From 0adbda84dd1e9ed6b32d8a63390eca6fabbf92fa Mon Sep 17 00:00:00 2001 From: uglyside Date: Wed, 25 Jun 2025 21:29:59 +0300 Subject: [PATCH 1/6] plank-reloaded v0.11.135 --- util/dock/plank/pspec.xml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/util/dock/plank/pspec.xml b/util/dock/plank/pspec.xml index cbe217c8ab..49af29d94d 100644 --- a/util/dock/plank/pspec.xml +++ b/util/dock/plank/pspec.xml @@ -13,7 +13,7 @@ app Plank reloaded. Still stupidly simple. A simplest dock. Also it is library which can be extended to create other dock programs with more advanced features. - https://github.com/zquestz/plank-reloaded/archive/0.11.127/plank-reloaded-0.11.127.tar.gz + https://github.com/zquestz/plank-reloaded/archive/0.11.135/plank-reloaded-0.11.135.tar.gz meson atk-devel @@ -91,6 +91,13 @@ + + 2025-06-25 + 0.11.135 + Version bump. + Kamil Atlı + suvari@pisilinux.org + 2025-05-16 0.11.127 From 198d32d9a3375e4f7d56a42681d247ca4f167bda Mon Sep 17 00:00:00 2001 From: uglyside Date: Fri, 27 Jun 2025 03:49:59 +0300 Subject: [PATCH 2/6] plank bump v136. --- util/dock/plank/pspec.xml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/util/dock/plank/pspec.xml b/util/dock/plank/pspec.xml index 49af29d94d..357d23de76 100644 --- a/util/dock/plank/pspec.xml +++ b/util/dock/plank/pspec.xml @@ -13,7 +13,7 @@ app Plank reloaded. Still stupidly simple. A simplest dock. Also it is library which can be extended to create other dock programs with more advanced features. - https://github.com/zquestz/plank-reloaded/archive/0.11.135/plank-reloaded-0.11.135.tar.gz + https://github.com/zquestz/plank-reloaded/archive/0.11.136/plank-reloaded-0.11.136.tar.gz meson atk-devel @@ -92,8 +92,8 @@ - 2025-06-25 - 0.11.135 + 2025-06-27 + 0.11.136 Version bump. Kamil Atlı suvari@pisilinux.org From 3706753eea0164a4d194d932774ebbd5cdacf562 Mon Sep 17 00:00:00 2001 From: uglyside Date: Sat, 28 Jun 2025 16:13:49 +0300 Subject: [PATCH 3/6] libetpan rebuild. --- .../libetpan/files/CVE-2020-15953.patch | 79 +++++++++++ ...ata_after_STARTTLS_response_and_exit.patch | 27 ---- network/library/libetpan/pspec.xml | 131 +++++++++--------- 3 files changed, 148 insertions(+), 89 deletions(-) create mode 100644 network/library/libetpan/files/CVE-2020-15953.patch delete mode 100644 network/library/libetpan/files/Detect_extra_data_after_STARTTLS_response_and_exit.patch diff --git a/network/library/libetpan/files/CVE-2020-15953.patch b/network/library/libetpan/files/CVE-2020-15953.patch new file mode 100644 index 0000000000..e02b000aad --- /dev/null +++ b/network/library/libetpan/files/CVE-2020-15953.patch @@ -0,0 +1,79 @@ +From 1002a0121a8f5a9aee25357769807f2c519fa50b Mon Sep 17 00:00:00 2001 +From: Damian Poddebniak +Date: Fri, 24 Jul 2020 19:39:53 +0200 +Subject: [PATCH] Detect extra data after STARTTLS response and exit (#387) + +--- + src/low-level/imap/mailimap.c | 7 +++++++ + 1 file changed, 7 insertions(+) + +diff --git a/src/low-level/imap/mailimap.c b/src/low-level/imap/mailimap.c +index bb17119d..4ffcf55d 100644 +--- a/src/low-level/imap/mailimap.c ++++ b/src/low-level/imap/mailimap.c +@@ -2428,6 +2428,13 @@ int mailimap_starttls(mailimap * session) + + mailimap_response_free(response); + ++ // Detect if the server send extra data after the STARTTLS response. ++ // This *may* be a "response injection attack". ++ if (session->imap_stream->read_buffer_len != 0) { ++ // Since it is also an IMAP protocol violation, exit. ++ return MAILIMAP_ERROR_STARTTLS; ++ } ++ + switch (error_code) { + case MAILIMAP_RESP_COND_STATE_OK: + return MAILIMAP_NO_ERROR; +From 298460a2adaabd2f28f417a0f106cb3b68d27df9 Mon Sep 17 00:00:00 2001 +From: Fabian Ising +Date: Fri, 24 Jul 2020 19:40:48 +0200 +Subject: [PATCH] Detect extra data after STARTTLS responses in SMTP and POP3 + and exit (#388) + +* Detect extra data after STLS response and return error + +* Detect extra data after SMTP STARTTLS response and return error +--- + src/low-level/pop3/mailpop3.c | 8 ++++++++ + src/low-level/smtp/mailsmtp.c | 8 ++++++++ + 2 files changed, 16 insertions(+) + +diff --git a/src/low-level/pop3/mailpop3.c b/src/low-level/pop3/mailpop3.c +index ab9535be..e2124bf8 100644 +--- a/src/low-level/pop3/mailpop3.c ++++ b/src/low-level/pop3/mailpop3.c +@@ -959,6 +959,14 @@ int mailpop3_stls(mailpop3 * f) + + if (r != RESPONSE_OK) + return MAILPOP3_ERROR_STLS_NOT_SUPPORTED; ++ ++ // Detect if the server send extra data after the STLS response. ++ // This *may* be a "response injection attack". ++ if (f->pop3_stream->read_buffer_len != 0) { ++ // Since it is also protocol violation, exit. ++ // There is no error type for STARTTLS errors in POP3 ++ return MAILPOP3_ERROR_SSL; ++ } + + return MAILPOP3_NO_ERROR; + } +diff --git a/src/low-level/smtp/mailsmtp.c b/src/low-level/smtp/mailsmtp.c +index b7fc459e..3145cadf 100644 +--- a/src/low-level/smtp/mailsmtp.c ++++ b/src/low-level/smtp/mailsmtp.c +@@ -1111,6 +1111,14 @@ int mailesmtp_starttls(mailsmtp * session) + return MAILSMTP_ERROR_STREAM; + r = read_response(session); + ++ // Detect if the server send extra data after the STARTTLS response. ++ // This *may* be a "response injection attack". ++ if (session->stream->read_buffer_len != 0) { ++ // Since it is also protocol violation, exit. ++ // There is no general error type for STARTTLS errors in SMTP ++ return MAILSMTP_ERROR_SSL; ++ } ++ + switch (r) { + case 220: + return MAILSMTP_NO_ERROR; diff --git a/network/library/libetpan/files/Detect_extra_data_after_STARTTLS_response_and_exit.patch b/network/library/libetpan/files/Detect_extra_data_after_STARTTLS_response_and_exit.patch deleted file mode 100644 index 1130e3a513..0000000000 --- a/network/library/libetpan/files/Detect_extra_data_after_STARTTLS_response_and_exit.patch +++ /dev/null @@ -1,27 +0,0 @@ -From 8ceb0cf0191f8b374a7f05974b29c6242ce8f752 Mon Sep 17 00:00:00 2001 -From: Damian Poddebniak -Date: Thu, 23 Jul 2020 19:24:45 +0200 -Subject: [PATCH] Detect extra data after STARTTLS response and exit - ---- - src/low-level/imap/mailimap.c | 7 +++++++ - 1 file changed, 7 insertions(+) - -diff --git a/src/low-level/imap/mailimap.c b/src/low-level/imap/mailimap.c -index bb17119d..4ffcf55d 100644 ---- a/src/low-level/imap/mailimap.c -+++ b/src/low-level/imap/mailimap.c -@@ -2428,6 +2428,13 @@ int mailimap_starttls(mailimap * session) - - mailimap_response_free(response); - -+ // Detect if the server send extra data after the STARTTLS response. -+ // This *may* be a "response injection attack". -+ if (session->imap_stream->read_buffer_len != 0) { -+ // Since it is also an IMAP protocol violation, exit. -+ return MAILIMAP_ERROR_STARTTLS; -+ } -+ - switch (error_code) { - case MAILIMAP_RESP_COND_STATE_OK: - return MAILIMAP_NO_ERROR; diff --git a/network/library/libetpan/pspec.xml b/network/library/libetpan/pspec.xml index c6f571ddae..e8914db635 100644 --- a/network/library/libetpan/pspec.xml +++ b/network/library/libetpan/pspec.xml @@ -1,76 +1,83 @@ - - libetpan - https://www.etpan.org/libetpan.html - - PisiLinux Community - admins@pisilinux.org - - custom - library - network.library - A portable middleware for email access. - The purpose of this mail library is to provide a portable, efficient framework for different kinds of mail access: IMAP, SMTP, POP and NNTP. - - https://github.com/dinhvh/libetpan/archive/1.9.4.tar.gz - - - db-devel - curl-devel - expat-devel - gnutls-devel - openssl-devel - cyrus-sasl-devel - - - Detect_extra_data_after_STARTTLS_response_and_exit.patch - - + + libetpan + https://www.etpan.org/libetpan.html + + PisiLinux Community + admins@pisilinux.org + + custom + library + network.library + A portable middleware for email access. + The purpose of this mail library is to provide a portable, efficient framework for different kinds of mail access: IMAP, SMTP, POP and NNTP. + + https://github.com/dinhvh/libetpan/archive/1.9.4.tar.gz + + + db-devel + curl-devel + expat-devel + gnutls-devel + openssl-devel + cyrus-sasl-devel + + + CVE-2020-15953.patch + + - - libetpan - - db - openssl - cyrus-sasl - - - /usr/lib - - + + libetpan + + db + openssl + cyrus-sasl + + + /usr/lib + + - - libetpan-devel - - libetpan - db-devel - gnutls-devel - openssl-devel - cyrus-sasl-devel - - - /usr/include - /usr/lib/pkgconfig - - + + libetpan-devel + + libetpan + db-devel + gnutls-devel + openssl-devel + cyrus-sasl-devel + + + /usr/include + /usr/lib/pkgconfig + + - - + + + 2025-06-28 + 1.9.4 + Rebuild. + Mustafa Cinasal + muscnsl@gmail.com + + 2024-12-27 1.9.4 Rebuild. Mustafa Cinasal muscnsl@gmail.com - - 2021-10-13 - 1.9.4 - First build - fury - uglyside@yandex.ru - - + + 2021-10-13 + 1.9.4 + First build + fury + uglyside@yandex.ru + + From 211262b1edb2826b303890a13b4bbf642db6b0f5 Mon Sep 17 00:00:00 2001 From: uglyside Date: Sat, 28 Jun 2025 16:14:36 +0300 Subject: [PATCH 4/6] plank-reloaded v0.11.139 --- util/dock/plank/pspec.xml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/util/dock/plank/pspec.xml b/util/dock/plank/pspec.xml index 357d23de76..6e2fb402c3 100644 --- a/util/dock/plank/pspec.xml +++ b/util/dock/plank/pspec.xml @@ -13,7 +13,7 @@ app Plank reloaded. Still stupidly simple. A simplest dock. Also it is library which can be extended to create other dock programs with more advanced features. - https://github.com/zquestz/plank-reloaded/archive/0.11.136/plank-reloaded-0.11.136.tar.gz + https://github.com/zquestz/plank-reloaded/archive/0.11.139/plank-reloaded-0.11.139.tar.gz meson atk-devel @@ -92,8 +92,8 @@ - 2025-06-27 - 0.11.136 + 2025-06-28 + 0.11.139 Version bump. Kamil Atlı suvari@pisilinux.org From bb94e2331124f58608367a14c5e296b092b3ef04 Mon Sep 17 00:00:00 2001 From: uglyside Date: Sat, 28 Jun 2025 16:15:50 +0300 Subject: [PATCH 5/6] libXaw3dXft v1.6.4 --- x11/library/libXaw3dXft/pspec.xml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/x11/library/libXaw3dXft/pspec.xml b/x11/library/libXaw3dXft/pspec.xml index 68354f1973..2587a3fe1b 100644 --- a/x11/library/libXaw3dXft/pspec.xml +++ b/x11/library/libXaw3dXft/pspec.xml @@ -13,7 +13,7 @@ library Athena Widgets + 3D + FreeType font support. libXaw3dXft is an extension of libXaw3d that adds FreeType font support. - https://github.com/DaveFlater/libXaw3dXft/releases/download/v1.6.3/libxaw3dxft-1.6.3.tar.xz + https://github.com/DaveFlater/libXaw3dXft/releases/download/v1.6.4/libxaw3dxft-1.6.4.tar.xz Xaw3d-devel libXt-devel @@ -61,6 +61,13 @@ + + 2025-06-28 + 1.6.4 + Version bump. + Kamil Atlı + suvari@pisilinux.org + 2025-06-20 1.6.3 From b116c5f2b9b6daa386cb6fd2effb1583ba3c05c4 Mon Sep 17 00:00:00 2001 From: uglyside Date: Sat, 28 Jun 2025 16:23:24 +0300 Subject: [PATCH 6/6] libetpan filetype fix. --- network/library/libetpan/pspec.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/network/library/libetpan/pspec.xml b/network/library/libetpan/pspec.xml index e8914db635..9099c3505e 100644 --- a/network/library/libetpan/pspec.xml +++ b/network/library/libetpan/pspec.xml @@ -52,7 +52,7 @@ /usr/include - /usr/lib/pkgconfig + /usr/lib/pkgconfig