From 84a66d0efb5eb9a8106d58ef6dd99cd91fcffc14 Mon Sep 17 00:00:00 2001 From: Tony Vroon Date: Mon, 23 Mar 2015 11:44:17 +0000 Subject: [PATCH] Remove vulnerable ebuilds for security bug #539884. Package-Manager: portage-2.2.18/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A --- app-misc/elasticsearch/ChangeLog | 6 +- app-misc/elasticsearch/Manifest | 14 +-- .../elasticsearch-1.3.2-r2.ebuild | 86 ------------------- .../elasticsearch/elasticsearch-1.4.0.ebuild | 84 ------------------ .../elasticsearch/elasticsearch-1.4.2.ebuild | 84 ------------------ 5 files changed, 9 insertions(+), 265 deletions(-) delete mode 100644 app-misc/elasticsearch/elasticsearch-1.3.2-r2.ebuild delete mode 100644 app-misc/elasticsearch/elasticsearch-1.4.0.ebuild delete mode 100644 app-misc/elasticsearch/elasticsearch-1.4.2.ebuild diff --git a/app-misc/elasticsearch/ChangeLog b/app-misc/elasticsearch/ChangeLog index 5eab52a6a785..a7191f0cdda3 100644 --- a/app-misc/elasticsearch/ChangeLog +++ b/app-misc/elasticsearch/ChangeLog @@ -1,6 +1,10 @@ # ChangeLog for app-misc/elasticsearch # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/app-misc/elasticsearch/ChangeLog,v 1.10 2015/03/18 10:07:27 chainsaw Exp $ +# $Header: /var/cvsroot/gentoo-x86/app-misc/elasticsearch/ChangeLog,v 1.11 2015/03/23 11:44:12 chainsaw Exp $ + + 23 Mar 2015; Tony Vroon -elasticsearch-1.3.2-r2.ebuild, + -elasticsearch-1.4.0.ebuild, -elasticsearch-1.4.2.ebuild: + Remove vulnerable ebuilds for security bug #539884. *elasticsearch-1.4.4 (18 Mar 2015) diff --git a/app-misc/elasticsearch/Manifest b/app-misc/elasticsearch/Manifest index 0fca7704d44b..242af1f6d4a0 100644 --- a/app-misc/elasticsearch/Manifest +++ b/app-misc/elasticsearch/Manifest @@ -8,20 +8,14 @@ AUX elasticsearch.init2 2296 SHA256 a2abd2f6423ebc382a130b6264114d2e4b28d1ec7059 AUX elasticsearch.init3 2319 SHA256 cb00de8eb5d6f3ddfe48fed1fe20b527900ad79984e24c2c12b61c3aacad2732 SHA512 903b4014541d2793b70c0520c1e901ddc7fca133897b1b3c772859dffe16ec804fa89e254edc0c52800f8d0c929ba32cfadab359575bc76fe197679fe10b9e02 WHIRLPOOL 25465dfb52b2d8cfd3ad502470b43edabc086ac731d78b2e86043bae54c7926e73cc5d0ec54c036090a9f27cc1ac56e5e2942d1821e3063a72daf7e7df35a797 AUX elasticsearch.service 274 SHA256 d8581135cb5f6b73245e571f0cd3cfa85c90d96474304214324958b9ee952f7e SHA512 14c0696ab1244e4afde34c0f6aaececbb5a80a75dc9ad23841adefde815c8c9a604858902bd87609d8191dfca7c4eb24f1ad2d041d50d22a789296bf43366a76 WHIRLPOOL 8df4eb48efac8353c21685bc17bd30ce8835f9f5f91f19acd3f69a42a780c69fc118f74d003429e1da9558ffad1a1e649c57521ba8219fcb262a2ffdb2e24e9c AUX elasticsearch.service2 279 SHA256 2a827cfa6331652e5a34bb975da52fec6d12ce0a80eacf810f62e22c5272349b SHA512 17994b7a5b0ef883034765d2b0e5c29daccb1e122b956f598d0c2b24085a0e66450fa143e3c656d75bf149a53ca497bc8c747b62ba47743aad17ae1a446d6d7d WHIRLPOOL 0c97253da7f75586c135568036f149f2465a1d73f5cb6e67b45a36832c2f54b61b0bcfd60db122c7e1ea6e7595e379dfe49a7e7bbad596840da6158a7d56dc46 -DIST elasticsearch-1.3.2.tar.gz 27949096 SHA256 7525d0a4db4f7eb791a1f8da97b081a5d8b44a2b232d8324877177bdee992ea4 SHA512 4a67531cf9927db466f70b4c572c472913533352de586f7e2c5f84ec9c7337002a0de0ee2bdb809e99b954bb8bd7d207baf723f1b53b2949702f838c85d6380a WHIRLPOOL 3b3edfefa6e49b2271ed107ecc8d2a84ab3db6834f85eb90c33fc8f9dfff4a815cbd2f3d7af2e6f6a9edfd2186508f6308bdee3846405cebf4ab89e8d13f0ffd -DIST elasticsearch-1.4.0.tar.gz 27730896 SHA256 b317966befa50c22595477f9bad8ce67932e4d33e08ee8fb1c6e9690afa5064a SHA512 763307f9dc65c408190b1620907573c949755fc2fb3652c8de1068a566f567fb56ace4058762d1243c64391ac25f495ccf92ebfad0af470a83d3154d3ccaec8d WHIRLPOOL 13e596fba51d5b7b5ec2950534d6655238cee56b414e4265eb463ce0de287b9155ac7c7112c9f4222b6e11589f2606f35779df9b40de13032c4c6ee2d43ed85b -DIST elasticsearch-1.4.2.tar.gz 27734207 SHA256 31dd6c049745f7dac201f94852b778b0841d6869d358fd80d4c897d0bf73b53c SHA512 b82e644b0b81489ce0d4fc72ca0efa3545c55c4d947faec2537035d440be83bac0f794f1a2863d87649e36f87d250c1f4e46ae57053b50948f47f9ff2a3bf6b6 WHIRLPOOL ac40778a999bc92230547b1405f259b7d348983767a87c71e18ed9ef45367ebf0b5b0517ef57bd423fa47ce4387e982aa7ee4a4ec9b2be75a4771e8d737f0cc5 DIST elasticsearch-1.4.4.tar.gz 27900004 SHA256 a3158d474e68520664debaea304be22327fc7ee1f410e0bfd940747b413e8586 SHA512 afc24c5d778d346e24c656e040fb7d0036e16ae42b35ca4f97b2e4d31dc815467ae5462f922ea5222307acf0fa0579f6cd38c603bc996c1f4ba723aa6a2b01ed WHIRLPOOL 37a1a057539ae29525a78fa51f3d19f403e389129e54054edfa1bbd08d12bdbb88acb4e879b6795aa63d583fd70eedefcae5b13b6bf1a7c8314e3aafa49e2b33 -EBUILD elasticsearch-1.3.2-r2.ebuild 2250 SHA256 927dfdb53ad925abd252ae540920b2a5b5cd651e3c5523a773466756624cbd60 SHA512 cf6ad8da8d9e085d7c4ad810c34e1933f35fe6339b13dd04f0b905392668995f6d5977e20cdf886f1bab9b07f82d36c419804ae3223f035ecb700a8a7d16d87f WHIRLPOOL b6da7e2cddc723c06354625e5a54cdc6908e16352e676554f36ac076854609729d561f83737ed98c2fb002495a97c3896f998f7acec9c86d7255627abeb5ffa0 -EBUILD elasticsearch-1.4.0.ebuild 2194 SHA256 0b5df04b1b75198283321070d2f48ecd22a56481e9e66c17e122e744428de0ee SHA512 fa1ae4718fa38978c2d5970528fceae78d2d37c12a4b922e9dffd9d55deb718f84f44d7379b7a57af478bcb1db1a2e8968fc5da3253136eabcf0419b281c6860 WHIRLPOOL a4d93829f40fd82d4ed5e03574a2c4be3d860da152fa291c2695213887c6b0ac2122e4b0aaa74171549a74195089aead02a58c1941996235fd7b7a098e208819 -EBUILD elasticsearch-1.4.2.ebuild 2194 SHA256 2dc265e3694ce69c484d6f55d244a0f2fd47a9524d550b51ab26ea7f6f874c64 SHA512 ae76b3562101b3a501130e1d8c6151d89a7914c0eb83f7a04bee59a059d1825ab491f0cef6c25ce87da214a32d4d7ea5db2eb4c018697378c79c71661543d62d WHIRLPOOL 9d2e8aba5de1c89ccd6b10c20b22009ecc1423a7399eff9d106f500d0c7abf5eb7780d416d82b3cca2ae2bd77f14feeb387d48399622724ca808a743c0cb0bad EBUILD elasticsearch-1.4.4.ebuild 2194 SHA256 14e173ef1be56d6595628e7f584d0cc6bdd951dfcc95bc357fc071ae741cd87a SHA512 1c643441a1f2983932f32eedbf7647b56bc12c2051fdfcecb2e060b0e2d619964f349e80b0cdc15caed95e74ffc2306f636f94298387304c395618d8faf4dc44 WHIRLPOOL 6a16aee1cb7407d5600c947af75b04ea77a9915e95c9f564784c8e5a1bce3b0c7cb5b9f4bc95b5fac9d5b9017103fcea1c4d8e8b21fcc4539782d0579c9e08a3 -MISC ChangeLog 3010 SHA256 7aa4f96ddc43ae05849e651877bd7465caa170ad0870be8dccfaaa01c38644e5 SHA512 456609ff885d9c4d3d3b8af3200a080dbb664d370c529621f9961b9d2e9607b39fe6b4e0df78aea8257ca28530b0ff15959aa7e0de8bee5849f501dedc929f01 WHIRLPOOL cb0205765ac9e03ec3fc762bdfb443bb496e97e6617b2dd7321a01b9dc9e7c42578c888813a42b219e6357fd30f13df8cbf45c1236ed2bbec3222b219f68abc1 +MISC ChangeLog 3205 SHA256 98c74fa1720b46732a509b9ffa8072850fb10c2abb8d9abf5c85ea4cca270154 SHA512 b2a19d1c89293d6899f5ca23c9eb44b246318db2367d53b0b0f962cc8f127dd193feac4f0b6de6957ac916238d72cd809b77cd4cd21a78af5090a9cf272e8376 WHIRLPOOL df9a22b5bc888b9d477e1e98b47b85d4af7e40147c0bfa1fd145b767299ed2cbeadc4b6202362e87ac1257e97449afaa717598128e126a07888e41c66486e0ab MISC metadata.xml 237 SHA256 88d9092fd208599a8b524cca9633d9330223e45c34a44e54b2de05edb4738ac7 SHA512 11773ab2b5adaa81f3c8f73413d2f257ea1d1624df689154ee2697412ff14ea8f9851b805c4a474b486abb0a066cfc929f91eb852a208b9536885d467df36af1 WHIRLPOOL 324b778d3103d615af41fd6d1d978beeeeb08f4823a3c81fd453464b4df2ed59b56a481ddd65b4eb740dc75b4dc69133e761199abe6d27333b1fce97d5b5a1be -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 -iEYEAREIAAYFAlUJTlkACgkQp5vW4rUFj5qpcQCfaeKYbN9yXZVlXv52zWVm+eBz -2lUAn3LQed2t4TIh+l7z7Zdf0tV8nzNX -=vXXV +iEYEAREIAAYFAlUP+88ACgkQp5vW4rUFj5p6/ACgs/vauFMix9/Cb9iz7q+6S9lK +B50AnjrHcR5SQMnquBd0jiTeitxlkChG +=wm28 -----END PGP SIGNATURE----- diff --git a/app-misc/elasticsearch/elasticsearch-1.3.2-r2.ebuild b/app-misc/elasticsearch/elasticsearch-1.3.2-r2.ebuild deleted file mode 100644 index 9dbce79a82da..000000000000 --- a/app-misc/elasticsearch/elasticsearch-1.3.2-r2.ebuild +++ /dev/null @@ -1,86 +0,0 @@ -# Copyright 1999-2015 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/app-misc/elasticsearch/elasticsearch-1.3.2-r2.ebuild,v 1.1 2015/01/05 11:12:33 chainsaw Exp $ - -EAPI=5 - -inherit eutils systemd user - -MY_PN="${PN%-bin}" -DESCRIPTION="Open Source, Distributed, RESTful, Search Engine" -HOMEPAGE="http://www.elasticsearch.org/" -SRC_URI="http://download.${MY_PN}.org/${MY_PN}/${MY_PN}/${MY_PN}-${PV}.tar.gz" -LICENSE="Apache-2.0" -SLOT="0" -KEYWORDS="~amd64" - -RESTRICT="strip" -QA_PREBUILT="usr/share/elasticsearch/lib/sigar/libsigar-*.so" - -RDEPEND="virtual/jre:1.7" - -pkg_setup() { - enewgroup ${MY_PN} - enewuser ${MY_PN} -1 /bin/bash /var/lib/${MY_PN} ${MY_PN} -} - -src_prepare() { - rm -rf lib/sigar/*{solaris,winnt,freebsd,macosx}* - rm lib/sigar/libsigar-ia64-linux.so - rm LICENSE.txt - - use amd64 && { - rm lib/sigar/libsigar-x86-linux.so - } - - use x86 && { - rm lib/sigar/libsigar-amd64-linux.so - } - - # Security bug #524682 - epatch "${FILESDIR}/${PV}-http_cors_disable.patch" -} - -src_install() { - dodir /etc/${MY_PN} - - insinto /usr/share/doc/${P}/examples - doins bin/${MY_PN}.in.sh - doins config/* - rm bin/${MY_PN}.in.sh - rm -rf config - - insinto /usr/share/${MY_PN} - doins -r ./* - chmod +x "${D}"/usr/share/${MY_PN}/bin/* - - keepdir /var/{lib,log}/${MY_PN} - - local rcscript=elasticsearch.init3 - local eshome="/usr/share/${MY_PN}" - local jarfile="${MY_PN}-${PV}.jar" - local esclasspath="${eshome}/lib/${jarfile}:${eshome}/lib/*:${eshome}/lib/sigar/*" - - cp "${FILESDIR}/${rcscript}" "${T}" || die - sed -i \ - -e "s|@ES_CLASS_PATH@|${esclasspath}|" \ - "${T}/${rcscript}" \ - || die "failed to filter ${rcscript}" - - newinitd "${T}/${rcscript}" "${MY_PN}" - newconfd "${FILESDIR}/${MY_PN}.conf" "${MY_PN}" - systemd_newunit "${FILESDIR}"/${PN}.service2 "${PN}.service" -} - -pkg_postinst() { - elog - elog "You may create multiple instances of ${MY_PN} by" - elog "symlinking the init script:" - elog "ln -sf /etc/init.d/${MY_PN} /etc/init.d/${MY_PN}.instance" - elog - elog "Each of the example files in /usr/share/doc/${P}/examples" - elog "should be extracted to the proper configuration directory:" - elog "/etc/${MY_PN} (for standard init)" - elog "/etc/${MY_PN}/instance (for symlinked init)" - elog -} diff --git a/app-misc/elasticsearch/elasticsearch-1.4.0.ebuild b/app-misc/elasticsearch/elasticsearch-1.4.0.ebuild deleted file mode 100644 index 7462dbf3efc1..000000000000 --- a/app-misc/elasticsearch/elasticsearch-1.4.0.ebuild +++ /dev/null @@ -1,84 +0,0 @@ -# Copyright 1999-2015 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/app-misc/elasticsearch/elasticsearch-1.4.0.ebuild,v 1.1 2015/01/05 11:12:33 chainsaw Exp $ - -EAPI=5 - -inherit eutils systemd user - -MY_PN="${PN%-bin}" -DESCRIPTION="Open Source, Distributed, RESTful, Search Engine" -HOMEPAGE="http://www.elasticsearch.org/" -SRC_URI="http://download.${MY_PN}.org/${MY_PN}/${MY_PN}/${MY_PN}-${PV}.tar.gz" -LICENSE="Apache-2.0" -SLOT="0" -KEYWORDS="~amd64" - -RESTRICT="strip" -QA_PREBUILT="usr/share/elasticsearch/lib/sigar/libsigar-*.so" - -RDEPEND="virtual/jre:1.7" - -pkg_setup() { - enewgroup ${MY_PN} - enewuser ${MY_PN} -1 /bin/bash /var/lib/${MY_PN} ${MY_PN} -} - -src_prepare() { - rm -rf lib/sigar/*{solaris,winnt,freebsd,macosx}* - rm -rf bin/*.{bat,exe} - rm lib/sigar/libsigar-ia64-linux.so - rm LICENSE.txt - - use amd64 && { - rm lib/sigar/libsigar-x86-linux.so - } - - use x86 && { - rm lib/sigar/libsigar-amd64-linux.so - } -} - -src_install() { - dodir /etc/${MY_PN} - - insinto /usr/share/doc/${P}/examples - doins bin/${MY_PN}.in.sh - doins config/* - rm bin/${MY_PN}.in.sh - rm -rf config - - insinto /usr/share/${MY_PN} - doins -r ./* - chmod +x "${D}"/usr/share/${MY_PN}/bin/* - - keepdir /var/{lib,log}/${MY_PN} - - local rcscript=elasticsearch.init3 - local eshome="/usr/share/${MY_PN}" - local jarfile="${MY_PN}-${PV}.jar" - local esclasspath="${eshome}/lib/${jarfile}:${eshome}/lib/*:${eshome}/lib/sigar/*" - - cp "${FILESDIR}/${rcscript}" "${T}" || die - sed -i \ - -e "s|@ES_CLASS_PATH@|${esclasspath}|" \ - "${T}/${rcscript}" \ - || die "failed to filter ${rcscript}" - - newinitd "${T}/${rcscript}" "${MY_PN}" - newconfd "${FILESDIR}/${MY_PN}.conf" "${MY_PN}" - systemd_newunit "${FILESDIR}"/${PN}.service2 "${PN}.service" -} - -pkg_postinst() { - elog - elog "You may create multiple instances of ${MY_PN} by" - elog "symlinking the init script:" - elog "ln -sf /etc/init.d/${MY_PN} /etc/init.d/${MY_PN}.instance" - elog - elog "Each of the example files in /usr/share/doc/${P}/examples" - elog "should be extracted to the proper configuration directory:" - elog "/etc/${MY_PN} (for standard init)" - elog "/etc/${MY_PN}/instance (for symlinked init)" - elog -} diff --git a/app-misc/elasticsearch/elasticsearch-1.4.2.ebuild b/app-misc/elasticsearch/elasticsearch-1.4.2.ebuild deleted file mode 100644 index 791563824ecc..000000000000 --- a/app-misc/elasticsearch/elasticsearch-1.4.2.ebuild +++ /dev/null @@ -1,84 +0,0 @@ -# Copyright 1999-2015 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/app-misc/elasticsearch/elasticsearch-1.4.2.ebuild,v 1.1 2015/01/06 10:47:22 chainsaw Exp $ - -EAPI=5 - -inherit eutils systemd user - -MY_PN="${PN%-bin}" -DESCRIPTION="Open Source, Distributed, RESTful, Search Engine" -HOMEPAGE="http://www.elasticsearch.org/" -SRC_URI="http://download.${MY_PN}.org/${MY_PN}/${MY_PN}/${MY_PN}-${PV}.tar.gz" -LICENSE="Apache-2.0" -SLOT="0" -KEYWORDS="~amd64" - -RESTRICT="strip" -QA_PREBUILT="usr/share/elasticsearch/lib/sigar/libsigar-*.so" - -RDEPEND="virtual/jre:1.7" - -pkg_setup() { - enewgroup ${MY_PN} - enewuser ${MY_PN} -1 /bin/bash /var/lib/${MY_PN} ${MY_PN} -} - -src_prepare() { - rm -rf lib/sigar/*{solaris,winnt,freebsd,macosx}* - rm -rf bin/*.{bat,exe} - rm lib/sigar/libsigar-ia64-linux.so - rm LICENSE.txt - - use amd64 && { - rm lib/sigar/libsigar-x86-linux.so - } - - use x86 && { - rm lib/sigar/libsigar-amd64-linux.so - } -} - -src_install() { - dodir /etc/${MY_PN} - - insinto /usr/share/doc/${P}/examples - doins bin/${MY_PN}.in.sh - doins config/* - rm bin/${MY_PN}.in.sh - rm -rf config - - insinto /usr/share/${MY_PN} - doins -r ./* - chmod +x "${D}"/usr/share/${MY_PN}/bin/* - - keepdir /var/{lib,log}/${MY_PN} - - local rcscript=elasticsearch.init3 - local eshome="/usr/share/${MY_PN}" - local jarfile="${MY_PN}-${PV}.jar" - local esclasspath="${eshome}/lib/${jarfile}:${eshome}/lib/*:${eshome}/lib/sigar/*" - - cp "${FILESDIR}/${rcscript}" "${T}" || die - sed -i \ - -e "s|@ES_CLASS_PATH@|${esclasspath}|" \ - "${T}/${rcscript}" \ - || die "failed to filter ${rcscript}" - - newinitd "${T}/${rcscript}" "${MY_PN}" - newconfd "${FILESDIR}/${MY_PN}.conf" "${MY_PN}" - systemd_newunit "${FILESDIR}"/${PN}.service2 "${PN}.service" -} - -pkg_postinst() { - elog - elog "You may create multiple instances of ${MY_PN} by" - elog "symlinking the init script:" - elog "ln -sf /etc/init.d/${MY_PN} /etc/init.d/${MY_PN}.instance" - elog - elog "Each of the example files in /usr/share/doc/${P}/examples" - elog "should be extracted to the proper configuration directory:" - elog "/etc/${MY_PN} (for standard init)" - elog "/etc/${MY_PN}/instance (for symlinked init)" - elog -} -- 2.26.2