Date: Monday, August 14, 2017 @ 18:40:57 Author: shibumi Revision: 250420
upgpkg: strongswan 5.5.3-4 Security update Modified: strongswan/trunk/PKGBUILD ----------+ PKGBUILD | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2017-08-14 18:34:28 UTC (rev 250419) +++ PKGBUILD 2017-08-14 18:40:57 UTC (rev 250420) @@ -11,7 +11,7 @@ pkgname=strongswan pkgver=5.5.3 -pkgrel=3 +pkgrel=4 pkgdesc="open source IPsec implementation" url='http://www.strongswan.org' license=("GPL2") @@ -38,6 +38,8 @@ source=("https://download.strongswan.org/strongswan-${pkgver}.tar.bz2"; "https://download.strongswan.org/strongswan-${pkgver}.tar.bz2.sig"; 'configure_ac.patch' + 'https://download.strongswan.org/security/CVE-2017-11185/strongswan-4.4.0-5.5.3_gmp_mpz_export.patch' + 'https://download.strongswan.org/security/CVE-2017-11185/strongswan-4.4.0-5.5.3_gmp_mpz_export.patch.sig' ) validpgpkeys=("948F158A4E76A27BF3D07532DF42C170B34DBA77") @@ -44,7 +46,9 @@ sha512sums=('0b0b25d2102c98cda54300dc8c3c3a49a55e64f7c695dda65a24f2194f19bce0b7aab9e4f7486c243b552f9d1a94867d6a8782ee504aad1c9973809706d599ac' 'SKIP' - '0e2c818f2f620410dda949d9016a4c1a686bf2946acb3b42a729b2376c077f4dad6762fe8d2f736c213c4895c1fbd60c0d654a1c36f72d06f58ba7cff635bc74') + '0e2c818f2f620410dda949d9016a4c1a686bf2946acb3b42a729b2376c077f4dad6762fe8d2f736c213c4895c1fbd60c0d654a1c36f72d06f58ba7cff635bc74' + '276bcbd0cd3c550ddd4b3f5dfbcb490bb1e50ec8ed97789944409e3c05232903b99332c653cec9c9cf46eab445fd67113d1babef32156b1a5c77a68d2b83260b' + 'SKIP') # We don't build libipsec because it would get loaded before kernel-netlink and netkey, which # would case processing to be handled in user space. Also, the plugin is experimental. If you need it, @@ -52,6 +56,7 @@ prepare() { cd "${srcdir}/${pkgname}-${pkgver}" patch -p1 -l < "${srcdir}/configure_ac.patch" + patch -p1 -l < "${srcdir}/strongswan-4.4.0-5.5.3_gmp_mpz_export.patch" autoreconf }
