CVS commit: [pkgsrc-2025Q3] pkgsrc/net/openresolv

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Fri Dec 12 15:50:22 UTC 2025

Modified Files:
        pkgsrc/net/openresolv [pkgsrc-2025Q3]: Makefile distinfo

Log Message:
Pullup ticket #7036 - requested by roy
net/openresolv: Security fix

Revisions pulled up:
- net/openresolv/Makefile                                       1.40
- net/openresolv/distinfo                                       1.34

---
   Module Name:    pkgsrc
   Committed By:   roy
   Date:           Wed Dec 10 22:11:47 UTC 2025

   Modified Files:
           pkgsrc/net/openresolv: Makefile distinfo

   Log Message:
   Import openresolv-3.17.1 with the following changes:

   resolvconf: Single quote parsed values from resolv.conf

   When parsing resolv.conf entries we build up shell variables.
   Because this is done via a pipe, we need to echo the variables
   to stdout and eval the result to get them into the main resolvconf.
   We have no idea what the values are, so we build up the output
   ensuring the parsed value is single quoted so eval will always
   interpret it as a string and nothing more.

   This avoids an attack like so:
           `echo 'search $(touch /tmp/foo)' | resolvconf -a bar`


To generate a diff of this commit:
cvs rdiff -u -r1.39 -r1.39.4.1 pkgsrc/net/openresolv/Makefile
cvs rdiff -u -r1.33 -r1.33.4.1 pkgsrc/net/openresolv/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/openresolv/Makefile
diff -u pkgsrc/net/openresolv/Makefile:1.39 pkgsrc/net/openresolv/Makefile:1.39.4.1
--- pkgsrc/net/openresolv/Makefile:1.39 Thu May 15 12:51:38 2025
+++ pkgsrc/net/openresolv/Makefile      Fri Dec 12 15:50:22 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.39 2025/05/15 12:51:38 roy Exp $
+# $NetBSD: Makefile,v 1.39.4.1 2025/12/12 15:50:22 maya Exp $
 
-DISTNAME=              openresolv-3.16.5
+DISTNAME=              openresolv-3.17.1
 CATEGORIES=            net
 MASTER_SITES=          ${MASTER_SITE_GITHUB:=NetworkConfiguration/}
 GITHUB_PROJECT=                openresolv

Index: pkgsrc/net/openresolv/distinfo
diff -u pkgsrc/net/openresolv/distinfo:1.33 pkgsrc/net/openresolv/distinfo:1.33.4.1
--- pkgsrc/net/openresolv/distinfo:1.33 Thu May 15 12:51:38 2025
+++ pkgsrc/net/openresolv/distinfo      Fri Dec 12 15:50:22 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.33 2025/05/15 12:51:38 roy Exp $
+$NetBSD: distinfo,v 1.33.4.1 2025/12/12 15:50:22 maya Exp $
 
-BLAKE2s (openresolv-3.16.5.tar.xz) = 17cbf1b60373b2664f5c7ccc3752b94121bcf14efd2185763743665c94c73262
-SHA512 (openresolv-3.16.5.tar.xz) = cebf5a7bb6aa22a96293ad0cf8273b2da6564f9a72cfe0d9cc0d09c6a8c3b60e7a8e8ee7876dcc7c66bb4a1606bdf5c3c73b3ed89bb0500598c3738b177948d0
-Size (openresolv-3.16.5.tar.xz) = 25436 bytes
+BLAKE2s (openresolv-3.17.1.tar.xz) = c04e8c343e51fb65ab01d1d4498deff5c23b1a4afb5fc946767f370684fc52eb
+SHA512 (openresolv-3.17.1.tar.xz) = b9870448a1dc2096fdccba0525471272157cf315db7497e3ab617678b4e7fc58fff212005179c3ade03982c8581c4b0144a7289f3b0309619d666fed9d885608
+Size (openresolv-3.17.1.tar.xz) = 25452 bytes