May 2014 - crux-commits - lists.crux.nu

ports/xorg (3.0): [notify] xorg-libxfont: update to 1.4.8
by crux＠crux.nu 16 May '14

16 May '14

commit 07be7c683169826bec2fc40ba81925357469e16b Author: Juergen Daubert <jue(a)jue.li> Date: Fri May 16 19:36:20 2014 +0200 [notify] xorg-libxfont: update to 1.4.8 Several security fixes, see - http://lists.x.org/archives/xorg-announce/2014-May/002431.html - http://lists.x.org/archives/xorg-announce/2014-May/002432.html diff --git a/xorg-libxfont/.md5sum b/xorg-libxfont/.md5sum index 9bd03ec..33af63f 100644 --- a/xorg-libxfont/.md5sum +++ b/xorg-libxfont/.md5sum @@ -1,2 +1 @@ -b21ee5739d5d2e5028b302fbf9fe630b libXfont-1.4.7.tar.bz2 -7c8a0fe77265af3a7c159fa2be9eecf7 xorg-libxfont-const.diff +a7cbc4128c244d9c54fdf21cd517ac8c libXfont-1.4.8.tar.bz2 diff --git a/xorg-libxfont/Pkgfile b/xorg-libxfont/Pkgfile index f5410ce..51e9cc1 100644 --- a/xorg-libxfont/Pkgfile +++ b/xorg-libxfont/Pkgfile @@ -4,14 +4,12 @@ # Depends on: freetype, xorg-xproto, xorg-xtrans, xorg-fontsproto, xorg-libfontenc name=xorg-libxfont -version=1.4.7 +version=1.4.8 release=1 -source=(http://xorg.freedesktop.org/releases/individual/lib/libXfont-$version.tar.bz2 \ - $name-const.diff) +source=(http://xorg.freedesktop.org/releases/individual/lib/libXfont-$version.tar.bz2) build() { cd libXfont-$version - patch -p1 -i $SRC/$name-const.diff ./configure --prefix=/usr diff --git a/xorg-libxfont/xorg-libxfont-const.diff b/xorg-libxfont/xorg-libxfont-const.diff deleted file mode 100644 index 9c71041..0000000 --- a/xorg-libxfont/xorg-libxfont-const.diff +++ /dev/null @@ -1,21 +0,0 @@ -diff -urN libXfont-1.4.7.orig/src/util/patcache.c libXfont-1.4.7/src/util/patcache.c ---- libXfont-1.4.7.orig/src/util/patcache.c 2014-01-07 10:25:08.000000000 -0600 -+++ libXfont-1.4.7/src/util/patcache.c 2014-04-19 13:28:51.509242842 -0500 -@@ -128,7 +128,7 @@ - /* add entry */ - void - CacheFontPattern (FontPatternCachePtr cache, -- char *pattern, -+ const char *pattern, - int patlen, - FontPtr pFont) - { -@@ -174,7 +174,7 @@ - /* find matching entry */ - FontPtr - FindCachedFontPattern (FontPatternCachePtr cache, -- char *pattern, -+ const char *pattern, - int patlen) - { - int hash;

1 0

ports/opt (3.0): [notify] flash-player-plugin: updated to 11.2.202.359
by crux＠crux.nu 15 May '14

15 May '14

commit ed7e5e2cd1af2bb81b5e4d52039a20904d716df1 Author: Jose V Beneyto <sepen(a)crux.nu> Date: Thu May 15 10:13:13 2014 +0200 [notify] flash-player-plugin: updated to 11.2.202.359 Security update: http://helpx.adobe.com/security/products/flash-player/apsb14-14.html diff --git a/flash-player-plugin/.md5sum b/flash-player-plugin/.md5sum index 5d59569..144380e 100644 --- a/flash-player-plugin/.md5sum +++ b/flash-player-plugin/.md5sum @@ -1 +1 @@ -2a067ebb3648434aba24da4aafc4b71e flash-plugin-11.2.202.356-release.x86_64.rpm +6650ad4720fb73b2bc65fe19168df0d7 flash-plugin-11.2.202.359-release.x86_64.rpm diff --git a/flash-player-plugin/Pkgfile b/flash-player-plugin/Pkgfile index 407b8f5..ec0798b 100644 --- a/flash-player-plugin/Pkgfile +++ b/flash-player-plugin/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=flash-player-plugin -version=11.2.202.356 +version=11.2.202.359 release=1 source=(http://fpdownload.macromedia.com/get/flashplayer/pdc/$version/flash…

1 0

ports/opt (3.0): wpa_supplicant: revert 'OpenSSL: Do not accept SSL Client certificate for server'
by crux＠crux.nu 14 May '14

14 May '14

commit 5da07b6fa1e4abdc7ebc17f3f3f1b2eef9028035 Author: Matt Housh <jaeger(a)crux.nu> Date: Wed May 14 08:30:29 2014 -0500 wpa_supplicant: revert 'OpenSSL: Do not accept SSL Client certificate for server' diff --git a/wpa_supplicant/.md5sum b/wpa_supplicant/.md5sum index bf23d3e..a00a43c 100644 --- a/wpa_supplicant/.md5sum +++ b/wpa_supplicant/.md5sum @@ -1 +1,2 @@ +ba6674b926dc30cfca46cf9a6bdacd23 revert-51e3eaf.patch e96b8db5a8171cd17a5b2012d6ad7cc7 wpa_supplicant-2.1.tar.gz diff --git a/wpa_supplicant/Pkgfile b/wpa_supplicant/Pkgfile index b99bbf9..fb3d968 100644 --- a/wpa_supplicant/Pkgfile +++ b/wpa_supplicant/Pkgfile @@ -5,10 +5,13 @@ name=wpa_supplicant version=2.1 -release=1 -source=(http://hostap.epitest.fi/releases/$name-$version.tar.gz) +release=2 +source=(http://hostap.epitest.fi/releases/$name-$version.tar.gz \ + revert-51e3eaf.patch) build () { + patch -d $name-$version -p1 -i $SRC/revert-51e3eaf.patch + cd $name-$version/$name cp defconfig .config diff --git a/wpa_supplicant/revert-51e3eaf.patch b/wpa_supplicant/revert-51e3eaf.patch new file mode 100644 index 0000000..e3141b0 --- /dev/null +++ b/wpa_supplicant/revert-51e3eaf.patch @@ -0,0 +1,68 @@ +From b62d5b5450101676a0c05691b4bcd94e11426397 Mon Sep 17 00:00:00 2001 +From: Jouni Malinen <j(a)w1.fi> +Date: Wed, 19 Feb 2014 09:56:02 +0000 +Subject: Revert "OpenSSL: Do not accept SSL Client certificate for server" + +This reverts commit 51e3eafb68e15e78e98ca955704be8a6c3a7b304. There are +too many deployed AAA servers that include both id-kp-clientAuth and +id-kp-serverAuth EKUs for this change to be acceptable as a generic rule +for AAA authentication server validation. OpenSSL enforces the policy of +not connecting if only id-kp-clientAuth is included. If a valid EKU is +listed with it, the connection needs to be accepted. + +Signed-off-by: Jouni Malinen <j(a)w1.fi> +--- +diff --git a/src/crypto/tls.h b/src/crypto/tls.h +index 287fd33..feba13f 100644 +--- a/src/crypto/tls.h ++++ b/src/crypto/tls.h +@@ -41,8 +41,7 @@ enum tls_fail_reason { + TLS_FAIL_ALTSUBJECT_MISMATCH = 6, + TLS_FAIL_BAD_CERTIFICATE = 7, + TLS_FAIL_SERVER_CHAIN_PROBE = 8, +- TLS_FAIL_DOMAIN_SUFFIX_MISMATCH = 9, +- TLS_FAIL_SERVER_USED_CLIENT_CERT = 10 ++ TLS_FAIL_DOMAIN_SUFFIX_MISMATCH = 9 + }; + + union tls_event_data { +diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c +index a13fa38..8cf1de8 100644 +--- a/src/crypto/tls_openssl.c ++++ b/src/crypto/tls_openssl.c +@@ -105,7 +105,6 @@ struct tls_connection { + unsigned int ca_cert_verify:1; + unsigned int cert_probe:1; + unsigned int server_cert_only:1; +- unsigned int server:1; + + u8 srv_cert_hash[32]; + +@@ -1480,16 +1479,6 @@ static int tls_verify_cb(int preverify_ok, X509_STORE_CTX *x509_ctx) + TLS_FAIL_SERVER_CHAIN_PROBE); + } + +- if (!conn->server && err_cert && preverify_ok && depth == 0 && +- (err_cert->ex_flags & EXFLAG_XKUSAGE) && +- (err_cert->ex_xkusage & XKU_SSL_CLIENT)) { +- wpa_printf(MSG_WARNING, "TLS: Server used client certificate"); +- openssl_tls_fail_event(conn, err_cert, err, depth, buf, +- "Server used client certificate", +- TLS_FAIL_SERVER_USED_CLIENT_CERT); +- preverify_ok = 0; +- } +- + if (preverify_ok && context->event_cb != NULL) + context->event_cb(context->cb_ctx, + TLS_CERT_CHAIN_SUCCESS, NULL); +@@ -2541,8 +2530,6 @@ openssl_handshake(struct tls_connection *conn, const struct wpabuf *in_data, + int res; + struct wpabuf *out_data; + +- conn->server = !!server; +- + /* + * Give TLS handshake data from the server (if available) to OpenSSL + * for processing. +-- +cgit v0.9.2

1 0

ports/opt (3.0): john: initial import
by crux＠crux.nu 14 May '14

14 May '14

commit 0aba3c7852e89ae9a023ea5c4b499137f1675f0b Author: Thomas Penteker <tek(a)serverop.de> Date: Wed May 14 12:35:10 2014 +0200 john: initial import diff --git a/john/.footprint b/john/.footprint new file mode 100644 index 0000000..609f125 --- /dev/null +++ b/john/.footprint @@ -0,0 +1,55 @@ +drwxr-xr-x root/root usr/ +drwxr-xr-x root/root usr/bin/ +-rwxr-xr-x root/root usr/bin/john +drwxr-xr-x root/root usr/lib/ +drwxr-xr-x root/root usr/lib/john/ +-rwxr-xr-x root/root usr/lib/john/all.chr +-rwxr-xr-x root/root usr/lib/john/alnum.chr +-rwxr-xr-x root/root usr/lib/john/alpha.chr +-rwxr-xr-x root/root usr/lib/john/benchmark-unify +-rwxr-xr-x root/root usr/lib/john/calc_stat +-rwxr-xr-x root/root usr/lib/john/cracf2john.py +-rwxr-xr-x root/root usr/lib/john/dictionary.rfc2865 +-rwxr-xr-x root/root usr/lib/john/digits.chr +-rwxr-xr-x root/root usr/lib/john/dumb16.conf +-rwxr-xr-x root/root usr/lib/john/dumb32.conf +-rwxr-xr-x root/root usr/lib/john/dynamic.conf +-rwxr-xr-x root/root usr/lib/john/genincstats.rb +-rwxr-xr-x root/root usr/lib/john/genmkvpwd +-rwxr-xr-x root/root usr/lib/john/hccap2john +-rwxr-xr-x root/root usr/lib/john/john +-rwxr-xr-x root/root usr/lib/john/john.bash_completion +-rwxr-xr-x root/root usr/lib/john/john.conf +-rwxr-xr-x root/root usr/lib/john/john.local.conf (EMPTY) +-rwxr-xr-x root/root usr/lib/john/keepass2john +-rwxr-xr-x root/root usr/lib/john/keychain2john +-rwxr-xr-x root/root usr/lib/john/lanman.chr +-rwxr-xr-x root/root usr/lib/john/ldif2john.pl +-rwxr-xr-x root/root usr/lib/john/lion2john-alt.pl +-rwxr-xr-x root/root usr/lib/john/lion2john.pl +-rwxr-xr-x root/root usr/lib/john/mailer +-rwxr-xr-x root/root usr/lib/john/mkvcalcproba +-rwxr-xr-x root/root usr/lib/john/netntlm.pl +-rwxr-xr-x root/root usr/lib/john/netscreen.py +-rwxr-xr-x root/root usr/lib/john/odf2john.py +-rwxr-xr-x root/root usr/lib/john/pass_gen.pl +-rwxr-xr-x root/root usr/lib/john/password.lst +-rwxr-xr-x root/root usr/lib/john/pdf2john +-rwxr-xr-x root/root usr/lib/john/pwsafe2john +-rwxr-xr-x root/root usr/lib/john/racf2john +-rwxr-xr-x root/root usr/lib/john/radius2john.pl +-rwxr-xr-x root/root usr/lib/john/rar2john +-rwxr-xr-x root/root usr/lib/john/raw2dyna +-rwxr-xr-x root/root usr/lib/john/relbench +-rwxr-xr-x root/root usr/lib/john/sap2john.pl +-rwxr-xr-x root/root usr/lib/john/sha-dump.pl +-rwxr-xr-x root/root usr/lib/john/sha-test.pl +-rwxr-xr-x root/root usr/lib/john/sipdump2john.py +-rwxr-xr-x root/root usr/lib/john/ssh2john +-rwxr-xr-x root/root usr/lib/john/stats +-rwxr-xr-x root/root usr/lib/john/tgtsnarf +-rwxr-xr-x root/root usr/lib/john/unafs +-rwxr-xr-x root/root usr/lib/john/undrop +-rwxr-xr-x root/root usr/lib/john/unique +-rwxr-xr-x root/root usr/lib/john/unshadow +-rwxr-xr-x root/root usr/lib/john/zip2john diff --git a/john/.md5sum b/john/.md5sum new file mode 100644 index 0000000..6975edd --- /dev/null +++ b/john/.md5sum @@ -0,0 +1 @@ +e49b2072d20a8254164c9112f6b3751b john-1.7.9-jumbo-7.tar.bz2 diff --git a/john/Pkgfile b/john/Pkgfile new file mode 100644 index 0000000..c36dc13 --- /dev/null +++ b/john/Pkgfile @@ -0,0 +1,25 @@ +# Description: John the Ripper is a fast password cracker +# URL: http://www.openwall.com/john/ +# Maintainer: Thomas Penteker, tek at serverop dot de +# Packager: Jose V Beneyto, sepen at crux dot nu + +name=john +version=1.7.9-jumbo-7 +release=1 +source=(http://www.openwall.com/$name/g/$name-$version.tar.bz2) + +build() { + + echo 'linux-x86-sse2 Linux, x86 with SSE2 (best)' > $SRC/systypes + sed -i 's|/usr/libexec|/usr/lib|g' $name-$version/src/params.h + + cd $name-$version/src + + make linux-x86-64 + + install -d $PKG/usr/bin + install -d $PKG/usr/lib/$name + install -m 755 ../run/* $PKG/usr/lib/$name + echo -e '#!/bin/sh\n/usr/lib/john/john "$@"\n' > $PKG/usr/bin/john + chmod 755 $PKG/usr/bin/john +}

1 0

ports/opt (3.0): mod_svn: update to 1.8.9
by crux＠crux.nu 14 May '14

14 May '14

commit 3283ee8c162f673127ea360654e37c207912e6cd Author: Juergen Daubert <jue(a)jue.li> Date: Wed May 14 12:25:12 2014 +0200 mod_svn: update to 1.8.9 diff --git a/mod_svn/.md5sum b/mod_svn/.md5sum index fc6335c..fc3a621 100644 --- a/mod_svn/.md5sum +++ b/mod_svn/.md5sum @@ -1 +1 @@ -77349caf0ef5a612c9718c53516a9934 subversion-1.8.5.tar.bz2 +bd495517a760ddd764ce449a891971db subversion-1.8.9.tar.bz2 diff --git a/mod_svn/Pkgfile b/mod_svn/Pkgfile index b71dfd4..ca46efc 100644 --- a/mod_svn/Pkgfile +++ b/mod_svn/Pkgfile @@ -4,7 +4,7 @@ # Depends on: subversion apache name=mod_svn -version=1.8.5 +version=1.8.9 release=1 source=(http://www.apache.org/dist/subversion/subversion-$version.tar.bz2)

1 0

ports/core (3.0): tzdata: update to 2014c
by crux＠crux.nu 13 May '14

13 May '14

commit ad1786cabc6806ea4c2719a719a2efe3087ff6ef Author: Juergen Daubert <jue(a)jue.li> Date: Tue May 13 18:08:41 2014 +0200 tzdata: update to 2014c diff --git a/tzdata/.md5sum b/tzdata/.md5sum index d4d2564..d24cbb2 100644 --- a/tzdata/.md5sum +++ b/tzdata/.md5sum @@ -1,3 +1,3 @@ cd1eb9bce381be0d6a35337f593aca18 tzcode-makefile.patch -7629513a4dbd107b7da946123d498c6b tzcode2014b.tar.gz -c58d556612396d4ca5a17807a79924e5 tzdata2014b.tar.gz +657636f201ae8b561225afde49d274af tzcode2014c.tar.gz +fa7f3dc1c6f6238253a6f2b850467e2e tzdata2014c.tar.gz diff --git a/tzdata/Pkgfile b/tzdata/Pkgfile index f420837..05741ed 100644 --- a/tzdata/Pkgfile +++ b/tzdata/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=tzdata -version=2014b +version=2014c release=1 source=(http://www.iana.org/time-zones/repository/releases/$name$version.ta… http://www.iana.org/time-zones/repository/releases/tzcode$version.tar.gz

1 0

ports/core (3.0): nasm: update to 2.11.04
by crux＠crux.nu 13 May '14

13 May '14

commit 2928d4fb0951ec30c9b543b58f5786440d596de6 Author: Juergen Daubert <jue(a)jue.li> Date: Tue May 13 18:04:56 2014 +0200 nasm: update to 2.11.04 diff --git a/nasm/.md5sum b/nasm/.md5sum index 1bdbecf..21d8efb 100644 --- a/nasm/.md5sum +++ b/nasm/.md5sum @@ -1 +1 @@ -ec43582b8febae24e5b440ae816120c8 nasm-2.11.02.tar.xz +97ae0ecd007750f776099fcb9fccc7af nasm-2.11.04.tar.xz diff --git a/nasm/Pkgfile b/nasm/Pkgfile index ac7e6c5..4d0b4c6 100644 --- a/nasm/Pkgfile +++ b/nasm/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=nasm -version=2.11.02 +version=2.11.04 release=1 source=(http://www.nasm.us/pub/nasm/releasebuilds/$version/$name-$version.tar.xz)

1 0

ports/xorg (3.0): xorg-xf86-input-synaptics: update to 1.7.6
by crux＠crux.nu 13 May '14

13 May '14

commit 0004dbc05404ffb94499524ab25ac5a695bafa25 Author: Juergen Daubert <jue(a)jue.li> Date: Tue May 13 17:09:50 2014 +0200 xorg-xf86-input-synaptics: update to 1.7.6 diff --git a/xorg-xf86-input-synaptics/.md5sum b/xorg-xf86-input-synaptics/.md5sum index a7b9dcc..cba7756 100644 --- a/xorg-xf86-input-synaptics/.md5sum +++ b/xorg-xf86-input-synaptics/.md5sum @@ -1 +1 @@ -09c225a42bb9009f2e2a3d1dd2e368b3 xf86-input-synaptics-1.7.5.tar.bz2 +f1a501caa0da0bf0e78f249c5ed9bd73 xf86-input-synaptics-1.7.6.tar.bz2 diff --git a/xorg-xf86-input-synaptics/Pkgfile b/xorg-xf86-input-synaptics/Pkgfile index d8cdd53..c555ba4 100644 --- a/xorg-xf86-input-synaptics/Pkgfile +++ b/xorg-xf86-input-synaptics/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xorg-server, mtdev name=xorg-xf86-input-synaptics -version=1.7.5 +version=1.7.6 release=1 source=(http://xorg.freedesktop.org/releases/individual/driver/xf86-input-s…

1 0

ports/opt (3.0): chromium: fixed issues with ICU (FS#1014)
by crux＠crux.nu 13 May '14

13 May '14

commit 2af02d7298d28baddef24dfd5c66b796e53215b6 Author: Jose V Beneyto <sepen(a)crux.nu> Date: Tue May 13 16:27:56 2014 +0200 chromium: fixed issues with ICU (FS#1014) diff --git a/chromium/Pkgfile b/chromium/Pkgfile index 955a479..05d719e 100644 --- a/chromium/Pkgfile +++ b/chromium/Pkgfile @@ -6,7 +6,7 @@ name=chromium version=34.0.1847.132 -release=1 +release=2 source=(http://commondatastorage.googleapis.com/chromium-browser-official/$… \ $name.sh rungn.patch) @@ -55,7 +55,8 @@ build() { -Dlinux_link_libpci=1 \ -Dlinux_link_libspeechd=1 \ -Denable_webrtc=1 \ - -Ddisable_nacl=1 + -Ddisable_nacl=1 \ + -Dicu_use_data_file_flag=0 make chrome chrome_sandbox BUILDTYPE=Release

1 0

ports/opt (3.0): subversion-bashcompletion: updated to 1.8.9
by crux＠crux.nu 13 May '14

13 May '14

commit ef130e3c96ed59a96ac9d8a628b26ecb2602c0dc Author: Jose V Beneyto <sepen(a)crux.nu> Date: Tue May 13 16:34:11 2014 +0200 subversion-bashcompletion: updated to 1.8.9 diff --git a/subversion-bashcompletion/Pkgfile b/subversion-bashcompletion/Pkgfile index 9a44cd3..510fd35 100644 --- a/subversion-bashcompletion/Pkgfile +++ b/subversion-bashcompletion/Pkgfile @@ -5,7 +5,7 @@ # Depends on: bash-completion subversion name=subversion-bashcompletion -version=1.8.8 +version=1.8.9 release=1 source=(http://svn.apache.org/repos/asf/subversion/tags/$version/tools/clie…

1 0