_spin_lock pthread_setschedparam \
+for ac_func in pthread_setschedparam \
pthread_mutexattr_setpshared \
pthread_condattr_setpshared \
sem_timedwait semtimedop

View file

@ -1,3 +1,7 @@
libqb is a library with the primary purpose of providing high performance libqb is a library with the primary purpose of providing high-performance,
client server reusable features. It provides high performance logging, tracing, reusable features for client-server architecture, such as logging, tracing,
ipc, and poll. inter-process communication (IPC), and polling.
libqb is not intended to be an all-encompassing library, but instead provide
focused APIs that are highly tuned for maximum performance for client-server
applications.

View file

@ -15,7 +15,7 @@ include/qb/qbutil.h
lib/libqb.a lib/libqb.a
lib/libqb.so lib/libqb.so
lib/libqb.so.100 lib/libqb.so.100
lib/libqb.so.100.3.0 lib/libqb.so.100.3.2
libdata/pkgconfig/libqb.pc libdata/pkgconfig/libqb.pc
sbin/qb-blackbox sbin/qb-blackbox
%%PORTDOCS%%%%DOCSDIR%%/COPYING %%PORTDOCS%%%%DOCSDIR%%/COPYING