[gentoo-commits] repo/gentoo:master commit in: app-arch/upx-bin/

["John Helmert III" <ajak@gentoo.org>]

commit:     71a013f90e061c94bb606ef2ba3e48609d64f50a
Author:     Azamat H. Hackimov <azamat.hackimov <AT> gmail <DOT> com>
AuthorDate: Thu Feb  2 07:22:49 2023 +0000
Commit:     John Helmert III <ajak <AT> gentoo <DOT> org>
CommitDate: Mon Feb 20 19:45:44 2023 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=71a013f9

app-arch/upx-bin: add 4.0.2, security fix

Fixes issues CVE-2023-23456 and CVE-2023-23457.

Bug: https://bugs.gentoo.org/890616
Signed-off-by: Azamat H. Hackimov <azamat.hackimov <AT> gmail.com>
Signed-off-by: John Helmert III <ajak <AT> gentoo.org>

 app-arch/upx-bin/Manifest             |  7 +++++++
 app-arch/upx-bin/upx-bin-4.0.2.ebuild | 39 +++++++++++++++++++++++++++++++++++
 2 files changed, 46 insertions(+)

diff --git a/app-arch/upx-bin/Manifest b/app-arch/upx-bin/Manifest
index 87ef58e1a60b..7cee2ba7da78 100644
--- a/app-arch/upx-bin/Manifest
+++ b/app-arch/upx-bin/Manifest
@@ -12,3 +12,10 @@ DIST upx-4.0.1-i386_linux.tar.xz 595536 BLAKE2B e68211c6db05fddb5fadb4c628d7ce0c
 DIST upx-4.0.1-mipsel_linux.tar.xz 650372 BLAKE2B e5294055953ff599ae1f5ce0cc39dbd42fb0a53bdd6a8b833e97bb2717225dbd0c6c449274a3d4fb400ac86caf6e118617784bbe722843adf1767c866fef58a7 SHA512 266292e6027852d017b0e2725db4216230b362f7e2070008dde020b2d83c980ba7b50219f3d3a9914ef8f185799abb14cdfc55620bf532a1678bd3c1c5ccb025
 DIST upx-4.0.1-powerpc64le_linux.tar.xz 651596 BLAKE2B 4c9ebdc3c4873cbb2cd9483ba406f2600e9c54e54bb29c928b9f5ca0726f1ecc49c5f62be1d29ce8f2a750f269d32ee3a5165c60aaa4de923f4f8571a0f08829 SHA512 9d9618341f55af77ce02dfb7587b6a90c8657fedff6be0f39c7c1ae83134aeeddccf1713a13835c44d9f9f6d9021294b8bce7fc527f3e76825c96a4cbbb55843
 DIST upx-4.0.1-powerpc_linux.tar.xz 649004 BLAKE2B 0dc543960946fc4293ae985ea04a60dea5052c661ed2f9b5aa18764bf3072a502cff7e183233abda24b713a38cc70d6e7495dbf9a980405eb3e7c3dbff765667 SHA512 7f40898b6ab03de038c37b524db93639a8cb3b502a15bff28f61d50f9fc3eef1e89e3226d2c15fc0a52db4efd7c4b384303932e43f57d75f9d18a09057ed4292
+DIST upx-4.0.2-amd64_linux.tar.xz 564572 BLAKE2B 1efd4f57f964714dc9883ba66aa643e925d8971e10cd46776ac3ba0f417260b0f3443a52e090b6a762d86c224e58b28804d699433a929c599be1375417714aa1 SHA512 928f02fa82417e93363caaa86ba20af45e85a0e4b0bb0dee68a17eb7501442136baf3ab82bb24ebf4b891b0242c19d26b3443423fd892e81648df1f55aca90d6
+DIST upx-4.0.2-arm64_linux.tar.xz 574620 BLAKE2B 3696fc9b25d9b114655883d2de7ee0cac1fe5b5d8ac93fda4eacdf975e223bf483d7e5c10a26958c05d052a3ec4e756711659d1018306d8d975cf1411a177af1 SHA512 106a3261491ccd5b72cbd956952b0bc0b99f59a819414d0c42d08d47d672f235d460b437d4abbd7c8e00c9eb95edb85a327e6ce24a130e7124867eb03883ac64
+DIST upx-4.0.2-armeb_linux.tar.xz 573104 BLAKE2B 749a91dcecec797402e67f761aab064d421138858dc53a53528d50c979ab6c0bd5fec74dae71311c9c4ec4217980e7f6ab2bbfa37e7a4decc4fad76dcd643397 SHA512 5407a4c08ab67c97b115ff31ea5f3fec779f34a117091c1e5c19020ca8b65033fe5398ebc885dbe09b16ea5c05a760a7e7994c2ee8e29acc2b6b8c67f108656a
+DIST upx-4.0.2-i386_linux.tar.xz 595748 BLAKE2B 323ade8a8c02af4b96f832417483c7410e9b21c5c34f7db7838db0e49e0550d27a91142e1ae321bf2f2950a00e7610223708f16b955682e9632236e8f05a5e34 SHA512 3b9db6f6c7c17f368bea64a9f690793287de61f408cc1d96b6dfef1818d4078b5acdc390c780dfa22bde9dd53b0b8018a9a7c556b60e57006467ff3408d57ca3
+DIST upx-4.0.2-mipsel_linux.tar.xz 652624 BLAKE2B 3c0925dc65ad0bec7b14506229e7b7c0d0750d61fd662d493499a071bbe96ace88a6d8c7d0562cb715ed5c6b7dee0cc97fb2f3b2ff2a541491baa0142056912f SHA512 ec5a1c7346895987bbd7bdb41ca5fdaaab4f55de48c32883273c7db2c1ff79ed54a8c2956c03001b3cafb348d95d48ffc8d8bf3110f957dbc5974138ccd21a62
+DIST upx-4.0.2-powerpc64le_linux.tar.xz 649132 BLAKE2B dde9dbbae7c40557b67c2711ea42e8746f868c1c1635d22d23f218f5dbc12097da9a11554f1c2005b46c666d2181e2ed77005010ef4695e236fc94af93c35f16 SHA512 72b2b09d8163b12448f1579d73fa99aade6dc4769ffc544463adb371e282ad0005a0996d0fc826ce071d7a07eec3f3ea87e1aa31ecb965eddc38740accf39a0c
+DIST upx-4.0.2-powerpc_linux.tar.xz 647792 BLAKE2B 0386ff117d7f1263b7a2ea897b853f62af8ceb7b38da755b7d9672539570f6cf9f9e7a3ba44aedd95c82da95178ff95d1701fc39cd4473ff56f4650e77f4a47e SHA512 e3d28a5a1d08c00814aa88100dbb05be2799bb940c0b8ddfbe94a0b013e9f26c9e6404321ba734dabbf616e02d18d31019cae6bebb3eb91f2481fa6c31b9b6c9

diff --git a/app-arch/upx-bin/upx-bin-4.0.2.ebuild b/app-arch/upx-bin/upx-bin-4.0.2.ebuild
new file mode 100644
index 000000000000..1fa76c1595d5
--- /dev/null
+++ b/app-arch/upx-bin/upx-bin-4.0.2.ebuild
@@ -0,0 +1,39 @@
+# Copyright 1999-2023 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit pax-utils
+
+MY_P="${PN/-bin}-${PV}"
+
+DESCRIPTION="Ultimate Packer for eXecutables, binary version with proprietary NRV compression"
+HOMEPAGE="https://upx.github.io/"
+SRC_URI="x86? ( https://github.com/upx/upx/releases/download/v${PV}/${MY_P}-i386_linux.tar.xz )
+	amd64? ( https://github.com/upx/upx/releases/download/v${PV}/${MY_P}-amd64_linux.tar.xz )
+	arm64? ( https://github.com/upx/upx/releases/download/v${PV}/${MY_P}-arm64_linux.tar.xz )
+	arm? ( https://github.com/upx/upx/releases/download/v${PV}/${MY_P}-armeb_linux.tar.xz )
+	mips? ( https://github.com/upx/upx/releases/download/v${PV}/${MY_P}-mipsel_linux.tar.xz )
+	ppc? ( https://github.com/upx/upx/releases/download/v${PV}/${MY_P}-powerpc_linux.tar.xz )
+	ppc64? ( https://github.com/upx/upx/releases/download/v${PV}/${MY_P}-powerpc64le_linux.tar.xz )"
+
+LICENSE="GPL-2+ UPX-exception"
+SLOT="0"
+KEYWORDS="-* ~amd64 ~arm ~arm64 ~mips ~ppc ~ppc64 ~x86"
+RESTRICT="strip"
+
+RDEPEND="!app-arch/upx"
+BDEPEND="app-arch/xz-utils[extra-filters]"
+
+S="${WORKDIR}"
+
+QA_PREBUILT="/opt/bin/upx"
+
+src_install() {
+	cd ${MY_P}* || die
+	into /opt
+	dobin upx
+	pax-mark -m "${ED}"/opt/bin/upx
+	doman upx.1
+	dodoc NEWS README THANKS upx-doc.html upx-doc.txt
+}