Version bump for security issues (bug 193196).

(Portage version: 2.1.3.9)

4 files changed, 154 insertions, 24 deletions

diff --git a/app-emulation/vmware-server/ChangeLog b/app-emulation/vmware-server/ChangeLog
index 99cdd7464dc6..e641c5e21e25 100644
--- a/app-emulation/vmware-server/ChangeLog
+++ b/app-emulation/vmware-server/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for app-emulation/vmware-server
 # Copyright 1999-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-emulation/vmware-server/ChangeLog,v 1.27 2007/09/16 15:36:50 ikelos Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-emulation/vmware-server/ChangeLog,v 1.28 2007/09/20 17:13:13 ikelos Exp $
+
+*vmware-server-1.0.4.56528 (20 Sep 2007)
+
+  20 Sep 2007; Mike Auty <ikelos@gentoo.org> files/vmware-server.rc,
+  +vmware-server-1.0.4.56528.ebuild:
+  Version bump for security issues (bug 193196).
 
   16 Sep 2007; Mike Auty <ikelos@gentoo.org> files/vmware-authd,
   files/vmware-server.rc, vmware-server-1.0.3.44356.ebuild:
diff --git a/app-emulation/vmware-server/files/digest-vmware-server-1.0.4.56528 b/app-emulation/vmware-server/files/digest-vmware-server-1.0.4.56528
new file mode 100644
index 000000000000..25ce1c95b787
--- /dev/null
+++ b/app-emulation/vmware-server/files/digest-vmware-server-1.0.4.56528
@@ -0,0 +1,15 @@
+MD5 60ec55cd66b77fb202d88bee79baebdf VMware-server-1.0.4-56528.tar.gz 106577920
+RMD160 2922bd0e8f5381ce0ddaeec3d03a571f016c84b5 VMware-server-1.0.4-56528.tar.gz 106577920
+SHA256 01335e4f0be83249b6bc72e7683c6dc85a6f127012e7fb5f18dd5c1ef5e62b31 VMware-server-1.0.4-56528.tar.gz 106577920
+MD5 cb3f91f2196778e6d76d5a6697286d04 vmware-any-any-update113.tar.gz 469321
+RMD160 a4de5c17489dffade015f5bc3036f6ab882f749c vmware-any-any-update113.tar.gz 469321
+SHA256 ed15e61811f188e3c009d9fd8878cc74fd45e2b5644e21e4fe3010731841c99d vmware-any-any-update113.tar.gz 469321
+MD5 062f83a22822b6e4d4a176e3648c38d8 vmware-libcrypto.so.0.9.7l.tar.bz2 412159
+RMD160 89282ae9fc6e8921a47704bc9cd23cf70a6870e8 vmware-libcrypto.so.0.9.7l.tar.bz2 412159
+SHA256 fae52acf61415959cca763a715a2b61ec49f161a416d418d6a1faffce531db12 vmware-libcrypto.so.0.9.7l.tar.bz2 412159
+MD5 913acecb0f79113de958e6a70618be7f vmware-libssl.so.0.9.7l.tar.bz2 78244
+RMD160 195dd4808e60f81621e6ed12b843ded49c0fa747 vmware-libssl.so.0.9.7l.tar.bz2 78244
+SHA256 3e1e13196066dc5b77d3ef6b5df55a29156eba1f39661e40cd617b538220d089 vmware-libssl.so.0.9.7l.tar.bz2 78244
+MD5 e494568dd025080cc80e7ad801f0b743 vmware-server-perl-fixed-rpath-libs.tar.bz2 73834
+RMD160 7f64627b5b945e8d7dabe39c165a4b66b71fb4d3 vmware-server-perl-fixed-rpath-libs.tar.bz2 73834
+SHA256 c42299dd033187c67b45b739da66583fbd94cdcba745200b89a25ac96cd9364b vmware-server-perl-fixed-rpath-libs.tar.bz2 73834
diff --git a/app-emulation/vmware-server/files/vmware-server.rc b/app-emulation/vmware-server/files/vmware-server.rc
index 5defcc5f8788..4f6dbec2becc 100644
--- a/app-emulation/vmware-server/files/vmware-server.rc
+++ b/app-emulation/vmware-server/files/vmware-server.rc
@@ -1,7 +1,7 @@
 #!/sbin/runscript
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-emulation/vmware-server/files/vmware-server.rc,v 1.5 2007/09/16 15:36:51 ikelos Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-emulation/vmware-server/files/vmware-server.rc,v 1.6 2007/09/20 17:13:13 ikelos Exp $
 
 depend() {
 	need localmount xinetd
@@ -16,54 +16,53 @@ vmware_prettify() {
 	msgtype=0
 	while read line
 	do
-		[ "$line" = "" ] && continue
+		[ "${line}" = "" ] && continue
 		if [ ${msgtype} -le 0 ]
 		then
 			if [ ${msgtype} -eq -1 ]
 			then
-				ewarn $line
+				ewarn ${line}
 				continue
 			fi
-			if echo ${line} | fgrep -q :
-			then
-				einfon $line
+			case ${line} in
+			*:*)
+				einfon ${line}
 				echo
 				eend 0
-				msgtype=1
-			elif echo $line | grep -q "Stopping VMware virtual machines"
-			then
-				einfon $line
+				msgtype=1;;
+			*Stopping\ VMware\ virtual\ machines*)
+				einfon ${line}
 				echo
 				eend 0
-				msgtype=0
-			else
-				ewarn $line
+				msgtype=0;;
+			*)
+				ewarn ${line}
 				msgtype=-1
-				waserror=1
-			fi
+				waserror=1;;
+			esac
 			continue
 		fi
 
 		# Strip out anything after the <esc> code
-		message=`echo $line | sed -e "s/^\(.*\).*$/\1/"`
-		einfon "  $message"
+		message=`echo ${line} | sed -e "s/^\(.*\).*$/\1/"`
+		einfon "  ${message}"
 		echo
 
 		echo ${line} | grep -q done
 		status=$?
-		eend $status
+		eend ${status}
 
-		if [ $status -eq 0 ]
+		if [ ${status} -eq 0 ]
 		then
-			logger -p local0.err -t vmware-${state} "$line"
-			waserror=$status
+			logger -p local0.err -t vmware-${state} "${line}"
+			waserror=${status}
 		fi
 	done
-	if [ "$msgtype" = "-1" ]
+	if [ "${msgtype}" = "-1" ]
 	then
 		eend 1 "VMware is not properly configured! See above."
 	fi
-	return $waserror
+	return ${waserror}
 }
 
 start() {
diff --git a/app-emulation/vmware-server/vmware-server-1.0.4.56528.ebuild b/app-emulation/vmware-server/vmware-server-1.0.4.56528.ebuild
new file mode 100644
index 000000000000..7b66f5b82066
--- /dev/null
+++ b/app-emulation/vmware-server/vmware-server-1.0.4.56528.ebuild
@@ -0,0 +1,110 @@
+# Copyright 1999-2007 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-emulation/vmware-server/vmware-server-1.0.4.56528.ebuild,v 1.1 2007/09/20 17:13:13 ikelos Exp $
+
+# Unlike many other binary packages the user doesn't need to agree to a licence
+# to download VMWare. The agreeing to a licence is part of the configure step
+# which the user must run manually.
+
+inherit eutils versionator vmware
+
+MY_PV=$(replace_version_separator 3 '-' )
+MY_P="VMware-server-${MY_PV}"
+
+DESCRIPTION="VMware Server for Linux"
+HOMEPAGE="http://www.vmware.com/"
+SRC_URI="http://download3.vmware.com/software/vmserver/${MY_P}.tar.gz
+	http://platan.vc.cvut.cz/ftp/pub/vmware/${ANY_ANY}.tar.gz
+	http://platan.vc.cvut.cz/ftp/pub/vmware/obsolete/${ANY_ANY}.tar.gz
+	http://ftp.cvut.cz/vmware/${ANY_ANY}.tar.gz
+	http://ftp.cvut.cz/vmware/obsolete/${ANY_ANY}.tar.gz
+	http://knihovny.cvut.cz/ftp/pub/vmware/${ANY_ANY}.tar.gz
+	http://knihovny.cvut.cz/ftp/pub/vmware/obsolete/${ANY_ANY}.tar.gz
+	http://dev.gentoo.org/~ikelos/devoverlay-distfiles/${PN}-perl-fixed-rpath-libs.tar.bz2
+	mirror://gentoo/${PN}-perl-fixed-rpath-libs.tar.bz2
+	http://dev.gentoo.org/~wolf31o2/sources/dump/vmware-libssl.so.0.9.7l.tar.bz2
+	mirror://gentoo/vmware-libssl.so.0.9.7l.tar.bz2
+	http://dev.gentoo.org/~wolf31o2/sources/dump/vmware-libcrypto.so.0.9.7l.tar.bz2
+	mirror://gentoo/vmware-libcrypto.so.0.9.7l.tar.bz2"
+
+LICENSE="vmware"
+IUSE=""
+SLOT="0"
+KEYWORDS="-* ~amd64 ~x86"
+RESTRICT="strip"
+
+DEPEND=">=sys-libs/glibc-2.3.5
+	>=dev-lang/perl-5
+	sys-apps/pciutils
+	sys-apps/findutils
+	virtual/os-headers"
+# vmware-server should not use virtual/libc as this is a
+# precompiled binary package thats linked to glibc.
+RDEPEND=">=sys-libs/glibc-2.3.5
+	amd64? (
+		>=app-emulation/emul-linux-x86-baselibs-2.5.5-r3
+		app-emulation/emul-linux-x86-gtklibs )
+	!amd64? (
+		virtual/xft
+		x11-libs/libX11
+		x11-libs/libXtst
+		x11-libs/libXext
+		x11-libs/libXt
+		x11-libs/libICE
+		x11-libs/libSM
+		x11-libs/libXrender )
+	>=dev-lang/perl-5
+	!<sys-apps/dbus-0.62
+	!app-emulation/vmware-player
+	!app-emulation/vmware-workstation
+	~app-emulation/vmware-modules-1.0.0.15
+	!<app-emulation/vmware-modules-1.0.0.15
+	!>=app-emulation/vmware-modules-1.0.0.16
+	sys-apps/pciutils
+	virtual/pam
+	sys-apps/xinetd"
+
+S=${WORKDIR}/vmware-server-distrib
+
+RUN_UPDATE="no"
+PATCHES="general"
+
+src_unpack() {
+	EPATCH_SUFFIX="patch"
+	vmware_src_unpack
+	cd ${WORKDIR}
+	unpack ${PN}-perl-fixed-rpath-libs.tar.bz2
+
+	# patch the vmware /etc/pam.d file to ensure that only
+	# vmware group members can log in
+	cp ${FILESDIR}/vmware-authd ${S}/etc/pam.d/vmware-authd
+}
+
+src_install() {
+	vmware_src_install
+
+	# Fix the amd64 emulation pam stuff
+	use amd64 && dosed "s:pam_:/lib32/security/pam_:" ${config_dir}/pam.d/vmware-authd
+	  # Remove libpam on amd64 because it's linked against the wrong paths
+	use adm64 && rm ${D}/opt/vmware/server/lib/lib/libpam.so.0/libpam.so
+
+	echo "${VMWARE_GROUP}" > ${D}${config_dir}/vmwaregroup
+
+	dosym /etc/init.d/xinetd ${config_dir}/init.d
+}
+
+pkg_config() {
+	einfo "Running ${ROOT}${dir}/bin/vmware-config.pl"
+	${ROOT}${dir}/bin/vmware-config.pl
+}
+
+pkg_postinst() {
+	vmware_pkg_postinst
+	elog "Remember by default xinetd only allows connections from localhost"
+	elog "To allow external users access to vmware-server you must edit"
+	elog "    /etc/xinetd.d/vmware-authd"
+	elog "and specify a new 'only_from' line"
+	echo
+	ewarn "VMWare Server also has issues when running on a JFS filesystem.  For more"
+	ewarn "information see http://bugs.gentoo.org/show_bug.cgi?id=122500#c94"
+}