From 8d311b29437f0162a0e6e51b0571fcc7e0fb5ef5 Mon Sep 17 00:00:00 2001 From: Marek Szuba Date: Tue, 23 Mar 2021 09:10:39 +0000 Subject: net-analyzer/nessus-agent-bin: bump to 8.2.3 Addresses CVE-2021-20077. Bug: https://bugs.gentoo.org/777780 Signed-off-by: Marek Szuba --- net-analyzer/nessus-agent-bin/Manifest | 2 +- .../nessus-agent-bin/nessus-agent-bin-8.2.1.ebuild | 70 ---------------------- .../nessus-agent-bin/nessus-agent-bin-8.2.3.ebuild | 70 ++++++++++++++++++++++ 3 files changed, 71 insertions(+), 71 deletions(-) delete mode 100644 net-analyzer/nessus-agent-bin/nessus-agent-bin-8.2.1.ebuild create mode 100644 net-analyzer/nessus-agent-bin/nessus-agent-bin-8.2.3.ebuild (limited to 'net-analyzer') diff --git a/net-analyzer/nessus-agent-bin/Manifest b/net-analyzer/nessus-agent-bin/Manifest index b5e0bd814613..5cad5caf1f93 100644 --- a/net-analyzer/nessus-agent-bin/Manifest +++ b/net-analyzer/nessus-agent-bin/Manifest @@ -1 +1 @@ -DIST NessusAgent-8.2.1-es8.x86_64.rpm 14895872 BLAKE2B fce714456a6cbf7b4f6bc8171e5461591761e5b16683b253c723738b3afe9624caa8d0dbf153c665f1cd696da48c44e1d0ddd7a9f3355faeb52b8bf285f749b0 SHA512 357cb33527411eb698879f4af329906e4ce677a4b4d70099f4d4933d0eed3a5330541def3a20d1a72aee6be1c4b5c9cb81dfe125d12e562fe0ad27a81605bd8c +DIST NessusAgent-8.2.3-es8.x86_64.rpm 14554872 BLAKE2B 532a2d26b8aeb2d185da059e14eda1de0a48dddccbefcbccc3ed6636e8679dd13a8c55f12dd2bc4f8e49794f7da0a2c0db13007fa6390254a3ca276df9083184 SHA512 c6bb315c30723a292968254bd5616d71bc07ba5b30a71ad4f57d395535ebcf16d42df393ab30d63fb8929fd7edc09d1d79bcccaafd7fb2f9762e147f63ee90e3 diff --git a/net-analyzer/nessus-agent-bin/nessus-agent-bin-8.2.1.ebuild b/net-analyzer/nessus-agent-bin/nessus-agent-bin-8.2.1.ebuild deleted file mode 100644 index 9436416d89df..000000000000 --- a/net-analyzer/nessus-agent-bin/nessus-agent-bin-8.2.1.ebuild +++ /dev/null @@ -1,70 +0,0 @@ -# Copyright 1999-2020 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -inherit rpm systemd - -MY_P="NessusAgent-${PV}-es8" - -DESCRIPTION="A remote security scanner for Linux - agent component" -HOMEPAGE="https://www.tenable.com/" -SRC_URI="${MY_P}.x86_64.rpm" - -LICENSE="GPL-2 Nessus-EULA" -SLOT="0" -KEYWORDS="~amd64" - -RESTRICT="mirror fetch strip" - -QA_PREBUILT="opt/nessus_agent/bin/nasl - opt/nessus_agent/bin/nessus-mkrand - opt/nessus_agent/lib/nessus/libjemalloc.so.* - opt/nessus_agent/lib/nessus/libnessus-glibc-fix.so - opt/nessus_agent/lib/nessus/iconv/*.so - opt/nessus_agent/sbin/nessus-check-signature - opt/nessus_agent/sbin/nessus-service - opt/nessus_agent/sbin/nessuscli - opt/nessus_agent/sbin/nessusd" - -S="${WORKDIR}" - -pkg_nofetch() { - einfo "Please download ${A} from ${HOMEPAGE}downloads/nessus-agents" - einfo "The archive should then be placed into your DISTDIR directory." -} - -src_install() { - # Using doins -r would strip executable bits from all binaries - cp -pPR "${S}"/opt "${D}"/ || die "Failed to copy files" - - # Make sure these originally empty directories do not vanish, - # Nessus will not run properly without them - keepdir /opt/nessus_agent/com/nessus/CA - keepdir /opt/nessus_agent/etc/nessus - keepdir /opt/nessus_agent/var/nessus/logs - keepdir /opt/nessus_agent/var/nessus/tmp - keepdir /opt/nessus_agent/var/nessus/users - - newinitd "${FILESDIR}"/nessusagent.initd nessusagent - systemd_dounit usr/lib/systemd/system/nessusagent.service -} - -pkg_postinst() { - # Actually update Nessus core components. According to upstream packages, - # harmless to invoke on fresh installations too - and it may make life easier - # for people who had restored Nessus state from backups, had it lying around - # from older installations and so on. - "${EROOT}"/opt/nessus_agent/sbin/nessuscli install "${EROOT}"/opt/nessus_agent/var/nessus/plugins-core.tar.gz - - if [[ -z "${REPLACING_VERSIONS}" ]]; then - elog "In order to link the agent to Tenable.io or an instance of Nessus Manager," - elog "obtain an appropriate linking key and run" - elog "" - elog " /opt/nessus_agent/sbin/nessuscli agent link --key= --host= --port= [optional parameters]" - elog "" - elog "This can be done before the agent is started." - else - elog "Please restart the nessusagent service to complete the update process" - fi -} diff --git a/net-analyzer/nessus-agent-bin/nessus-agent-bin-8.2.3.ebuild b/net-analyzer/nessus-agent-bin/nessus-agent-bin-8.2.3.ebuild new file mode 100644 index 000000000000..9436416d89df --- /dev/null +++ b/net-analyzer/nessus-agent-bin/nessus-agent-bin-8.2.3.ebuild @@ -0,0 +1,70 @@ +# Copyright 1999-2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit rpm systemd + +MY_P="NessusAgent-${PV}-es8" + +DESCRIPTION="A remote security scanner for Linux - agent component" +HOMEPAGE="https://www.tenable.com/" +SRC_URI="${MY_P}.x86_64.rpm" + +LICENSE="GPL-2 Nessus-EULA" +SLOT="0" +KEYWORDS="~amd64" + +RESTRICT="mirror fetch strip" + +QA_PREBUILT="opt/nessus_agent/bin/nasl + opt/nessus_agent/bin/nessus-mkrand + opt/nessus_agent/lib/nessus/libjemalloc.so.* + opt/nessus_agent/lib/nessus/libnessus-glibc-fix.so + opt/nessus_agent/lib/nessus/iconv/*.so + opt/nessus_agent/sbin/nessus-check-signature + opt/nessus_agent/sbin/nessus-service + opt/nessus_agent/sbin/nessuscli + opt/nessus_agent/sbin/nessusd" + +S="${WORKDIR}" + +pkg_nofetch() { + einfo "Please download ${A} from ${HOMEPAGE}downloads/nessus-agents" + einfo "The archive should then be placed into your DISTDIR directory." +} + +src_install() { + # Using doins -r would strip executable bits from all binaries + cp -pPR "${S}"/opt "${D}"/ || die "Failed to copy files" + + # Make sure these originally empty directories do not vanish, + # Nessus will not run properly without them + keepdir /opt/nessus_agent/com/nessus/CA + keepdir /opt/nessus_agent/etc/nessus + keepdir /opt/nessus_agent/var/nessus/logs + keepdir /opt/nessus_agent/var/nessus/tmp + keepdir /opt/nessus_agent/var/nessus/users + + newinitd "${FILESDIR}"/nessusagent.initd nessusagent + systemd_dounit usr/lib/systemd/system/nessusagent.service +} + +pkg_postinst() { + # Actually update Nessus core components. According to upstream packages, + # harmless to invoke on fresh installations too - and it may make life easier + # for people who had restored Nessus state from backups, had it lying around + # from older installations and so on. + "${EROOT}"/opt/nessus_agent/sbin/nessuscli install "${EROOT}"/opt/nessus_agent/var/nessus/plugins-core.tar.gz + + if [[ -z "${REPLACING_VERSIONS}" ]]; then + elog "In order to link the agent to Tenable.io or an instance of Nessus Manager," + elog "obtain an appropriate linking key and run" + elog "" + elog " /opt/nessus_agent/sbin/nessuscli agent link --key= --host= --port= [optional parameters]" + elog "" + elog "This can be done before the agent is started." + else + elog "Please restart the nessusagent service to complete the update process" + fi +} -- cgit v1.2.3-65-gdbad