libcap: Update to version 2.67

- Update from version 2.66 to 2.67
- Update of rootfile
- Changelog
Release notes for 2.67
    Replace use of fgrep with grep -F (POSIX grep flags preferred by GNU grep) - patch
     from David Seifert.
    Added SPDX identifiers to License file(s). Hopefully this will help the various
     robots out there correctly identify the longstanding licenses for libcap and friends.
      (Bug: 216609 reported by Günther Noack)
    Started down the rabbit hole of trying to address (Bug: 216610 reported by Günther
     Noack on behalf of Michael Stapelberg)
        The basic issue is how to link C code with Go psx without using CGo. This is all
         a low level hackery. If you are interested, browse the source.
    Correct for bad whatis entries in man pages (this was throwing a Debian build test,
     detail)
        Also reviewed man pages and addressed cross linkage issues (Bug: 216585)
        Cleaned up some README.md files (made a github mirror now just so I can
         automatically render them).
    Changed meaning of DYNAMIC=no builds.
        This now builds everything with static linking except for libc. The reason for
         this exception is explained in the commit message.
    Inserted demonstration exploit code in capso.so to support article.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>

diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
index f0518d6aa2ec24ad64bb02f64bb4917279fc1bdb..194fc7f199174fe1839fae8b5d768c38a64ba5ea 100644 (file)
--- a/config/rootfiles/common/libcap
+++ b/config/rootfiles/common/libcap
@@ -1,8 +1,8 @@
 lib/libcap.so.2
-lib/libcap.so.2.66
+lib/libcap.so.2.67
 #lib/libpsx.so
 #lib/libpsx.so.2
-lib/libpsx.so.2.66
+lib/libpsx.so.2.67
 #lib/pkgconfig/libcap.pc
 #lib/pkgconfig/libpsx.pc
 lib/security/pam_cap.so
@@ -32,6 +32,7 @@ usr/lib/libcap.so
 #usr/share/man/man3/cap_get_file.3
 #usr/share/man/man3/cap_get_flag.3
 #usr/share/man/man3/cap_get_mode.3
+#usr/share/man/man3/cap_get_nsowner.3
 #usr/share/man/man3/cap_get_pid.3
 #usr/share/man/man3/cap_get_proc.3
 #usr/share/man/man3/cap_get_secbits.3
@@ -59,10 +60,14 @@ usr/lib/libcap.so
 #usr/share/man/man3/cap_mode.3
 #usr/share/man/man3/cap_mode_name.3
 #usr/share/man/man3/cap_new_launcher.3
+#usr/share/man/man3/cap_prctl.3
+#usr/share/man/man3/cap_prctlw.3
+#usr/share/man/man3/cap_proc_root.3
 #usr/share/man/man3/cap_set_fd.3
 #usr/share/man/man3/cap_set_file.3
 #usr/share/man/man3/cap_set_flag.3
 #usr/share/man/man3/cap_set_mode.3
+#usr/share/man/man3/cap_set_nsowner.3
 #usr/share/man/man3/cap_set_proc.3
 #usr/share/man/man3/cap_set_secbits.3
 #usr/share/man/man3/cap_setgroups.3

diff --git a/lfs/libcap b/lfs/libcap
index f81b13c9980db10004db4cda953112a7441e7bc9..9eab679ff7148042fba7bc236a6d261c36584c51 100644 (file)
--- a/lfs/libcap
+++ b/lfs/libcap
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2022  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2023  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.66
+VER        = 2.67
 
 THISAPP    = libcap-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e79bf10c6a3dbffe96dc97aad0bed67caa0b3805d9dcaff1e4a8a833396ee5c6da4f7f0d321b254e99a00073bc39021b9f3a4b350d93094d0df4d74889b3ca56
+$(DL_FILE)_BLAKE2 = bd9be22e439397a3c1726093cfee2410df93773b3139d50a1cdc10daecb666ddb9b64daded6e0ec9f2fd6defd16ea156dbd66bd55360ea266131f31ea0f0e989
 
 install : $(TARGET)
 
@@ -75,7 +75,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        cd $(DIR_APP) && make GOLANG=no
        cd $(DIR_APP) && make install GOLANG=no
        rm -vf /lib/libcap.so
-       ln -svf /lib/libcap.so.2.66 /usr/lib/libcap.so
+       ln -svf /lib/libcap.so.2.67 /usr/lib/libcap.so
        chmod +x /lib/libcap.so.*
        @rm -rf $(DIR_APP)
        @$(POSTBUILD)