November 2013 - crux-commits

ports/opt (3.0): dovecot: update to 2.2.7
by crux＠crux.nu 05 Nov '13

05 Nov '13

commit e7f290e4605f35a0439c50303ceebc55b71c7a9d Author: Juergen Daubert <jue(a)jue.li> Date: Tue Nov 5 18:00:28 2013 +0100 dovecot: update to 2.2.7 diff --git a/dovecot/.footprint b/dovecot/.footprint index dd3d653..f491e4a 100644 --- a/dovecot/.footprint +++ b/dovecot/.footprint @@ -177,6 +177,7 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/imap-id.h -rw-r--r-- root/root usr/include/dovecot/imap-list.h -rw-r--r-- root/root usr/include/dovecot/imap-match.h +-rw-r--r-- root/root usr/include/dovecot/imap-metadata.h -rw-r--r-- root/root usr/include/dovecot/imap-msgpart-url.h -rw-r--r-- root/root usr/include/dovecot/imap-msgpart.h -rw-r--r-- root/root usr/include/dovecot/imap-notify.h diff --git a/dovecot/.md5sum b/dovecot/.md5sum index d849ec7..17e3ac7 100644 --- a/dovecot/.md5sum +++ b/dovecot/.md5sum @@ -1,3 +1,3 @@ 7eaa958040fbd7169c86134439d4b632 dovecot -db65988ef2e6889dd8b49c132b21fc8f dovecot-2.2.6.tar.gz +d2c7c83acc21f3dcab652868d40522e0 dovecot-2.2.7.tar.gz 346f4af957cd9fabaee1bc3c729f300f dovecot-config.patch diff --git a/dovecot/Pkgfile b/dovecot/Pkgfile index cb5b3fd..92ed3a1 100644 --- a/dovecot/Pkgfile +++ b/dovecot/Pkgfile @@ -4,7 +4,7 @@ # Depends on: zlib bzip2 openssl tcp_wrappers libcap name=dovecot -version=2.2.6 +version=2.2.7 release=1 source=(http://dovecot.org/releases/2.2/$name-$version.tar.gz \ dovecot-config.patch dovecot)

1 0

ports/core (3.0): kbd: update to 2.0.1
by crux＠crux.nu 05 Nov '13

05 Nov '13

commit d15e3978934df8be48f93a05400d553fe7c047e6 Author: Juergen Daubert <jue(a)jue.li> Date: Tue Nov 5 17:28:32 2013 +0100 kbd: update to 2.0.1 diff --git a/kbd/.footprint b/kbd/.footprint index 27674d5..733a864 100644 --- a/kbd/.footprint +++ b/kbd/.footprint @@ -334,8 +334,8 @@ drwxr-xr-x root/root usr/share/kbd/keymaps/i386/azerty/ -rw-r--r-- root/root usr/share/kbd/keymaps/i386/azerty/wangbe.map.gz -rw-r--r-- root/root usr/share/kbd/keymaps/i386/azerty/wangbe2.map.gz drwxr-xr-x root/root usr/share/kbd/keymaps/i386/bepo/ --rw-r--r-- root/root usr/share/kbd/keymaps/i386/bepo/dvorak-fr-bepo-utf8.map.gz --rw-r--r-- root/root usr/share/kbd/keymaps/i386/bepo/dvorak-fr-bepo.map.gz +-rw-r--r-- root/root usr/share/kbd/keymaps/i386/bepo/fr-bepo-latin9.map.gz +-rw-r--r-- root/root usr/share/kbd/keymaps/i386/bepo/fr-bepo.map.gz drwxr-xr-x root/root usr/share/kbd/keymaps/i386/colemak/ -rw-r--r-- root/root usr/share/kbd/keymaps/i386/colemak/en-latin9.map.gz drwxr-xr-x root/root usr/share/kbd/keymaps/i386/dvorak/ diff --git a/kbd/.md5sum b/kbd/.md5sum index 7ffb3e8..12de208 100644 --- a/kbd/.md5sum +++ b/kbd/.md5sum @@ -1 +1 @@ -3d8e7c1fb4bd8dec19bae4ba819a280c kbd-2.0.0.tar.xz +55453cb09d90370005e696949092b8f6 kbd-2.0.1.tar.xz diff --git a/kbd/Pkgfile b/kbd/Pkgfile index 8e6d590..992853d 100644 --- a/kbd/Pkgfile +++ b/kbd/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=kbd -version=2.0.0 +version=2.0.1 release=1 source=(ftp://ftp.kernel.org/pub/linux/utils/$name/$name-$version.tar.xz)

1 0

ports/opt (3.0): git: 1.8.4.1 -> 1.8.4.2
by crux＠crux.nu 05 Nov '13

05 Nov '13

commit cb1e9c0cb12c77974e91e2d4d65ce182afb2d23a Author: Thomas Penteker <tek(a)serverop.de> Date: Tue Nov 5 09:58:11 2013 +0100 git: 1.8.4.1 -> 1.8.4.2 diff --git a/git/.md5sum b/git/.md5sum index d89030b..c16ac1e 100644 --- a/git/.md5sum +++ b/git/.md5sum @@ -1,2 +1,2 @@ -5d8c89ad312ca0b0e603259c9357e6b8 git-1.8.4.1.tar.gz -d3f87251966f2bfabdad428b781fef4f git-manpages-1.8.4.1.tar.gz +6f63d103465b86ca0ebe4189ea54731c git-1.8.4.2.tar.gz +2b4719ec820d845134b689247abe65e8 git-manpages-1.8.4.2.tar.gz diff --git a/git/Pkgfile b/git/Pkgfile index c9236b6..8fda5e8 100644 --- a/git/Pkgfile +++ b/git/Pkgfile @@ -6,7 +6,7 @@ # Nice to have: tk name=git -version=1.8.4.1 +version=1.8.4.2 release=1 source=(https://git-core.googlecode.com/files/$name-{,manpages-}$version.ta…

1 0

ports/xorg (3.0): xorg-server: update to 1.14.4
by crux＠crux.nu 03 Nov '13

03 Nov '13

commit fabeca2d2f677605e5bb44bc80e55d4924d66ea0 Author: Juergen Daubert <jue(a)jue.li> Date: Sun Nov 3 12:54:24 2013 +0100 xorg-server: update to 1.14.4 diff --git a/xorg-server/.md5sum b/xorg-server/.md5sum index 41b8ecf..3137362 100644 --- a/xorg-server/.md5sum +++ b/xorg-server/.md5sum @@ -1,2 +1 @@ -77c48738460f0dfa426da46f98efb4b4 cve-2013-4396.patch -86abeb08d3f7ead3a2bd3d6a9ba6714e xorg-server-1.14.3.tar.bz2 +9d68a30258c67faa3c036a4a85e8bf97 xorg-server-1.14.4.tar.bz2 diff --git a/xorg-server/Pkgfile b/xorg-server/Pkgfile index 09d2b6a..5e88eff 100644 --- a/xorg-server/Pkgfile +++ b/xorg-server/Pkgfile @@ -4,16 +4,13 @@ # Depends on: udev util-linux mesa3d xorg-bdftopcf xorg-bigreqsproto xorg-libdmx xorg-libpixman xorg-libxaw xorg-libxcomposite xorg-libxcursor xorg-libxft xorg-libxinerama xorg-libxkbfile xorg-libxrandr xorg-libxres xorg-libxtst xorg-libxvmc xorg-libxxf86dga xorg-mkfontdir xorg-mkfontscale xorg-scrnsaverproto xorg-xcmiscproto xorg-xf86driproto name=xorg-server -version=1.14.3 -release=2 -source=(http://xorg.freedesktop.org/releases/individual/xserver/$name-$version.tar.bz2 - cve-2013-4396.patch) +version=1.14.4 +release=1 +source=(http://xorg.freedesktop.org/releases/individual/xserver/$name-$version.tar.bz2) build() { cd $name-$version - patch -p1 -i $SRC/cve-2013-4396.patch - ./configure --prefix=/usr \ --mandir=/usr/man \ --localstatedir=/var \ diff --git a/xorg-server/cve-2013-4396.patch b/xorg-server/cve-2013-4396.patch deleted file mode 100644 index b35fd6b..0000000 --- a/xorg-server/cve-2013-4396.patch +++ /dev/null @@ -1,77 +0,0 @@ -From 7bddc2ba16a2a15773c2ea8947059afa27727764 Mon Sep 17 00:00:00 2001 -From: Alan Coopersmith <alan.coopersmith(a)oracle.com> -Date: Mon, 16 Sep 2013 21:47:16 -0700 -Subject: [PATCH] Avoid use-after-free in dix/dixfonts.c: doImageText() - [CVE-2013-4396] - -Save a pointer to the passed in closure structure before copying it -and overwriting the *c pointer to point to our copy instead of the -original. If we hit an error, once we free(c), reset c to point to -the original structure before jumping to the cleanup code that -references *c. - -Since one of the errors being checked for is whether the server was -able to malloc(c->nChars * itemSize), the client can potentially pass -a number of characters chosen to cause the malloc to fail and the -error path to be taken, resulting in the read from freed memory. - -Since the memory is accessed almost immediately afterwards, and the -X server is mostly single threaded, the odds of the free memory having -invalid contents are low with most malloc implementations when not using -memory debugging features, but some allocators will definitely overwrite -the memory there, leading to a likely crash. - -Reported-by: Pedro Ribeiro <pedrib(a)gmail.com> -Signed-off-by: Alan Coopersmith <alan.coopersmith(a)oracle.com> -Reviewed-by: Julien Cristau <jcristau(a)debian.org> ---- - dix/dixfonts.c | 5 +++++ - 1 file changed, 5 insertions(+) - -diff --git a/dix/dixfonts.c b/dix/dixfonts.c -index feb765d..2e34d37 100644 ---- a/dix/dixfonts.c -+++ b/dix/dixfonts.c -@@ -1425,6 +1425,7 @@ doImageText(ClientPtr client, ITclosurePtr c) - GC *pGC; - unsigned char *data; - ITclosurePtr new_closure; -+ ITclosurePtr old_closure; - - /* We're putting the client to sleep. We need to - save some state. Similar problem to that handled -@@ -1436,12 +1437,14 @@ doImageText(ClientPtr client, ITclosurePtr c) - err = BadAlloc; - goto bail; - } -+ old_closure = c; - *new_closure = *c; - c = new_closure; - - data = malloc(c->nChars * itemSize); - if (!data) { - free(c); -+ c = old_closure; - err = BadAlloc; - goto bail; - } -@@ -1452,6 +1455,7 @@ doImageText(ClientPtr client, ITclosurePtr c) - if (!pGC) { - free(c->data); - free(c); -+ c = old_closure; - err = BadAlloc; - goto bail; - } -@@ -1464,6 +1468,7 @@ doImageText(ClientPtr client, ITclosurePtr c) - FreeScratchGC(pGC); - free(c->data); - free(c); -+ c = old_closure; - err = BadAlloc; - goto bail; - } --- -1.7.9.2 - -

1 0

ports/xorg (3.0): xorg-xf86-input-keyboard: update to 1.8.0
by crux＠crux.nu 03 Nov '13

03 Nov '13

commit 0f8c4af042ed8ea3f8a6e1936ae3cd29bb7c8114 Author: Juergen Daubert <jue(a)jue.li> Date: Sun Nov 3 12:52:49 2013 +0100 xorg-xf86-input-keyboard: update to 1.8.0 diff --git a/xorg-xf86-input-keyboard/.md5sum b/xorg-xf86-input-keyboard/.md5sum index edf0876..884af8a 100644 --- a/xorg-xf86-input-keyboard/.md5sum +++ b/xorg-xf86-input-keyboard/.md5sum @@ -1 +1 @@ -97387046c5a450ff78793d5da8e66d5e xf86-input-keyboard-1.7.0.tar.bz2 +ce936e219682bacf5a4a9c4ab940edb8 xf86-input-keyboard-1.8.0.tar.bz2 diff --git a/xorg-xf86-input-keyboard/Pkgfile b/xorg-xf86-input-keyboard/Pkgfile index 927f311..51af7bc 100644 --- a/xorg-xf86-input-keyboard/Pkgfile +++ b/xorg-xf86-input-keyboard/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xorg-server name=xorg-xf86-input-keyboard -version=1.7.0 +version=1.8.0 release=1 source=(http://xorg.freedesktop.org/releases/individual/driver/xf86-input-k…

1 0

ports/opt (3.0): libmusicbrainz: fix source url
by crux＠crux.nu 02 Nov '13

02 Nov '13

commit 7e5be0de8218edf503d45ff8d8afbc70bb7d6cd3 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sat Nov 2 11:16:14 2013 +1100 libmusicbrainz: fix source url diff --git a/libmusicbrainz/Pkgfile b/libmusicbrainz/Pkgfile index ca3fd24..f628dd3 100644 --- a/libmusicbrainz/Pkgfile +++ b/libmusicbrainz/Pkgfile @@ -7,7 +7,7 @@ name=libmusicbrainz version=2.1.5 release=2 -source=(http://ftp.musicbrainz.org/pub/musicbrainz/$name-$version.tar.gz +source=(http://ftp.musicbrainz.org/pub/musicbrainz/historical/$name-$version.tar.gz $name.diff) build() {

1 0

ports/core (3.0): dhcpcd: temporary switch source URL to crux.nu
by crux＠crux.nu 01 Nov '13

01 Nov '13

commit 8dd67ad798058d186297f06a8eabfb490ce2cd6d Author: Juergen Daubert <jue(a)jue.li> Date: Fri Nov 1 09:31:41 2013 +0100 dhcpcd: temporary switch source URL to crux.nu diff --git a/dhcpcd/Pkgfile b/dhcpcd/Pkgfile index 60b02b8..81f3dbc 100644 --- a/dhcpcd/Pkgfile +++ b/dhcpcd/Pkgfile @@ -6,7 +6,8 @@ name=dhcpcd version=6.1.0 release=1 -source=(http://roy.marples.name/downloads/dhcpcd/$name-$version.tar.bz2) +#source=(http://roy.marples.name/downloads/dhcpcd/$name-$version.tar.bz2) +source=(http://crux.nu/files/distfiles/$name-$version.tar.bz2) build () { cd $name-$version

1 0