August 2007 - crux-commits

ports/xorg (2.3): xorg-xvinfo: updated to 1.0.2.
by crux＠crux.nu 17 Aug '07

17 Aug '07

commit 951f5a4a5bd9e6924bb4625f6f4c9191ae6ce419 Author: Tilman Sauerbeck <tilman(a)crux.nu> Date: Fri Aug 17 15:52:52 2007 +0200 xorg-xvinfo: updated to 1.0.2. diff --git a/xorg-xvinfo/.footprint b/xorg-xvinfo/.footprint index 099c141..8f92031 100644 --- a/xorg-xvinfo/.footprint +++ b/xorg-xvinfo/.footprint @@ -3,4 +3,4 @@ drwxr-xr-x root/root usr/bin/ -rwxr-xr-x root/root usr/bin/xvinfo drwxr-xr-x root/root usr/man/ drwxr-xr-x root/root usr/man/man1/ --rw-r--r-- root/root usr/man/man1/xvinfo.1x.gz +-rw-r--r-- root/root usr/man/man1/xvinfo.1.gz diff --git a/xorg-xvinfo/.md5sum b/xorg-xvinfo/.md5sum index 768a7a6..b7e807d 100644 --- a/xorg-xvinfo/.md5sum +++ b/xorg-xvinfo/.md5sum @@ -1 +1 @@ -0a5bd8e43de6eb8ff5b5bc673204401d xvinfo-1.0.1.tar.bz2 +e1e318436f49e2f0f3764593dadd9ad2 xvinfo-1.0.2.tar.bz2 diff --git a/xorg-xvinfo/Pkgfile b/xorg-xvinfo/Pkgfile index 11b87fc..080a93f 100644 --- a/xorg-xvinfo/Pkgfile +++ b/xorg-xvinfo/Pkgfile @@ -4,14 +4,14 @@ # Depends on: xorg-libx11, xorg-libxv name=xorg-xvinfo -version=1.0.1 +version=1.0.2 release=1 source=(http://xorg.freedesktop.org/releases/individual/app/xvinfo-$version… build() { cd xvinfo-$version - ./configure --prefix=/usr + ./configure --prefix=/usr --mandir=/usr/man make make DESTDIR=$PKG install

1 0

ports/xorg (2.3): xorg-xf86-input-joystick: updated to 1.2.3.
by crux＠crux.nu 17 Aug '07

17 Aug '07

commit 6e038f12889aadfa37d2a2e216d8d7f4572ef660 Author: Tilman Sauerbeck <tilman(a)crux.nu> Date: Fri Aug 17 15:51:12 2007 +0200 xorg-xf86-input-joystick: updated to 1.2.3. diff --git a/xorg-xf86-input-joystick/.md5sum b/xorg-xf86-input-joystick/.md5sum index 9b45154..137dcc7 100644 --- a/xorg-xf86-input-joystick/.md5sum +++ b/xorg-xf86-input-joystick/.md5sum @@ -1 +1 @@ -c12f60c72e4ae42bb27857be3904b945 xf86-input-joystick-1.2.2.tar.bz2 +41f33b1a18c576433222d8b6ca22c738 xf86-input-joystick-1.2.3.tar.bz2 diff --git a/xorg-xf86-input-joystick/Pkgfile b/xorg-xf86-input-joystick/Pkgfile index 545f864..a34e53e 100644 --- a/xorg-xf86-input-joystick/Pkgfile +++ b/xorg-xf86-input-joystick/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Tilman Sauerbeck, tilman at crux dot nu name=xorg-xf86-input-joystick -version=1.2.2 +version=1.2.3 release=1 source=(http://xorg.freedesktop.org/releases/individual/driver/xf86-input-j…

1 0

ports/xorg (2.3): xorg-xmag: updated to 1.0.2.
by crux＠crux.nu 16 Aug '07

16 Aug '07

commit 0de06531d2ac076de007d2a8d48904ae43d5008d Author: Tilman Sauerbeck <tilman(a)crux.nu> Date: Thu Aug 16 13:14:12 2007 +0200 xorg-xmag: updated to 1.0.2. diff --git a/xorg-xmag/.footprint b/xorg-xmag/.footprint index af5cf2c..ab8a58d 100644 --- a/xorg-xmag/.footprint +++ b/xorg-xmag/.footprint @@ -3,7 +3,7 @@ drwxr-xr-x root/root usr/bin/ -rwxr-xr-x root/root usr/bin/xmag drwxr-xr-x root/root usr/man/ drwxr-xr-x root/root usr/man/man1/ --rw-r--r-- root/root usr/man/man1/xmag.1x.gz +-rw-r--r-- root/root usr/man/man1/xmag.1.gz drwxr-xr-x root/root usr/share/ drwxr-xr-x root/root usr/share/X11/ drwxr-xr-x root/root usr/share/X11/app-defaults/ diff --git a/xorg-xmag/.md5sum b/xorg-xmag/.md5sum index a841591..0f9011c 100644 --- a/xorg-xmag/.md5sum +++ b/xorg-xmag/.md5sum @@ -1 +1 @@ -058d168d1c7c991b8d12158433ea5f63 xmag-1.0.1.tar.bz2 +7c6a783e42c88360ac31d259a864a19d xmag-1.0.2.tar.bz2 diff --git a/xorg-xmag/Pkgfile b/xorg-xmag/Pkgfile index e9e9d22..9980fc8 100644 --- a/xorg-xmag/Pkgfile +++ b/xorg-xmag/Pkgfile @@ -4,14 +4,14 @@ # Depends on: xorg-libxaw name=xorg-xmag -version=1.0.1 +version=1.0.2 release=1 source=(http://xorg.freedesktop.org/releases/individual/app/xmag-$version.t… build() { cd xmag-$version - ./configure --prefix=/usr + ./configure --prefix=/usr --mandir=/usr/man make make DESTDIR=$PKG install

1 0

ports/xorg (2.3): xorg-xf86-video-nv: updated to 2.1.3.
by crux＠crux.nu 16 Aug '07

16 Aug '07

commit 910ce40726c4c7538964db357ea6ed39114a325a Author: Tilman Sauerbeck <tilman(a)crux.nu> Date: Thu Aug 16 13:12:34 2007 +0200 xorg-xf86-video-nv: updated to 2.1.3. diff --git a/xorg-xf86-video-nv/.md5sum b/xorg-xf86-video-nv/.md5sum index 02f391b..2586c13 100644 --- a/xorg-xf86-video-nv/.md5sum +++ b/xorg-xf86-video-nv/.md5sum @@ -1 +1 @@ -8b6a56ef0e1ec29e798059e5a546335a xf86-video-nv-2.1.2.tar.bz2 +f9b38e24157c3aac6014119ac18d76da xf86-video-nv-2.1.3.tar.bz2 diff --git a/xorg-xf86-video-nv/Pkgfile b/xorg-xf86-video-nv/Pkgfile index e3a07c2..5750548 100644 --- a/xorg-xf86-video-nv/Pkgfile +++ b/xorg-xf86-video-nv/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Tilman Sauerbeck, tilman at crux dot nu name=xorg-xf86-video-nv -version=2.1.2 +version=2.1.3 release=1 source=(http://xorg.freedesktop.org/releases/individual/driver/xf86-video-n…

1 0

ports/xorg (2.3): xorg-xrdb: updated to 1.0.4.
by crux＠crux.nu 16 Aug '07

16 Aug '07

commit ca6c0513f075424b8c4a2e8343c735bbc171932e Author: Tilman Sauerbeck <tilman(a)crux.nu> Date: Thu Aug 16 13:09:19 2007 +0200 xorg-xrdb: updated to 1.0.4. diff --git a/xorg-xrdb/.md5sum b/xorg-xrdb/.md5sum index f7541bf..7acd5e5 100644 --- a/xorg-xrdb/.md5sum +++ b/xorg-xrdb/.md5sum @@ -1 +1 @@ -380b2ef545306354cc150834de567be7 xrdb-1.0.3.tar.bz2 +34eb2311a0c5279e7b4f492e826f63d1 xrdb-1.0.4.tar.bz2 diff --git a/xorg-xrdb/Pkgfile b/xorg-xrdb/Pkgfile index b75a084..d18124d 100644 --- a/xorg-xrdb/Pkgfile +++ b/xorg-xrdb/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xorg-libxmu, xorg-libx11 name=xorg-xrdb -version=1.0.3 +version=1.0.4 release=1 source=(http://xorg.freedesktop.org/releases/individual/app/xrdb-$version.t…

1 0

ports/core (2.3): [notify] openssl: added patch for CVE-2007-3108
by crux＠crux.nu 15 Aug '07

15 Aug '07

commit 71ea01fd4b43e4eb89c048427ed2ef8b0e75066f Author: Juergen Daubert <jue(a)jue.li> Date: Wed Aug 15 15:30:53 2007 +0200 [notify] openssl: added patch for CVE-2007-3108 References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3108 http://www.securityfocus.com/bid/25163 diff --git a/openssl/.md5sum b/openssl/.md5sum index 1e9a478..a9a40d3 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,3 +1,4 @@ +30ad2995a2668db16ae3083c11a42307 CVE-2007-3108.patch 9d0df57845af8acd1027a7df5c18d017 mksslcert.sh 58daa890c3bc19bd6ce3451b2e5e335c openssl-0.9.8b-parallel-build.patch 3a7ff24f6ea5cd711984722ad654b927 openssl-0.9.8e.tar.gz diff --git a/openssl/CVE-2007-3108.patch b/openssl/CVE-2007-3108.patch new file mode 100644 index 0000000..abf0196 --- /dev/null +++ b/openssl/CVE-2007-3108.patch @@ -0,0 +1,126 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA1 + +- --- openssl-0.9.8e/crypto/bn/bn_mont.c 2006-06-16 03:01:14.000000000 +0200 ++++ openssl-0.9.8-cvs/crypto/bn/bn_mont.c 2007-06-29 10:13:25.000000000 +0200 +@@ -176,7 +176,6 @@ + + max=(nl+al+1); /* allow for overflow (no?) XXX */ + if (bn_wexpand(r,max) == NULL) goto err; +- - if (bn_wexpand(ret,max) == NULL) goto err; + + r->neg=a->neg^n->neg; + np=n->d; +@@ -228,19 +227,70 @@ + } + bn_correct_top(r); + +- - /* mont->ri will be a multiple of the word size */ +- -#if 0 +- - BN_rshift(ret,r,mont->ri); +- -#else +- - ret->neg = r->neg; +- - x=ri; ++ /* mont->ri will be a multiple of the word size and below code ++ * is kind of BN_rshift(ret,r,mont->ri) equivalent */ ++ if (r->top <= ri) ++ { ++ ret->top=0; ++ retn=1; ++ goto err; ++ } ++ al=r->top-ri; ++ ++# define BRANCH_FREE 1 ++# if BRANCH_FREE ++ if (bn_wexpand(ret,ri) == NULL) goto err; ++ x=0-(((al-ri)>>(sizeof(al)*8-1))&1); ++ ret->top=x=(ri&~x)|(al&x); /* min(ri,al) */ ++ ret->neg=r->neg; ++ + rp=ret->d; +- - ap= &(r->d[x]); +- - if (r->top < x) +- - al=0; +- - else +- - al=r->top-x; ++ ap=&(r->d[ri]); ++ ++ { ++ size_t m1,m2; ++ ++ v=bn_sub_words(rp,ap,np,ri); ++ /* this ----------------^^ works even in al<ri case ++ * thanks to zealous zeroing of top of the vector in the ++ * beginning. */ ++ ++ /* if (al==ri && !v) || al>ri) nrp=rp; else nrp=ap; */ ++ /* in other words if subtraction result is real, then ++ * trick unconditional memcpy below to perform in-place ++ * "refresh" instead of actual copy. */ ++ m1=0-(size_t)(((al-ri)>>(sizeof(al)*8-1))&1); /* al<ri */ ++ m2=0-(size_t)(((ri-al)>>(sizeof(al)*8-1))&1); /* al>ri */ ++ m1|=m2; /* (al!=ri) */ ++ m1|=(0-(size_t)v); /* (al!=ri || v) */ ++ m1&=~m2; /* (al!=ri || v) && !al>ri */ ++ nrp=(BN_ULONG *)(((size_t)rp&~m1)|((size_t)ap&m1)); ++ } ++ ++ /* 'i<ri' is chosen to eliminate dependency on input data, even ++ * though it results in redundant copy in al<ri case. */ ++ for (i=0,ri-=4; i<ri; i+=4) ++ { ++ BN_ULONG t1,t2,t3,t4; ++ ++ t1=nrp[i+0]; ++ t2=nrp[i+1]; ++ t3=nrp[i+2]; ap[i+0]=0; ++ t4=nrp[i+3]; ap[i+1]=0; ++ rp[i+0]=t1; ap[i+2]=0; ++ rp[i+1]=t2; ap[i+3]=0; ++ rp[i+2]=t3; ++ rp[i+3]=t4; ++ } ++ for (ri+=4; i<ri; i++) ++ rp[i]=nrp[i], ap[i]=0; ++# else ++ if (bn_wexpand(ret,al) == NULL) goto err; + ret->top=al; ++ ret->neg=r->neg; ++ ++ rp=ret->d; ++ ap=&(r->d[ri]); + al-=4; + for (i=0; i<al; i+=4) + { +@@ -258,7 +308,7 @@ + al+=4; + for (; i<al; i++) + rp[i]=ap[i]; +- -#endif ++# endif + #else /* !MONT_WORD */ + BIGNUM *t1,*t2; + +@@ -278,10 +328,12 @@ + if (!BN_rshift(ret,t2,mont->ri)) goto err; + #endif /* MONT_WORD */ + ++#if !defined(BRANCH_FREE) || BRANCH_FREE==0 + if (BN_ucmp(ret, &(mont->N)) >= 0) + { + if (!BN_usub(ret,ret,&(mont->N))) goto err; + } ++#endif + retn=1; + bn_check_top(ret); + err: +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.5 (GNU/Linux) + +iQCVAwUBRrGk++6tTP1JpWPZAQJbjwP/W/6mROtxOVU1gvvq/uFHCytNWHVaJfKA +7zh+v4OPQEIYekIBkEpNFgTJbHcyIZoyDNnwOetkRXvI4LDqvV1V5/pA5bzrKqDj +zv7Hj8R7DGqG8ad0Esf3l7SqqirI3curkIzm5/cALJBJxz/Pp7qyXNzzQgp55UPz +iBDdynBpa+s= +=aquq +-----END PGP SIGNATURE----- diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 752362f..10c23da 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -4,13 +4,15 @@ name=openssl version=0.9.8e -release=1 +release=2 source=(http://www.openssl.org/source/$name-$version.tar.gz \ - mksslcert.sh openssl-0.9.8b-parallel-build.patch) + mksslcert.sh openssl-0.9.8b-parallel-build.patch \ + CVE-2007-3108.patch) build() { cd $name-$version - patch -p1 < $SRC/openssl-0.9.8b-parallel-build.patch + patch -p1 -i $SRC/CVE-2007-3108.patch + patch -p1 -i $SRC/openssl-0.9.8b-parallel-build.patch ./config --prefix=/usr --openssldir=/etc/ssl shared make make INSTALL_PREFIX=$PKG MANDIR=/usr/man MANSUFFIX=ssl install

1 0

ports/opt (2.3): uw-imap: fixed url
by crux＠crux.nu 15 Aug '07

15 Aug '07

commit 674fca86d73a4a1a1f6f13dbb39e5f03816779ab Author: Juergen Daubert <jue(a)jue.li> Date: Wed Aug 15 13:26:22 2007 +0200 uw-imap: fixed url diff --git a/uw-imap/Pkgfile b/uw-imap/Pkgfile index 482734d..60a0d3a 100644 --- a/uw-imap/Pkgfile +++ b/uw-imap/Pkgfile @@ -6,7 +6,7 @@ name=uw-imap version=2006j2 release=1 -source=(ftp://ftp.cac.washington.edu/imap/imap-$version.tar.Z) +source=(ftp://ftp.cac.washington.edu/imap/old/imap-$version.tar.Z) build () { cd imap-${version::5}

1 0

ports/opt (2.3): sqlite3: update to 3.4.2
by crux＠crux.nu 15 Aug '07

15 Aug '07

commit bc6baf137cfd528baf7bd3db5fc34fa58ad705ba Author: Juergen Daubert <jue(a)jue.li> Date: Wed Aug 15 09:52:36 2007 +0200 sqlite3: update to 3.4.2 diff --git a/sqlite3/.md5sum b/sqlite3/.md5sum index 70da16f..6f87c5b 100644 --- a/sqlite3/.md5sum +++ b/sqlite3/.md5sum @@ -1 +1 @@ -0f06955b18da295fecb62d4bf9ded3c6 sqlite-3.4.1.tar.gz +2feec9b429f9298c9f288420c8b449f8 sqlite-3.4.2.tar.gz diff --git a/sqlite3/Pkgfile b/sqlite3/Pkgfile index 17d366f..aa610d1 100644 --- a/sqlite3/Pkgfile +++ b/sqlite3/Pkgfile @@ -4,7 +4,7 @@ # Depends on: ncurses, readline name=sqlite3 -version=3.4.1 +version=3.4.2 release=1 source=(http://www.sqlite.org/sqlite-$version.tar.gz)

1 0

ports/xorg (2.3): xorg-xf86-video-i810: updated to 2.1.1.
by crux＠crux.nu 14 Aug '07

14 Aug '07

commit 362c4817ddbda6ab561d8c84604a1fadc19664a6 Author: Tilman Sauerbeck <tilman(a)crux.nu> Date: Tue Aug 14 15:25:45 2007 +0200 xorg-xf86-video-i810: updated to 2.1.1. diff --git a/xorg-xf86-video-i810/.md5sum b/xorg-xf86-video-i810/.md5sum index e8472d1..ef7ac8a 100644 --- a/xorg-xf86-video-i810/.md5sum +++ b/xorg-xf86-video-i810/.md5sum @@ -1 +1 @@ -a564a1fbb7ed9fcbcf81e15aedc92578 xf86-video-intel-2.1.0.tar.bz2 +a645aa1a8e1e6031e1f817d2cda9db1d xf86-video-intel-2.1.1.tar.bz2 diff --git a/xorg-xf86-video-i810/Pkgfile b/xorg-xf86-video-i810/Pkgfile index ea23dbf..b7a7fdf 100644 --- a/xorg-xf86-video-i810/Pkgfile +++ b/xorg-xf86-video-i810/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Tilman Sauerbeck, tilman at crux dot nu name=xorg-xf86-video-i810 -version=2.1.0 +version=2.1.1 release=1 source=(http://xorg.freedesktop.org/releases/individual/driver/xf86-video-i…

1 0

ports/core (2.3): dhcpcd: updated to 3.1.4.
by crux＠crux.nu 14 Aug '07

14 Aug '07

commit b6c9ede690c0a9e919d473f199a42c755df1d404 Author: Tilman Sauerbeck <tilman(a)crux.nu> Date: Tue Aug 14 15:21:39 2007 +0200 dhcpcd: updated to 3.1.4. diff --git a/dhcpcd/.md5sum b/dhcpcd/.md5sum index 70ea6b5..bbf2617 100644 --- a/dhcpcd/.md5sum +++ b/dhcpcd/.md5sum @@ -1 +1 @@ -321a64e603f802ba3d69a64d452ec2a2 dhcpcd-3.1.3.tar.bz2 +7a569e36f8fbfb6858eabafb921c6716 dhcpcd-3.1.4.tar.bz2 diff --git a/dhcpcd/Pkgfile b/dhcpcd/Pkgfile index 18e0673..4924d41 100644 --- a/dhcpcd/Pkgfile +++ b/dhcpcd/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=dhcpcd -version=3.1.3 +version=3.1.4 release=1 source=(http://download.berlios.de/dhcpcd/$name-$version.tar.bz2)

1 0