commit:     cfa2681eb2aeb7381495dbe7ebc062781471ccc5
Author:     Jaco Kroon <jaco <AT> uls <DOT> co <DOT> za>
AuthorDate: Mon Dec  2 12:36:27 2024 +0000
Commit:     Florian Schmaus <flow <AT> gentoo <DOT> org>
CommitDate: Wed Feb  5 11:13:09 2025 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cfa2681e

net-misc/frr: add 10.2.1 - CVE-2024-55553

Bug: https://bugs.gentoo.org/947630
Signed-off-by: Jaco Kroon <jaco <AT> uls.co.za>
Signed-off-by: Florian Schmaus <flow <AT> gentoo.org>

 net-misc/frr/Manifest          |   1 +
 net-misc/frr/frr-10.2.1.ebuild | 149 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 150 insertions(+)

diff --git a/net-misc/frr/Manifest b/net-misc/frr/Manifest
index e2f0cbddbb95..314b0f0f74e2 100644
--- a/net-misc/frr/Manifest
+++ b/net-misc/frr/Manifest
@@ -1,3 +1,4 @@
 DIST frr-10.0.2.tar.gz 10968487 BLAKE2B 
420503f25e2e40ce9f53cbb04416ba6d2fd8c7c0958f2d42391d7b534e0547e9ee429ad419cb87a06331efa75603bac1a8439844fe6a478f3b5513e656cab726
 SHA512 
d37373faab6b004b2bb3d99bee76a4a620ef9dcacfeadb9bbea611cb01ece869467583cde656715d50912b44a84da27103da9b2e76da8bcec9c95436ac45393c
 DIST frr-10.1.1.tar.gz 11044980 BLAKE2B 
32e50394c35712bc4799cae23c369aca6307d92b20a52ca9c2264b9ee82798d4372816cf87fc6e5c00c14d7aa85b08d3560f7ef6e0d72dd2a2ad231f8f7e3841
 SHA512 
c555bafc7437e8ba0216bd9cc7e0a432af4c9877255ab4ffdd97a0b7626eb3c9022051b91f6cd5d27d06531f6edef84742b67169ebbc040b8a904e58712cb654
+DIST frr-10.2.1.tar.gz 11178677 BLAKE2B 
8bcc8ccf8febee1012d94a9f3de40cc177bec1af464cd935303df8859a72607d03e5f9030f05bed5d56a7a413a0029479f538b3c0b35acc4a66295b4229f6be1
 SHA512 
8544280a0c536e8688cbf2811d96cdc2fa3413f662013bb1b58cb02d4d56a08d98e870b39e477f6b0294e6aceb5dcc99c5facdeee165ce7597c2150ebb79101e
 DIST frr-9.1.2.tar.gz 10790677 BLAKE2B 
dfa4967ee0e0bbecea016b9deeb70b1c1b9e409469de145050602608dddd41857be946e8df5c8a594dfaf6a124729af55d7ce4483e6fe6edc41125f09d9dabd2
 SHA512 
e0ed613090140ece181bff077a7067a00a5fca648ec6627c02d815060087497c68712c1ba244fa1534cdbcef49db92bd9432545d05027dc4b04db4f423726882

diff --git a/net-misc/frr/frr-10.2.1.ebuild b/net-misc/frr/frr-10.2.1.ebuild
new file mode 100644
index 000000000000..6e1d6a35e541
--- /dev/null
+++ b/net-misc/frr/frr-10.2.1.ebuild
@@ -0,0 +1,149 @@
+# Copyright 2020-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+PYTHON_COMPAT=( python3_{10..13} )
+inherit autotools pam python-single-r1 systemd
+
+DESCRIPTION="The FRRouting Protocol Suite"
+HOMEPAGE="https://frrouting.org/";
+SRC_URI="https://github.com/FRRouting/frr/archive/${P}.tar.gz";
+# FRR tarballs have weird format.
+S="${WORKDIR}/frr-${P}"
+
+LICENSE="GPL-2+"
+SLOT="0/$(ver_cut 1-2)"
+KEYWORDS="~amd64 ~arm64 ~x86"
+IUSE="doc fpm grpc nhrp ospfapi pam rpki snmp test"
+REQUIRED_USE="${PYTHON_REQUIRED_USE}"
+RESTRICT="!test? ( test )"
+
+COMMON_DEPEND="
+       ${PYTHON_DEPS}
+       acct-user/frr
+       dev-libs/json-c:0=
+       dev-libs/protobuf-c:0=
+       >=net-libs/libyang-2.1.128
+       sys-libs/libcap
+       sys-libs/readline:0=
+       virtual/libcrypt:=
+       grpc? ( net-libs/grpc:= )
+       nhrp? ( net-dns/c-ares:0= )
+       pam? ( sys-libs/pam )
+       rpki? ( >=net-libs/rtrlib-0.8.0[ssh] )
+       snmp? ( net-analyzer/net-snmp:= )
+"
+BDEPEND="
+       sys-devel/flex
+       app-alternatives/yacc
+       doc? ( dev-python/sphinx )
+"
+DEPEND="
+       ${COMMON_DEPEND}
+       elibc_musl? ( sys-libs/queue-standalone )
+       test? (
+               $(python_gen_cond_dep 'dev-python/pytest[${PYTHON_USEDEP}]')
+               dev-util/cunit
+       )
+"
+RDEPEND="
+       ${COMMON_DEPEND}
+"
+
+PATCHES=(
+       "${FILESDIR}"/${PN}-7.5-ipctl-forwarding.patch
+       "${FILESDIR}"/${PN}-8.4.1-logrotate.patch
+       "${FILESDIR}"/${PN}-9.1-mimic-gnu-basename-api-for-non-glibc.patch
+)
+
+QA_CONFIG_IMPL_DECL_SKIP=(
+       mallinfo # No functional impact.
+       mallinfo2
+)
+
+src_prepare() {
+       default
+
+       python_fix_shebang tools
+       eautoreconf
+}
+
+src_configure() {
+       local myconf=(
+               LEX=flex
+               --with-pkg-extra-version="-gentoo"
+               --enable-configfile-mask=0640
+               --enable-logfile-mask=0640
+               --libdir="${EPREFIX}"/usr/lib/frr
+               --sbindir="${EPREFIX}"/usr/lib/frr
+               --libexecdir="${EPREFIX}"/usr/lib/frr
+               --sysconfdir="${EPREFIX}"/etc/frr
+               --localstatedir="${EPREFIX}"/run/frr
+               --with-moduledir="${EPREFIX}"/usr/lib/frr/modules
+               --enable-user=frr
+               --enable-group=frr
+               --enable-vty-group=frr
+               --enable-multipath=64
+               $(use_enable doc)
+               $(use_enable fpm)
+               $(use_enable grpc)
+               $(use_enable kernel_linux realms)
+               $(use_enable nhrp nhrpd)
+               $(usex ospfapi '--enable-ospfclient' '' '' '')
+               $(use_enable rpki)
+               $(use_enable snmp)
+       )
+
+       econf "${myconf[@]}"
+}
+
+src_compile() {
+       default
+
+       use doc && emake -C doc html
+}
+
+src_test() {
+       local -x PYTEST_DISABLE_PLUGIN_AUTOLOAD=1
+       default
+}
+
+src_install() {
+       default
+       find "${ED}" -name '*.la' -delete || die
+
+       # Install user documentation if asked
+       use doc && dodoc -r doc/user/_build/html
+
+       # Create configuration directory with correct permissions
+       # Create logs directory with the correct permissions
+       diropts -ofrr -gfrr -m0775
+       keepdir /var/log/frr /etc/frr
+
+       # Install the default configuration files
+       insinto /etc/frr
+       doins tools/etc/frr/{vtysh.conf,frr.conf,daemons}
+
+       # Fix permissions/owners.
+       fowners frr:frr /etc/frr/{vtysh.conf,frr.conf,daemons}
+       fperms 640 /etc/frr/{vtysh.conf,frr.conf,daemons}
+
+       # Install logrotate configuration
+       insinto /etc/logrotate.d
+       newins redhat/frr.logrotate frr
+
+       # Install PAM configuration file
+       use pam && newpamd "${FILESDIR}"/frr.pam frr
+
+       # Install init scripts
+       systemd_dounit tools/frr.service
+       newinitd "${FILESDIR}"/frr-openrc-v2 frr
+
+       # Conflict files, installed by net-libs/libsmi, bug #758383
+       # Files from frr seems to be newer.
+       rm "${ED}"/usr/share/yang/ietf-interfaces.yang || die
+       rm "${ED}"/usr/share/yang/ietf-netconf.yang || die
+       rm "${ED}"/usr/share/yang/ietf-netconf-with-defaults.yang || die
+       rm "${ED}"/usr/share/yang/ietf-netconf-acm.yang || die
+}

Reply via email to