From d020793ed31be890423115b5a25529dea0b545ef Mon Sep 17 00:00:00 2001 From: Aaron Bauman Date: Tue, 3 Apr 2018 14:50:33 -0400 Subject: [PATCH] dev-lang/mono: drop vulnerable. use HTTPS. Bug: https://bugs.gentoo.org/568988 Package-Manager: Portage-2.3.28, Repoman-2.3.9 Closes: https://github.com/gentoo/gentoo/pull/7792 --- dev-lang/mono/Manifest | 1 - dev-lang/mono/mono-2.10.9-r2.ebuild | 265 --------------------------- dev-lang/mono/mono-4.4.1.0.ebuild | 4 +- dev-lang/mono/mono-4.6.1.5-r1.ebuild | 6 +- dev-lang/mono/mono-4.6.1.5.ebuild | 6 +- dev-lang/mono/mono-4.8.0.425.ebuild | 6 +- dev-lang/mono/mono-4.8.0.495.ebuild | 6 +- dev-lang/mono/mono-4.8.0.524.ebuild | 6 +- dev-lang/mono/mono-5.4.1.6.ebuild | 6 +- 9 files changed, 20 insertions(+), 286 deletions(-) delete mode 100644 dev-lang/mono/mono-2.10.9-r2.ebuild diff --git a/dev-lang/mono/Manifest b/dev-lang/mono/Manifest index c35a5d0dc7748..5ad044304754e 100644 --- a/dev-lang/mono/Manifest +++ b/dev-lang/mono/Manifest @@ -1,4 +1,3 @@ -DIST mono-2.10.9.tar.bz2 34038017 BLAKE2B 5d9ef975353c7e6f66fd66a17b9c5dd67d40fcc590d979c257986b4fa57f949588e4a05ec7d0d64f896b0594e96d804e1773a730c1fc7a09eed9ab267090971f SHA512 426881873e7f9aaf01e1306bed7b3ac220082ca40dce91fa4f4f331944e8d91453b3cdcc4918882ab039ed694ae8819eeb787edf6a2ad42cc661614076725c01 DIST mono-4.4.1.0.tar.bz2 85897587 BLAKE2B 79651189e696aa7352704e1ac659302423b1212c88337da8d522aad8e8a49855b74c43020f506b3455ce1a99566e96ae464fecced584b14470d0c8dfe605c5b6 SHA512 d9b6c57c2d9327ea551083b81a2e6cc222ded9a04862056b0dfded1c5df56efbfc4960097df034595012231fe50d172174ab7b3e3f2d8c4c6953ab2106b1cb6a DIST mono-4.6.1.5.tar.bz2 83174665 BLAKE2B ce4586af882c6592d1615156d009e496b8405dcf3a2b59e53bb58d1949c33d68645506378eab272a6ef340194582333c515b38f635e961edc64767078905a2df SHA512 1d0c1ec2930ecea3faf1be572bc045300ef4a90d3fe7519f2a9c797be79298c61528d83baa5a24a57143a35be80f78297196556c33cd0f345d9907a973fe625a DIST mono-4.8.0.425.tar.bz2 87955541 BLAKE2B dd3c7d26d9818c0512ddbbea6c0980ce5411904c93d5aff8aef581016268594ea1a887dc51332afc225db25d735ef3ef379a5f7b72acd95892e9efe399fb9df9 SHA512 7bab64adbebc277d3fc10301fa6af6cd64ea0836e2d74dfdd9b59684d9402689f9a4e397f3d36f519c7a892c14dcf8f8867d40a5119891874dfd10f9bbce2ac4 diff --git a/dev-lang/mono/mono-2.10.9-r2.ebuild b/dev-lang/mono/mono-2.10.9-r2.ebuild deleted file mode 100644 index f9dbcaeb5f443..0000000000000 --- a/dev-lang/mono/mono-2.10.9-r2.ebuild +++ /dev/null @@ -1,265 +0,0 @@ -# Copyright 1999-2015 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 - -EAPI="4" - -inherit linux-info mono eutils flag-o-matic multilib go-mono pax-utils - -DESCRIPTION="Mono runtime and class libraries, a C# compiler/interpreter" -HOMEPAGE="http://www.mono-project.com/Main_Page" - -LICENSE="MIT LGPL-2.1 GPL-2 BSD-4 NPL-1.1 Ms-PL GPL-2-with-linking-exception IDPL" -SLOT="0" -KEYWORDS="amd64 ppc ~ppc64 x86" - -IUSE="minimal pax_kernel xen" - -#Bash requirement is for += operator -COMMONDEPEND="!dev-util/monodoc - !minimal? ( =dev-dotnet/libgdiplus-${GO_MONO_REL_PV}* ) - ia64? ( sys-libs/libunwind )" -RDEPEND="${COMMONDEPEND} - || ( www-client/links www-client/lynx )" - -DEPEND="${COMMONDEPEND} - sys-devel/bc - virtual/yacc - >=app-shells/bash-3.2 - pax_kernel? ( sys-apps/elfix )" - -MAKEOPTS="${MAKEOPTS} -j1" - -RESTRICT="test" - -pkg_setup() { - if use kernel_linux - then - get_version - if linux_config_exists - then - if linux_chkconfig_present SYSVIPC - then - einfo "CONFIG_SYSVIPC is set, looking good." - else - eerror "If CONFIG_SYSVIPC is not set in your kernel .config, mono will hang while compiling." - eerror "See https://bugs.gentoo.org/261869 for more info." - eerror "Please set CONFIG_SYSVIPC in your kernel .config if build fails." - fi - else - ewarn "Was unable to determine your kernel .config" - ewarn "Please note that if CONFIG_SYSVIPC is not set in your kernel .config, mono will hang while compiling." - ewarn "See https://bugs.gentoo.org/261869 for more info." - fi - fi - PATCHES=( "${FILESDIR}/${PN}-2.10.2-threads-access.patch" - "${FILESDIR}/${PN}-2.10.9-CVE-2012-3382.patch" - "${FILESDIR}/${PN}-2.10.9-CVE-2012-3543.patch" - "${FILESDIR}/${PN}-2.10.9-CVE-2012-3543_2.patch" ) -} - -src_prepare() { - go-mono_src_prepare - - # we need to sed in the paxctl-ng -mr in the runtime/mono-wrapper.in so it doesn't - # get killed in the build process when MPROTECT is enabled. #286280 - # RANDMMAP kills the build process to #347365 - # use paxmark.sh to get PT/XT logic #532244 - if use pax_kernel ; then - ewarn "We are disabling MPROTECT on the mono binary." - sed '/exec "/ i\paxmark.sh -mr "$r/@mono_runtime@"' -i "${S}"/runtime/mono-wrapper.in || die "Failed to sed mono-wrapper.in" - fi -} - -src_configure() { - # mono's build system is finiky, strip the flags - strip-flags - - # Remove this at your own peril. Mono will barf in unexpected ways. - append-flags -fno-strict-aliasing - - # NOTE: We need the static libs for now so mono-debugger works. - # See https://bugs.gentoo.org/show_bug.cgi?id=256264 for details - # - # --without-moonlight since www-plugins/moonlight is not the only one - # using mono: https://bugzilla.novell.com/show_bug.cgi?id=641005#c3 - # - # --with-profile4 needs to be always enabled since it's used by default - # and, otherwise, problems like bug #340641 appear. - # - # sgen fails on ppc, bug #359515 - - local myconf="" - use ppc && myconf="${myconf} --with-sgen=no" - go-mono_src_configure \ - --enable-static \ - --disable-quiet-build \ - --without-moonlight \ - --with-libgdiplus=$(use minimal && printf "no" || printf "installed" ) \ - $(use_with xen xen_opt) \ - --without-ikvm-native \ - --with-jit \ - --disable-dtrace \ - --with-profile4 \ - ${myconf} -} - -src_test() { - echo ">>> Test phase [check]: ${CATEGORY}/${PF}" - - export MONO_REGISTRY_PATH="${T}/registry" - export XDG_DATA_HOME="${T}/data" - export MONO_SHARED_DIR="${T}/shared" - export XDG_CONFIG_HOME="${T}/config" - export HOME="${T}/home" - - emake -j1 check -} - -src_install() { - go-mono_src_install - - # Remove files not respecting LDFLAGS and that we are not supposed to provide, see Fedora - # mono.spec and http://www.mail-archive.com/mono-devel-list@lists.ximian.com/msg24870.html - # for reference. - rm -f "${ED}"/usr/$(get_libdir)/mono/2.0/mscorlib.dll.so - rm -f "${ED}"/usr/$(get_libdir)/mono/2.0/mcs.exe.so -} - -#THINK!!!! Before touching postrm and postinst -#Reference phase order: -#pkg_preinst -#pkg_prerm -#pkg_postrm -#pkg_postinst - -pkg_preinst() { - local symlink - local NUNIT_DIR="/usr/$(get_libdir)/mono/nunit" - local pv_atom - if [[ "$(readlink "${ROOT}"/${NUNIT_DIR})" == *"mono-nunit"* ]] - then - for pv_atom in 2.2{,-r1,-r2,-r3,-r4} '2.4_pre*' '2.4_rc*' 2.4 - do - if has_version "=dev-lang/mono-${pv_atom}" - then - einfo "If you just received a file collision warning message," - einfo "be advised that this is a known problem, which will now be fixed:" - ebegin "Found broken symlinks created by $(best_version dev-lang/mono), fixing" - for symlink in \ - "${ROOT}/${NUNIT_DIR}" \ - "${ROOT}/usr/$(get_libdir)/pkgconfig/nunit.pc" \ - "${ROOT}/usr/bin/nunit-console" \ - "${ROOT}/usr/bin/nunit-console2" - do - if [[ -L "${symlink}" ]] - then - rm -f "${symlink}" &> /dev/null - fi - done - eend 0 - break - fi - done - fi -} - -#pkg_postinst() { -# elog "PLEASE TAKE NOTE!" -# elog "" -# elog "Some of the namespaces supported by Mono require extra packages to be installed." -# elog "Below is a list of namespaces and the corresponding package you must install:" -# elog "" -# elog ">=x11-libs/cairo-1.6.4" -# elog " Mono.Cairo" -# elog "Also read:" -# elog "http://www.mono-project.com/Mono.Cairo" -# elog "" -# elog ">=dev-db/firebird-2.0.4.13130.1" -# elog " FirebirdSql.Data.Firebird" -# elog "Also read:" -# elog "http://www.mono-project.com/Firebird_Interbase" -# elog "" -# elog "dev-db/sqlite:3" -# elog " Mono.Data.Sqlite" -# elog "Also read:" -# elog "http://www.mono-project.com/SQLite" -# elog "" -# elog ">=dev-db/oracle-instantclient-basic-10.2" -# elog " System.Data.OracleClient" -# elog "Also read:" -# elog "http://www.mono-project.com/Oracle" -# elog "" -# elog "Mono also has support for packages that are not included in portage:" -# elog "" -# elog "No ebuild available:" -# elog " IBM.Data.DB2" -# elog "Also read: http://www.mono-project.com/IBM_DB2" -# elog "" -# elog "No ebuild needed:" -# elog " Mono.Data.SybaseClient" -# elog "Also read: http://www.mono-project.com/Sybase" -#} - -# NOTICE: THE COPYRIGHT FILES IN THE TARBALL ARE UNCLEAR! -# WHENEVER YOU THINK SOMETHING IS GPL-2+, IT'S ONLY GPL-2 -# UNLESS MIGUEL DE ICAZA HIMSELF SAYS OTHERWISE. - -# mono -# The code we use is LGPL, but contributions must be made under the MIT/X11 -# license, so Novell can serve its paying customers. Exception is mono/man. -# LICENSE="LGPL-2.1" - - # mono/man - # LICENSE="MIT" - -# mcs/mcs -# mcs/gmcs -# LICENSE="GPL-2 MIT" - -# tests -# LICENSE="MIT" - -# mcs/class -# Except the listed exceptions: -# LICENSE="MIT" - - # mcs/class/ByteFX.Data - # mcs/class/Npgsql - # LICENSE="LGPL-2.1" - - # mcs/class/FirebirdSql.Data.Firebird - # LICENSE="IDPL" - - # mcs/class/ICSharpCode.SharpZipLib - # LICENSE="GPL-2-with-linking-exception" - - # mcs/class/MicrosoftAjaxLibrary - # LICENSE="Ms-Pl" - - # mcs/class/Microsoft.JScript/Microsoft.JScript/TokenStream.cs - # mcs/class/Microsoft.JScript/Microsoft.JScript/Token.cs - # mcs/class/Microsoft.JScript/Microsoft.JScript/Parser.cs - # mcs/class/Microsoft.JScript/Microsoft.JScript/Decompiler.cs - # LICENSE="|| ( NPL-1.1 GPL-2 )" - -# mcs/jay -# LICENSE="BSD-4" - -# mcs/tools -# Except the listed exceptions: -# LICENSE="MIT" - - # mcs/tools/mdoc/Mono.Documentation/monodocs2html.cs - # LICENSE="GPL-2" - - # mcs/tools/sqlsharp/SqlSharpCli.cs - # LICENSE="GPL-2" - - # mcs/tools/csharp/repl.cs - # LICENSE="|| ( MIT GPL-2 )" - - # mcs/tools/mono-win32-setup.nsi - # LICENSE="GPL-2" - -# samples -# LICENSE="MIT" diff --git a/dev-lang/mono/mono-4.4.1.0.ebuild b/dev-lang/mono/mono-4.4.1.0.ebuild index 397235e7db597..991c9a258bd7b 100644 --- a/dev-lang/mono/mono-4.4.1.0.ebuild +++ b/dev-lang/mono/mono-4.4.1.0.ebuild @@ -6,8 +6,8 @@ EAPI=6 inherit eutils linux-info mono-env flag-o-matic pax-utils versionator multilib-minimal DESCRIPTION="Mono runtime and class libraries, a C# compiler/interpreter" -HOMEPAGE="http://www.mono-project.com/Main_Page" -SRC_URI="http://download.mono-project.com/sources/${PN}/${P}.tar.bz2" +HOMEPAGE="https://www.mono-project.com/Main_Page" +SRC_URI="https://download.mono-project.com/sources/${PN}/${P}.tar.bz2" LICENSE="MIT LGPL-2.1 GPL-2 BSD-4 NPL-1.1 Ms-PL GPL-2-with-linking-exception IDPL" SLOT="0" diff --git a/dev-lang/mono/mono-4.6.1.5-r1.ebuild b/dev-lang/mono/mono-4.6.1.5-r1.ebuild index d6fef01019725..2e8cbf88e4148 100644 --- a/dev-lang/mono/mono-4.6.1.5-r1.ebuild +++ b/dev-lang/mono/mono-4.6.1.5-r1.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2016 Gentoo Foundation +# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 @@ -6,8 +6,8 @@ EAPI=6 inherit eutils linux-info mono-env flag-o-matic pax-utils versionator multilib-minimal DESCRIPTION="Mono runtime and class libraries, a C# compiler/interpreter" -HOMEPAGE="http://www.mono-project.com/Main_Page" -SRC_URI="http://download.mono-project.com/sources/${PN}/${P}.tar.bz2" +HOMEPAGE="https://www.mono-project.com/Main_Page" +SRC_URI="https://download.mono-project.com/sources/${PN}/${P}.tar.bz2" LICENSE="MIT LGPL-2.1 GPL-2 BSD-4 NPL-1.1 Ms-PL GPL-2-with-linking-exception IDPL" SLOT="0" diff --git a/dev-lang/mono/mono-4.6.1.5.ebuild b/dev-lang/mono/mono-4.6.1.5.ebuild index d43556908284f..13383e871923f 100644 --- a/dev-lang/mono/mono-4.6.1.5.ebuild +++ b/dev-lang/mono/mono-4.6.1.5.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2016 Gentoo Foundation +# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 @@ -6,8 +6,8 @@ EAPI=6 inherit eutils linux-info mono-env flag-o-matic pax-utils versionator multilib-minimal DESCRIPTION="Mono runtime and class libraries, a C# compiler/interpreter" -HOMEPAGE="http://www.mono-project.com/Main_Page" -SRC_URI="http://download.mono-project.com/sources/${PN}/${P}.tar.bz2" +HOMEPAGE="https://www.mono-project.com/Main_Page" +SRC_URI="https://download.mono-project.com/sources/${PN}/${P}.tar.bz2" LICENSE="MIT LGPL-2.1 GPL-2 BSD-4 NPL-1.1 Ms-PL GPL-2-with-linking-exception IDPL" SLOT="0" diff --git a/dev-lang/mono/mono-4.8.0.425.ebuild b/dev-lang/mono/mono-4.8.0.425.ebuild index 712f239c13c06..20c09cc21a96e 100644 --- a/dev-lang/mono/mono-4.8.0.425.ebuild +++ b/dev-lang/mono/mono-4.8.0.425.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2017 Gentoo Foundation +# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 @@ -6,8 +6,8 @@ EAPI=6 inherit autotools eutils linux-info mono-env flag-o-matic pax-utils versionator multilib-minimal DESCRIPTION="Mono runtime and class libraries, a C# compiler/interpreter" -HOMEPAGE="http://www.mono-project.com/Main_Page" -SRC_URI="http://download.mono-project.com/sources/${PN}/${P}.tar.bz2" +HOMEPAGE="https://www.mono-project.com/Main_Page" +SRC_URI="https://download.mono-project.com/sources/${PN}/${P}.tar.bz2" LICENSE="MIT LGPL-2.1 GPL-2 BSD-4 NPL-1.1 Ms-PL GPL-2-with-linking-exception IDPL" SLOT="0" diff --git a/dev-lang/mono/mono-4.8.0.495.ebuild b/dev-lang/mono/mono-4.8.0.495.ebuild index 712f239c13c06..20c09cc21a96e 100644 --- a/dev-lang/mono/mono-4.8.0.495.ebuild +++ b/dev-lang/mono/mono-4.8.0.495.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2017 Gentoo Foundation +# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 @@ -6,8 +6,8 @@ EAPI=6 inherit autotools eutils linux-info mono-env flag-o-matic pax-utils versionator multilib-minimal DESCRIPTION="Mono runtime and class libraries, a C# compiler/interpreter" -HOMEPAGE="http://www.mono-project.com/Main_Page" -SRC_URI="http://download.mono-project.com/sources/${PN}/${P}.tar.bz2" +HOMEPAGE="https://www.mono-project.com/Main_Page" +SRC_URI="https://download.mono-project.com/sources/${PN}/${P}.tar.bz2" LICENSE="MIT LGPL-2.1 GPL-2 BSD-4 NPL-1.1 Ms-PL GPL-2-with-linking-exception IDPL" SLOT="0" diff --git a/dev-lang/mono/mono-4.8.0.524.ebuild b/dev-lang/mono/mono-4.8.0.524.ebuild index ea9bd74a3b439..ecba992080c8e 100644 --- a/dev-lang/mono/mono-4.8.0.524.ebuild +++ b/dev-lang/mono/mono-4.8.0.524.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2017 Gentoo Foundation +# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 @@ -6,8 +6,8 @@ EAPI=6 inherit autotools eutils linux-info mono-env flag-o-matic pax-utils versionator multilib-minimal DESCRIPTION="Mono runtime and class libraries, a C# compiler/interpreter" -HOMEPAGE="http://www.mono-project.com/Main_Page" -SRC_URI="http://download.mono-project.com/sources/${PN}/${P}.tar.bz2" +HOMEPAGE="https://www.mono-project.com/Main_Page" +SRC_URI="https://download.mono-project.com/sources/${PN}/${P}.tar.bz2" LICENSE="MIT LGPL-2.1 GPL-2 BSD-4 NPL-1.1 Ms-PL GPL-2-with-linking-exception IDPL" SLOT="0" diff --git a/dev-lang/mono/mono-5.4.1.6.ebuild b/dev-lang/mono/mono-5.4.1.6.ebuild index f25dd8d91380f..923e3d2af3e38 100644 --- a/dev-lang/mono/mono-5.4.1.6.ebuild +++ b/dev-lang/mono/mono-5.4.1.6.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2017 Gentoo Foundation +# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 @@ -6,8 +6,8 @@ EAPI=6 inherit autotools eutils linux-info mono-env flag-o-matic pax-utils versionator multilib-minimal DESCRIPTION="Mono runtime and class libraries, a C# compiler/interpreter" -HOMEPAGE="http://www.mono-project.com/Main_Page" -SRC_URI="http://download.mono-project.com/sources/${PN}/${P}.tar.bz2" +HOMEPAGE="https://www.mono-project.com/Main_Page" +SRC_URI="https://download.mono-project.com/sources/${PN}/${P}.tar.bz2" LICENSE="MIT LGPL-2.1 GPL-2 BSD-4 NPL-1.1 Ms-PL GPL-2-with-linking-exception IDPL" SLOT="0"