Your message dated Fri, 09 Jun 2017 05:50:00 +0000
with message-id <[email protected]>
and subject line Re: Bug#864419: unblock: ettercap (CVE)
has caused the Debian Bug report #864419,
regarding unblock: ettercap/1:0.8.2-6
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
864419: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864419
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
User: [email protected]
Usertags: unblock
Hi Release Team
Please unblock package ettercap, we fixed CVE 2017-8366, but the asan enable
patch is not intended for production use.
I commented out that part
http://www.openwall.com/lists/oss-security/2016/02/17/9
unblock ettercap/1:0.8.2-6
debdiff attached
thanks
G.
diff -Nru ettercap-0.8.2/debian/changelog ettercap-0.8.2/debian/changelog
--- ettercap-0.8.2/debian/changelog 2017-06-04 09:27:11.000000000 +0200
+++ ettercap-0.8.2/debian/changelog 2017-06-08 14:20:58.000000000 +0200
@@ -1,3 +1,10 @@
+ettercap (1:0.8.2-6) unstable; urgency=medium
+
+ * Tweak 803.patch, disable asan.
+ (it is not intended for production)
+
+ -- Gianfranco Costamagna <[email protected]> Thu, 08 Jun 2017
14:20:29 +0200
+
ettercap (1:0.8.2-5) unstable; urgency=high
[ Alexander Koeppe ]
diff -Nru ettercap-0.8.2/debian/patches/803.patch
ettercap-0.8.2/debian/patches/803.patch
--- ettercap-0.8.2/debian/patches/803.patch 2017-06-04 09:25:14.000000000
+0200
+++ ettercap-0.8.2/debian/patches/803.patch 2017-06-08 14:21:18.000000000
+0200
@@ -8,37 +8,37 @@
1 file changed, 1 insertion(+), 1 deletion(-)
Index: ettercap-0.8.2/CMakeLists.txt
-===================================================================
---- ettercap-0.8.2.orig/CMakeLists.txt
-+++ ettercap-0.8.2/CMakeLists.txt
-@@ -125,7 +125,27 @@
- # library dir path in our RPATH.
- set(CMAKE_INSTALL_RPATH_USE_LINK_PATH TRUE)
- endif(NOT DISABLE_RPATH)
-+
-+# set general build flags for debug build-type
- set(CMAKE_C_FLAGS_DEBUG "-O0 -ggdb3 -DDEBUG -Wall -Wno-pointer-sign
-D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -Wextra
-Wredundant-decls" CACHE STRING "" FORCE)
-+# append ASAN build flags if compiler version has support
-+if ("${CMAKE_C_COMPILER_ID}" STREQUAL "GNU")
-+ if (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
-+ set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -fsanitize=address
-fno-omit-frame-pointer" CACHE STRING "" FORCE)
-+ message("Building with ASAN support (GNU compiler)")
-+ else (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
-+ message("Building without ASAN support (GNU compiler)")
-+ endif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
-+elseif ("${CMAKE_C_COMPILER_ID}" STREQUAL "Clang")
-+ if (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
-+ set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -fsanitize=address
-fno-omit-frame-pointer" CACHE STRING "" FORCE)
-+ message("Building with ASAN support (Clang compiler)")
-+ elseif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
-+ message("Building without ASAN support (Clang compiler)")
-+ endif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
-+endif ("${CMAKE_C_COMPILER_ID}" STREQUAL "GNU")
-+
-+# set build flags for release build-type
- set(CMAKE_C_FLAGS_RELEASE "-O2 -w -D_FORTIFY_SOURCE=2" CACHE STRING "" FORCE)
-
- if(OS_DARWIN)
+#===================================================================
+#--- ettercap-0.8.2.orig/CMakeLists.txt
+#+++ ettercap-0.8.2/CMakeLists.txt
+#@@ -125,7 +125,27 @@
+# 8 # library dir path in our RPATH.
+# set(CMAKE_INSTALL_RPATH_USE_LINK_PATH TRUE)
+# endif(NOT DISABLE_RPATH)
+#+
+#+# set general build flags for debug build-type
+# set(CMAKE_C_FLAGS_DEBUG "-O0 -ggdb3 -DDEBUG -Wall -Wno-pointer-sign
-D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -Wextra
-Wredundant-decls" CACHE STRING "" FORCE)
+#+# append ASAN build flags if compiler version has support
+#+if ("${CMAKE_C_COMPILER_ID}" STREQUAL "GNU")
+#+ if (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
+#+ set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -fsanitize=address
-fno-omit-frame-pointer" CACHE STRING "" FORCE)
+#+ message("Building with ASAN support (GNU compiler)")
+#+ else (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
+#+ message("Building without ASAN support (GNU compiler)")
+#+ endif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
+#+elseif ("${CMAKE_C_COMPILER_ID}" STREQUAL "Clang")
+#+ if (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
+#+ set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -fsanitize=address
-fno-omit-frame-pointer" CACHE STRING "" FORCE)
+#+ message("Building with ASAN support (Clang compiler)")
+#+ elseif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
+#+ message("Building without ASAN support (Clang compiler)")
+#+ endif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
+#+endif ("${CMAKE_C_COMPILER_ID}" STREQUAL "GNU")
+#+
+#+# set build flags for release build-type
+# set(CMAKE_C_FLAGS_RELEASE "-O2 -w -D_FORTIFY_SOURCE=2" CACHE STRING "" FORCE)
+#
+# if(OS_DARWIN)
Index: ettercap-0.8.2/include/ec_strings.h
===================================================================
--- ettercap-0.8.2.orig/include/ec_strings.h
diff -Nru ettercap-0.8.2/debian/changelog ettercap-0.8.2/debian/changelog
--- ettercap-0.8.2/debian/changelog 2017-06-04 09:27:11.000000000 +0200
+++ ettercap-0.8.2/debian/changelog 2017-06-08 14:20:58.000000000 +0200
@@ -1,3 +1,10 @@
+ettercap (1:0.8.2-6) unstable; urgency=medium
+
+ * Tweak 803.patch, disable asan.
+ (it is not intended for production)
+
+ -- Gianfranco Costamagna <[email protected]> Thu, 08 Jun 2017
14:20:29 +0200
+
ettercap (1:0.8.2-5) unstable; urgency=high
[ Alexander Koeppe ]
diff -Nru ettercap-0.8.2/debian/patches/803.patch
ettercap-0.8.2/debian/patches/803.patch
--- ettercap-0.8.2/debian/patches/803.patch 2017-06-04 09:25:14.000000000
+0200
+++ ettercap-0.8.2/debian/patches/803.patch 2017-06-08 14:21:18.000000000
+0200
@@ -8,37 +8,37 @@
1 file changed, 1 insertion(+), 1 deletion(-)
Index: ettercap-0.8.2/CMakeLists.txt
-===================================================================
---- ettercap-0.8.2.orig/CMakeLists.txt
-+++ ettercap-0.8.2/CMakeLists.txt
-@@ -125,7 +125,27 @@
- # library dir path in our RPATH.
- set(CMAKE_INSTALL_RPATH_USE_LINK_PATH TRUE)
- endif(NOT DISABLE_RPATH)
-+
-+# set general build flags for debug build-type
- set(CMAKE_C_FLAGS_DEBUG "-O0 -ggdb3 -DDEBUG -Wall -Wno-pointer-sign
-D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -Wextra
-Wredundant-decls" CACHE STRING "" FORCE)
-+# append ASAN build flags if compiler version has support
-+if ("${CMAKE_C_COMPILER_ID}" STREQUAL "GNU")
-+ if (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
-+ set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -fsanitize=address
-fno-omit-frame-pointer" CACHE STRING "" FORCE)
-+ message("Building with ASAN support (GNU compiler)")
-+ else (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
-+ message("Building without ASAN support (GNU compiler)")
-+ endif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
-+elseif ("${CMAKE_C_COMPILER_ID}" STREQUAL "Clang")
-+ if (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
-+ set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -fsanitize=address
-fno-omit-frame-pointer" CACHE STRING "" FORCE)
-+ message("Building with ASAN support (Clang compiler)")
-+ elseif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
-+ message("Building without ASAN support (Clang compiler)")
-+ endif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
-+endif ("${CMAKE_C_COMPILER_ID}" STREQUAL "GNU")
-+
-+# set build flags for release build-type
- set(CMAKE_C_FLAGS_RELEASE "-O2 -w -D_FORTIFY_SOURCE=2" CACHE STRING "" FORCE)
-
- if(OS_DARWIN)
+#===================================================================
+#--- ettercap-0.8.2.orig/CMakeLists.txt
+#+++ ettercap-0.8.2/CMakeLists.txt
+#@@ -125,7 +125,27 @@
+# 8 # library dir path in our RPATH.
+# set(CMAKE_INSTALL_RPATH_USE_LINK_PATH TRUE)
+# endif(NOT DISABLE_RPATH)
+#+
+#+# set general build flags for debug build-type
+# set(CMAKE_C_FLAGS_DEBUG "-O0 -ggdb3 -DDEBUG -Wall -Wno-pointer-sign
-D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -Wextra
-Wredundant-decls" CACHE STRING "" FORCE)
+#+# append ASAN build flags if compiler version has support
+#+if ("${CMAKE_C_COMPILER_ID}" STREQUAL "GNU")
+#+ if (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
+#+ set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -fsanitize=address
-fno-omit-frame-pointer" CACHE STRING "" FORCE)
+#+ message("Building with ASAN support (GNU compiler)")
+#+ else (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
+#+ message("Building without ASAN support (GNU compiler)")
+#+ endif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 4.8)
+#+elseif ("${CMAKE_C_COMPILER_ID}" STREQUAL "Clang")
+#+ if (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
+#+ set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -fsanitize=address
-fno-omit-frame-pointer" CACHE STRING "" FORCE)
+#+ message("Building with ASAN support (Clang compiler)")
+#+ elseif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
+#+ message("Building without ASAN support (Clang compiler)")
+#+ endif (CMAKE_C_COMPILER_VERSION VERSION_GREATER 3.1)
+#+endif ("${CMAKE_C_COMPILER_ID}" STREQUAL "GNU")
+#+
+#+# set build flags for release build-type
+# set(CMAKE_C_FLAGS_RELEASE "-O2 -w -D_FORTIFY_SOURCE=2" CACHE STRING "" FORCE)
+#
+# if(OS_DARWIN)
Index: ettercap-0.8.2/include/ec_strings.h
===================================================================
--- ettercap-0.8.2.orig/include/ec_strings.h
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Gianfranco Costamagna:
> Package: release.debian.org
> User: [email protected]
> Usertags: unblock
>
> Hi Release Team
>
> Please unblock package ettercap, we fixed CVE 2017-8366, but the asan enable
> patch is not intended for production use.
> I commented out that part
> http://www.openwall.com/lists/oss-security/2016/02/17/9
>
> unblock ettercap/1:0.8.2-6
>
> debdiff attached
>
> thanks
>
> G.
>
> [...]
>
Unblocked, thanks.
~Niels
--- End Message ---
