February 2015 - crux-commits

ports/opt (3.1): [notify] flash-player-plugin: updated to 11.2.202.442
by crux＠crux.nu 05 Feb '15

05 Feb '15

commit 7838b6f7c4fa70762db94a9fb6097370a03f65ed Author: Jose V Beneyto <jose.beneyto(a)eslife.es> Date: Thu Feb 5 23:22:08 2015 +0000 [notify] flash-player-plugin: updated to 11.2.202.442 Security update: http://helpx.adobe.com/security/products/flash-player/apsb15-04.html diff --git a/flash-player-plugin/.md5sum b/flash-player-plugin/.md5sum index d4a06ae..1261f18 100644 --- a/flash-player-plugin/.md5sum +++ b/flash-player-plugin/.md5sum @@ -1 +1 @@ -ac463802bcb18d2fb3e0eea9c2542679 flash-plugin-11.2.202.440-release.x86_64.rpm +d3ff0ba992207808cf42f152383d44b2 flash-plugin-11.2.202.442-release.x86_64.rpm diff --git a/flash-player-plugin/Pkgfile b/flash-player-plugin/Pkgfile index f2cf9d1..0bcb5c3 100644 --- a/flash-player-plugin/Pkgfile +++ b/flash-player-plugin/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=flash-player-plugin -version=11.2.202.440 +version=11.2.202.442 release=1 source=(http://fpdownload.macromedia.com/get/flashplayer/pdc/$version/flash…

1 0

ports/contrib (3.1): ntp: 4.2.8 -> 4.2.8p1
by crux＠crux.nu 05 Feb '15

05 Feb '15

commit d6b9864b8886cb0e7cc4567f291131932ec615a0 Author: Thomas Penteker <tek(a)serverop.de> Date: Thu Feb 5 22:59:05 2015 +0100 ntp: 4.2.8 -> 4.2.8p1 diff --git a/ntp/.md5sum b/ntp/.md5sum index 4939745..dc9427e 100644 --- a/ntp/.md5sum +++ b/ntp/.md5sum @@ -1,4 +1,4 @@ -6972a626be6150db8cfbd0b63d8719e7 ntp-4.2.8.tar.gz +65d8cdfae4722226fbe29863477641ed ntp-4.2.8p1.tar.gz 0c5675c46a226de4504f5b855326b6b7 ntp-64bit.diff 99133142249735be5c8f48f1b6ca6821 ntp.conf 81250961599ecb64d9c0ca96d96b1d73 ntpd diff --git a/ntp/Pkgfile b/ntp/Pkgfile index 2593b29..bdf13a8 100644 --- a/ntp/Pkgfile +++ b/ntp/Pkgfile @@ -5,7 +5,7 @@ # Depends on: openssl name=ntp -version=4.2.8 +version=4.2.8p1 release=1 source=(http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/$name-$versio… ntpd ntpdate ntp.conf ntp-64bit.diff)

1 0

ports/opt (3.1): [notify] chromium: updated to 40.0.2214.94
by crux＠crux.nu 04 Feb '15

04 Feb '15

commit c507741f0aebee2e52465e9c016bd1732bd02ba1 Author: Jose V Beneyto <jose.beneyto(a)eslife.es> Date: Wed Feb 4 20:08:00 2015 +0000 [notify] chromium: updated to 40.0.2214.94 This release contains a Flash Player update. This update contains some fixes: https://chromium.googlesource.com/chromium/src/+log/40.0.2214.93..40.0.2214… diff --git a/chromium/.footprint b/chromium/.footprint index cf95f59..ea6a61d 100644 --- a/chromium/.footprint +++ b/chromium/.footprint @@ -27,6 +27,9 @@ drwxr-xr-x root/root usr/lib/chromium/resources/inspector/Images/ -rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/checker.png -rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/chromeDisabledSelect.png -rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/chromeDisabledSelect_2x.png +-rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/chromeLeft.png +-rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/chromeMiddle.png +-rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/chromeRight.png -rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/chromeSelect.png -rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/chromeSelect_2x.png -rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/cookie.png @@ -87,74 +90,31 @@ drwxr-xr-x root/root usr/lib/chromium/resources/inspector/Images/ -rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/transformControls.png -rw-rw-r-- root/root usr/lib/chromium/resources/inspector/Images/transformControls_2x.png -rw-r--r-- root/root usr/lib/chromium/resources/inspector/InspectorBackendCommands.js --rw-r--r-- root/root usr/lib/chromium/resources/inspector/Runtime.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/SupportedCSSProperties.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/accelerometer.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/auditsPanel.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/audits_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/breakpointsList.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/canvasProfiler.css -drwxr-xr-x root/root usr/lib/chromium/resources/inspector/cm/ --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/cm/codemirror.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/cmdevtools.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/console_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/dataGrid.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/devicesView.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/devices_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools.html -rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools_extension_api.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/documentationView.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/documentation_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/elementsPanel.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/elements_module.js --rw-r--r-- root/root usr/lib/chromium/resources/inspector/extensions_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/filter.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/filteredItemSelectionDialog.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/flameChart.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/heapProfiler.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/heap_snapshot_worker_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/helpScreen.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/indexedDBViews.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/inspectorCommon.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/inspectorSyntaxHighlight.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/layersPanel.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/layers_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/navigatorView.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/networkLogView.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/networkPanel.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/network_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/overrides.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/overviewGrid.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/panelEnablerView.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/pieChart.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/profiler_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/profilesPanel.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/promisesPanel.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/promises_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/requestCookiesView.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/requestHeadersView.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/resourceView.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/resourcesPanel.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/resources_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/responsiveDesignView.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/revisionHistory.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/screencastView.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/script_formatter_worker_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/settings_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/source_frame_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/sourcesPanel.css --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/sourcesView.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/sources_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/spectrum.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/temp_storage_shared_worker_module.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/timelinePanel.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/timeline_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/toolbox.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/toolbox.html -rw-r--r-- root/root usr/lib/chromium/resources/inspector/toolbox.js --rw-rw-r-- root/root usr/lib/chromium/resources/inspector/webSocketFrameView.css drwxr-xr-x root/root usr/man/ drwxr-xr-x root/root usr/man/man1/ -rw-r--r-- root/root usr/man/man1/chromium.1.gz diff --git a/chromium/.md5sum b/chromium/.md5sum index 56918fe..7603108 100644 --- a/chromium/.md5sum +++ b/chromium/.md5sum @@ -1,2 +1,2 @@ -9ecb9007ca7d97d8053e63bd1f381f3f chromium-39.0.2171.95.tar.xz +67d25ab2c714621e6c250ed5f5c444c0 chromium-40.0.2214.94.tar.xz 64968626706b07721983ac59fb3babbf chromium.sh diff --git a/chromium/Pkgfile b/chromium/Pkgfile index 67310de..2aaafcb 100644 --- a/chromium/Pkgfile +++ b/chromium/Pkgfile @@ -5,7 +5,7 @@ # Depends on: ninja dbus-glib gtk libevent nss xorg-libxscrnsaver xorg-libxtst libgcrypt xorg-libxdamage yasm xorg-libxt gperf speech-dispatcher libdrm libexif clang name=chromium -version=39.0.2171.95 +version=40.0.2214.94 release=1 source=(http://commondatastorage.googleapis.com/chromium-browser-official/$… \ $name.sh)

1 0

ports/core (3.0): [notify] glibc-32: fix CVE-2015-0235 ghost vulnerability in 3.0, too
by crux＠crux.nu 04 Feb '15

04 Feb '15

commit 49eb9abe3d36661758aab4d077ae927cdf428a3b Author: Thomas Penteker <tek(a)serverop.de> Date: Wed Feb 4 20:32:09 2015 +0100 [notify] glibc-32: fix CVE-2015-0235 ghost vulnerability in 3.0, too diff --git a/glibc-32/.md5sum b/glibc-32/.md5sum index a0c2384..63270c0 100644 --- a/glibc-32/.md5sum +++ b/glibc-32/.md5sum @@ -1,6 +1,7 @@ 80b181b02ab249524ec92822c0174cf7 glibc-2.16.0.tar.xz c3f3499e0a6272cba7b6e46bfe6bbcea glibc-32-2.16.0-multilib-dirs.patch 3a51662cd99783b3d01ceac2dca19597 glibc-CVE-2013-4332.patch +1168de0dd6aeca3e85a992e4ffaf53d5 glibc-ghost-CVE-2015-0235.patch d4a2a19efe1e9b59b86fd15a968f7e10 glibc-regexp_buffer_overrun.patch 7e6a5a13c37f93213db9803d9790b7de glibc-resolv_assert.patch 99ed7b88221475d51a073f00d7ee9c42 glibc-segfault_in_strncasecmp.patch diff --git a/glibc-32/Pkgfile b/glibc-32/Pkgfile index f0f78f9..955bf23 100644 --- a/glibc-32/Pkgfile +++ b/glibc-32/Pkgfile @@ -4,7 +4,7 @@ name=glibc-32 version=2.16.0 -release=6 +release=7 source=(http://ftp.gnu.org/gnu/glibc/glibc-$version.tar.xz \ http://crux.nu/files/distfiles/kernel-headers-3.4.11.tar.xz \ $name-$version-multilib-dirs.patch \ @@ -14,6 +14,7 @@ source=(http://ftp.gnu.org/gnu/glibc/glibc-$version.tar.xz \ glibc-segfault_in_strncasecmp.patch \ glibc-strtod_integer_overflow.patch \ glibc-regexp_buffer_overrun.patch + glibc-ghost-CVE-2015-0235.patch \ glibc-CVE-2013-4332.patch) build() { @@ -28,6 +29,7 @@ build() { patch -p1 -d glibc-$version -i $SRC/glibc-regexp_buffer_overrun.patch patch -p1 -d glibc-$version -i $SRC/$name-$version-multilib-dirs.patch patch -p1 -d glibc-$version -i $SRC/glibc-CVE-2013-4332.patch + patch -p1 -d glibc-$version -i $SRC/glibc-ghost-CVE-2015-0235.patch mkdir build cd build diff --git a/glibc-32/glibc-ghost-CVE-2015-0235.patch b/glibc-32/glibc-ghost-CVE-2015-0235.patch new file mode 100644 index 0000000..b1b49d0 --- /dev/null +++ b/glibc-32/glibc-ghost-CVE-2015-0235.patch @@ -0,0 +1,212 @@ +diff -Naur glibc-2.16.0/nss/digits_dots.c glibc-2.16.0.new/nss/digits_dots.c +--- glibc-2.16.0/nss/digits_dots.c 2012-06-30 21:12:34.000000000 +0200 ++++ glibc-2.16.0.new/nss/digits_dots.c 2015-01-28 13:45:05.481023654 +0100 +@@ -46,7 +46,10 @@ + { + if (h_errnop) + *h_errnop = NETDB_INTERNAL; +- *result = NULL; ++ if (buffer_size == NULL) ++ *status = NSS_STATUS_TRYAGAIN; ++ else ++ *result = NULL; + return -1; + } + +@@ -83,14 +86,16 @@ + } + + size_needed = (sizeof (*host_addr) +- + sizeof (*h_addr_ptrs) + strlen (name) + 1); ++ + sizeof (*h_addr_ptrs) ++ + sizeof (*h_alias_ptr) + strlen (name) + 1); + + if (buffer_size == NULL) + { + if (buflen < size_needed) + { ++ *status = NSS_STATUS_TRYAGAIN; + if (h_errnop != NULL) +- *h_errnop = TRY_AGAIN; ++ *h_errnop = NETDB_INTERNAL; + __set_errno (ERANGE); + goto done; + } +@@ -109,7 +114,7 @@ + *buffer_size = 0; + __set_errno (save); + if (h_errnop != NULL) +- *h_errnop = TRY_AGAIN; ++ *h_errnop = NETDB_INTERNAL; + *result = NULL; + goto done; + } +@@ -149,7 +154,9 @@ + if (! ok) + { + *h_errnop = HOST_NOT_FOUND; +- if (buffer_size) ++ if (buffer_size == NULL) ++ *status = NSS_STATUS_NOTFOUND; ++ else + *result = NULL; + goto done; + } +@@ -190,7 +197,7 @@ + if (buffer_size == NULL) + *status = NSS_STATUS_SUCCESS; + else +- *result = resbuf; ++ *result = resbuf; + goto done; + } + +@@ -201,15 +208,6 @@ + + if ((isxdigit (name[0]) && strchr (name, ':') != NULL) || name[0] == ':') + { +- const char *cp; +- char *hostname; +- typedef unsigned char host_addr_t[16]; +- host_addr_t *host_addr; +- typedef char *host_addr_list_t[2]; +- host_addr_list_t *h_addr_ptrs; +- size_t size_needed; +- int addr_size; +- + switch (af) + { + default: +@@ -225,7 +223,10 @@ + /* This is not possible. We cannot represent an IPv6 address + in an `struct in_addr' variable. */ + *h_errnop = HOST_NOT_FOUND; +- *result = NULL; ++ if (buffer_size == NULL) ++ *status = NSS_STATUS_NOTFOUND; ++ else ++ *result = NULL; + goto done; + + case AF_INET6: +@@ -233,42 +234,6 @@ + break; + } + +- size_needed = (sizeof (*host_addr) +- + sizeof (*h_addr_ptrs) + strlen (name) + 1); +- +- if (buffer_size == NULL && buflen < size_needed) +- { +- if (h_errnop != NULL) +- *h_errnop = TRY_AGAIN; +- __set_errno (ERANGE); +- goto done; +- } +- else if (buffer_size != NULL && *buffer_size < size_needed) +- { +- char *new_buf; +- *buffer_size = size_needed; +- new_buf = realloc (*buffer, *buffer_size); +- +- if (new_buf == NULL) +- { +- save = errno; +- free (*buffer); +- __set_errno (save); +- *buffer = NULL; +- *buffer_size = 0; +- *result = NULL; +- goto done; +- } +- *buffer = new_buf; +- } +- +- memset (*buffer, '\0', size_needed); +- +- host_addr = (host_addr_t *) *buffer; +- h_addr_ptrs = (host_addr_list_t *) +- ((char *) host_addr + sizeof (*host_addr)); +- hostname = (char *) h_addr_ptrs + sizeof (*h_addr_ptrs); +- + for (cp = name;; ++cp) + { + if (!*cp) +@@ -281,7 +246,9 @@ + if (inet_pton (AF_INET6, name, host_addr) <= 0) + { + *h_errnop = HOST_NOT_FOUND; +- if (buffer_size) ++ if (buffer_size == NULL) ++ *status = NSS_STATUS_NOTFOUND; ++ else + *result = NULL; + goto done; + } +diff -Naur glibc-2.16.0/nss/getXXbyYY_r.c glibc-2.16.0.new/nss/getXXbyYY_r.c +--- glibc-2.16.0/nss/getXXbyYY_r.c 2012-06-30 21:12:34.000000000 +0200 ++++ glibc-2.16.0.new/nss/getXXbyYY_r.c 2015-01-28 13:45:05.482023654 +0100 +@@ -179,6 +179,9 @@ + case -1: + return errno; + case 1: ++#ifdef NEED_H_ERRNO ++ any_service = true; ++#endif + goto done; + } + #endif +diff -Naur glibc-2.16.0/nss/Makefile glibc-2.16.0.new/nss/Makefile +--- glibc-2.16.0/nss/Makefile 2012-06-30 21:12:34.000000000 +0200 ++++ glibc-2.16.0.new/nss/Makefile 2015-01-28 13:52:01.367041544 +0100 +@@ -38,7 +38,7 @@ + makedb-modules = xmalloc hash-string + extra-objs += $(makedb-modules:=.o) + +-tests = test-netdb tst-nss-test1 ++tests = test-netdb tst-nss-test1 test-digits-dots + xtests = bug-erange + + include ../Makeconfig +diff -Naur glibc-2.16.0/nss/test-digits-dots.c glibc-2.16.0.new/nss/test-digits-dots.c +--- glibc-2.16.0/nss/test-digits-dots.c 1970-01-01 01:00:00.000000000 +0100 ++++ glibc-2.16.0.new/nss/test-digits-dots.c 2015-01-28 13:45:05.483023654 +0100 +@@ -0,0 +1,38 @@ ++/* Copyright (C) 2013 Free Software Foundation, Inc. ++ This file is part of the GNU C Library. ++ ++ The GNU C Library is free software; you can redistribute it and/or ++ modify it under the terms of the GNU Lesser General Public ++ License as published by the Free Software Foundation; either ++ version 2.1 of the License, or (at your option) any later version. ++ ++ The GNU C Library is distributed in the hope that it will be useful, ++ but WITHOUT ANY WARRANTY; without even the implied warranty of ++ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU ++ Lesser General Public License for more details. ++ ++ You should have received a copy of the GNU Lesser General Public ++ License along with the GNU C Library; if not, see ++ <http://www.gnu.org/licenses/>. */ ++ ++/* Testcase for BZ #15014 */ ++ ++#include <stdlib.h> ++#include <netdb.h> ++#include <errno.h> ++ ++static int ++do_test (void) ++{ ++ char buf[32]; ++ struct hostent *result = NULL; ++ struct hostent ret; ++ int h_err = 0; ++ int err; ++ ++ err = gethostbyname_r ("1.2.3.4", &ret, buf, sizeof (buf), &result, &h_err); ++ return err == ERANGE && h_err == NETDB_INTERNAL ? EXIT_SUCCESS : EXIT_FAILURE; ++} ++ ++#define TEST_FUNCTION do_test () ++#include "../test-skeleton.c" diff --git a/glibc/glibc-ghost-CVE-2015-0235.patch b/glibc/glibc-ghost-CVE-2015-0235.patch new file mode 100644 index 0000000..b1b49d0 --- /dev/null +++ b/glibc/glibc-ghost-CVE-2015-0235.patch @@ -0,0 +1,212 @@ +diff -Naur glibc-2.16.0/nss/digits_dots.c glibc-2.16.0.new/nss/digits_dots.c +--- glibc-2.16.0/nss/digits_dots.c 2012-06-30 21:12:34.000000000 +0200 ++++ glibc-2.16.0.new/nss/digits_dots.c 2015-01-28 13:45:05.481023654 +0100 +@@ -46,7 +46,10 @@ + { + if (h_errnop) + *h_errnop = NETDB_INTERNAL; +- *result = NULL; ++ if (buffer_size == NULL) ++ *status = NSS_STATUS_TRYAGAIN; ++ else ++ *result = NULL; + return -1; + } + +@@ -83,14 +86,16 @@ + } + + size_needed = (sizeof (*host_addr) +- + sizeof (*h_addr_ptrs) + strlen (name) + 1); ++ + sizeof (*h_addr_ptrs) ++ + sizeof (*h_alias_ptr) + strlen (name) + 1); + + if (buffer_size == NULL) + { + if (buflen < size_needed) + { ++ *status = NSS_STATUS_TRYAGAIN; + if (h_errnop != NULL) +- *h_errnop = TRY_AGAIN; ++ *h_errnop = NETDB_INTERNAL; + __set_errno (ERANGE); + goto done; + } +@@ -109,7 +114,7 @@ + *buffer_size = 0; + __set_errno (save); + if (h_errnop != NULL) +- *h_errnop = TRY_AGAIN; ++ *h_errnop = NETDB_INTERNAL; + *result = NULL; + goto done; + } +@@ -149,7 +154,9 @@ + if (! ok) + { + *h_errnop = HOST_NOT_FOUND; +- if (buffer_size) ++ if (buffer_size == NULL) ++ *status = NSS_STATUS_NOTFOUND; ++ else + *result = NULL; + goto done; + } +@@ -190,7 +197,7 @@ + if (buffer_size == NULL) + *status = NSS_STATUS_SUCCESS; + else +- *result = resbuf; ++ *result = resbuf; + goto done; + } + +@@ -201,15 +208,6 @@ + + if ((isxdigit (name[0]) && strchr (name, ':') != NULL) || name[0] == ':') + { +- const char *cp; +- char *hostname; +- typedef unsigned char host_addr_t[16]; +- host_addr_t *host_addr; +- typedef char *host_addr_list_t[2]; +- host_addr_list_t *h_addr_ptrs; +- size_t size_needed; +- int addr_size; +- + switch (af) + { + default: +@@ -225,7 +223,10 @@ + /* This is not possible. We cannot represent an IPv6 address + in an `struct in_addr' variable. */ + *h_errnop = HOST_NOT_FOUND; +- *result = NULL; ++ if (buffer_size == NULL) ++ *status = NSS_STATUS_NOTFOUND; ++ else ++ *result = NULL; + goto done; + + case AF_INET6: +@@ -233,42 +234,6 @@ + break; + } + +- size_needed = (sizeof (*host_addr) +- + sizeof (*h_addr_ptrs) + strlen (name) + 1); +- +- if (buffer_size == NULL && buflen < size_needed) +- { +- if (h_errnop != NULL) +- *h_errnop = TRY_AGAIN; +- __set_errno (ERANGE); +- goto done; +- } +- else if (buffer_size != NULL && *buffer_size < size_needed) +- { +- char *new_buf; +- *buffer_size = size_needed; +- new_buf = realloc (*buffer, *buffer_size); +- +- if (new_buf == NULL) +- { +- save = errno; +- free (*buffer); +- __set_errno (save); +- *buffer = NULL; +- *buffer_size = 0; +- *result = NULL; +- goto done; +- } +- *buffer = new_buf; +- } +- +- memset (*buffer, '\0', size_needed); +- +- host_addr = (host_addr_t *) *buffer; +- h_addr_ptrs = (host_addr_list_t *) +- ((char *) host_addr + sizeof (*host_addr)); +- hostname = (char *) h_addr_ptrs + sizeof (*h_addr_ptrs); +- + for (cp = name;; ++cp) + { + if (!*cp) +@@ -281,7 +246,9 @@ + if (inet_pton (AF_INET6, name, host_addr) <= 0) + { + *h_errnop = HOST_NOT_FOUND; +- if (buffer_size) ++ if (buffer_size == NULL) ++ *status = NSS_STATUS_NOTFOUND; ++ else + *result = NULL; + goto done; + } +diff -Naur glibc-2.16.0/nss/getXXbyYY_r.c glibc-2.16.0.new/nss/getXXbyYY_r.c +--- glibc-2.16.0/nss/getXXbyYY_r.c 2012-06-30 21:12:34.000000000 +0200 ++++ glibc-2.16.0.new/nss/getXXbyYY_r.c 2015-01-28 13:45:05.482023654 +0100 +@@ -179,6 +179,9 @@ + case -1: + return errno; + case 1: ++#ifdef NEED_H_ERRNO ++ any_service = true; ++#endif + goto done; + } + #endif +diff -Naur glibc-2.16.0/nss/Makefile glibc-2.16.0.new/nss/Makefile +--- glibc-2.16.0/nss/Makefile 2012-06-30 21:12:34.000000000 +0200 ++++ glibc-2.16.0.new/nss/Makefile 2015-01-28 13:52:01.367041544 +0100 +@@ -38,7 +38,7 @@ + makedb-modules = xmalloc hash-string + extra-objs += $(makedb-modules:=.o) + +-tests = test-netdb tst-nss-test1 ++tests = test-netdb tst-nss-test1 test-digits-dots + xtests = bug-erange + + include ../Makeconfig +diff -Naur glibc-2.16.0/nss/test-digits-dots.c glibc-2.16.0.new/nss/test-digits-dots.c +--- glibc-2.16.0/nss/test-digits-dots.c 1970-01-01 01:00:00.000000000 +0100 ++++ glibc-2.16.0.new/nss/test-digits-dots.c 2015-01-28 13:45:05.483023654 +0100 +@@ -0,0 +1,38 @@ ++/* Copyright (C) 2013 Free Software Foundation, Inc. ++ This file is part of the GNU C Library. ++ ++ The GNU C Library is free software; you can redistribute it and/or ++ modify it under the terms of the GNU Lesser General Public ++ License as published by the Free Software Foundation; either ++ version 2.1 of the License, or (at your option) any later version. ++ ++ The GNU C Library is distributed in the hope that it will be useful, ++ but WITHOUT ANY WARRANTY; without even the implied warranty of ++ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU ++ Lesser General Public License for more details. ++ ++ You should have received a copy of the GNU Lesser General Public ++ License along with the GNU C Library; if not, see ++ <http://www.gnu.org/licenses/>. */ ++ ++/* Testcase for BZ #15014 */ ++ ++#include <stdlib.h> ++#include <netdb.h> ++#include <errno.h> ++ ++static int ++do_test (void) ++{ ++ char buf[32]; ++ struct hostent *result = NULL; ++ struct hostent ret; ++ int h_err = 0; ++ int err; ++ ++ err = gethostbyname_r ("1.2.3.4", &ret, buf, sizeof (buf), &result, &h_err); ++ return err == ERANGE && h_err == NETDB_INTERNAL ? EXIT_SUCCESS : EXIT_FAILURE; ++} ++ ++#define TEST_FUNCTION do_test () ++#include "../test-skeleton.c"

1 0

ports/core (3.0): [notify] glibc: fix CVE-2015-0235 ghost vulnerability in 3.0, too
by crux＠crux.nu 04 Feb '15

04 Feb '15

commit 5614803c3ed675c3750cf05ea34a4679871ec01a Author: Thomas Penteker <tek(a)serverop.de> Date: Wed Feb 4 20:27:53 2015 +0100 [notify] glibc: fix CVE-2015-0235 ghost vulnerability in 3.0, too diff --git a/glibc/.md5sum b/glibc/.md5sum index 3ee8978..456cc87 100644 --- a/glibc/.md5sum +++ b/glibc/.md5sum @@ -1,6 +1,7 @@ 3402b18f924954aa68d1d59ed378545f glibc-2.16.0-multilib-dirs.patch 80b181b02ab249524ec92822c0174cf7 glibc-2.16.0.tar.xz 3a51662cd99783b3d01ceac2dca19597 glibc-CVE-2013-4332.patch +1168de0dd6aeca3e85a992e4ffaf53d5 glibc-ghost-CVE-2015-0235.patch d4a2a19efe1e9b59b86fd15a968f7e10 glibc-regexp_buffer_overrun.patch 7e6a5a13c37f93213db9803d9790b7de glibc-resolv_assert.patch 99ed7b88221475d51a073f00d7ee9c42 glibc-segfault_in_strncasecmp.patch diff --git a/glibc/Pkgfile b/glibc/Pkgfile index 0ec459d..768946f 100644 --- a/glibc/Pkgfile +++ b/glibc/Pkgfile @@ -4,7 +4,7 @@ name=glibc version=2.16.0 -release=5 +release=6 source=(http://ftp.gnu.org/gnu/glibc/glibc-$version.tar.xz \ http://crux.nu/files/distfiles/kernel-headers-3.4.11.tar.xz \ $name-$version-multilib-dirs.patch \ @@ -13,6 +13,7 @@ source=(http://ftp.gnu.org/gnu/glibc/glibc-$version.tar.xz \ $name-segfault_in_strncasecmp.patch \ $name-strtod_integer_overflow.patch \ $name-regexp_buffer_overrun.patch \ + $name-ghost-CVE-2015-0235.patch \ $name-CVE-2013-4332.patch) build() { @@ -27,6 +28,7 @@ build() { patch -p1 -d $name-$version -i $SRC/$name-regexp_buffer_overrun.patch patch -p1 -d $name-$version -i $SRC/$name-$version-multilib-dirs.patch patch -p1 -d $name-$version -i $SRC/$name-CVE-2013-4332.patch + patch -p1 -d $name-$version -i $SRC/$name-ghost-CVE-2015-0235.patch mkdir build cd build

1 0

ports/xorg (3.1): xorg-libpciaccess: updated to 0.13.3
by crux＠crux.nu 04 Feb '15

04 Feb '15

commit af04cd0624090ca797ddd19a20b32ac233a77b79 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Feb 4 20:21:47 2015 +0100 xorg-libpciaccess: updated to 0.13.3 diff --git a/xorg-libpciaccess/.md5sum b/xorg-libpciaccess/.md5sum index a92f81e..9385b6a 100644 --- a/xorg-libpciaccess/.md5sum +++ b/xorg-libpciaccess/.md5sum @@ -1 +1 @@ -b7c0d3afce14eedca57312a3141ec13a libpciaccess-0.13.2.tar.bz2 +1f65be5ffc55641c1846c2f41d180d00 libpciaccess-0.13.3.tar.bz2 diff --git a/xorg-libpciaccess/Pkgfile b/xorg-libpciaccess/Pkgfile index 1dae19d..6b83f2f 100644 --- a/xorg-libpciaccess/Pkgfile +++ b/xorg-libpciaccess/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX Xorg Team, xorg-ports at crux dot nu name=xorg-libpciaccess -version=0.13.2 +version=0.13.3 release=1 source=(http://xorg.freedesktop.org/releases/individual/lib/libpciaccess-$v…

1 0

ports/opt (3.1): transmission: fix download URL
by crux＠crux.nu 02 Feb '15

02 Feb '15

commit 9ef9f1cc3fa0d83ef35a9826e9b29c2e4ef50bce Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 2 14:19:44 2015 +0100 transmission: fix download URL diff --git a/transmission-gtk/Pkgfile b/transmission-gtk/Pkgfile index 0a55419..607b36b 100644 --- a/transmission-gtk/Pkgfile +++ b/transmission-gtk/Pkgfile @@ -6,7 +6,7 @@ name=transmission-gtk version=2.84 release=1 -source=(http://download.m0k.org/transmission/files/transmission-$version.tar.xz) +source=(https://transmission.cachefly.net/transmission-$version.tar.xz) build() { cd transmission-$version diff --git a/transmission/Pkgfile b/transmission/Pkgfile index 7635213..420b7b3 100644 --- a/transmission/Pkgfile +++ b/transmission/Pkgfile @@ -6,7 +6,7 @@ name=transmission version=2.84 release=1 -source=(http://download.m0k.org/$name/files/$name-$version.tar.xz) +source=(https://transmission.cachefly.net/$name-$version.tar.xz) build() { cd $name-$version

1 0

ports/opt (3.1): dar: update to 2.4.17
by crux＠crux.nu 02 Feb '15

02 Feb '15

commit b4d54907ca914e863ab72bbcb5b0a5c3d61a9daa Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 2 10:50:19 2015 +0100 dar: update to 2.4.17 diff --git a/dar/.footprint b/dar/.footprint index bedd754..0c40ed5 100644 --- a/dar/.footprint +++ b/dar/.footprint @@ -72,9 +72,9 @@ drwxr-xr-x root/root usr/include/dar/ drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libdar64.a -rwxr-xr-x root/root usr/lib/libdar64.la -lrwxrwxrwx root/root usr/lib/libdar64.so -> libdar64.so.5000.6.3 -lrwxrwxrwx root/root usr/lib/libdar64.so.5000 -> libdar64.so.5000.6.3 --rwxr-xr-x root/root usr/lib/libdar64.so.5000.6.3 +lrwxrwxrwx root/root usr/lib/libdar64.so -> libdar64.so.5000.6.4 +lrwxrwxrwx root/root usr/lib/libdar64.so.5000 -> libdar64.so.5000.6.4 +-rwxr-xr-x root/root usr/lib/libdar64.so.5000.6.4 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libdar64.pc drwxr-xr-x root/root usr/man/ diff --git a/dar/.md5sum b/dar/.md5sum index 0366631..7ded11f 100644 --- a/dar/.md5sum +++ b/dar/.md5sum @@ -1,2 +1,2 @@ -d0f937f7164027d3502f1d8528f6aa04 dar-2.4.16.tar.gz +b8986a75539a901f70854d7068e898af dar-2.4.17.tar.gz f453ca0df13e48ca72095f9ef71529c9 darrc diff --git a/dar/Pkgfile b/dar/Pkgfile index 5a4560d..6e6161d 100644 --- a/dar/Pkgfile +++ b/dar/Pkgfile @@ -1,10 +1,10 @@ # Description: Disk ARchive - a sophisticated backup utility for Linux # URL: http://dar.linux.free.fr/ # Maintainer: Juergen Daubert, jue at crux dot nu -# Depends on: attr, openssl, zlib, bzip2, libgcrypt +# Depends on: attr, lzo, zlib, bzip2, libgcrypt name=dar -version=2.4.16 +version=2.4.17 release=1 source=(http://downloads.sourceforge.net/project/dar/dar/$version/$name-$ve… \ darrc)

1 0

ports/opt (3.1): nfs-utils: update to 1.3.2
by crux＠crux.nu 02 Feb '15

02 Feb '15

commit fdb2fa0311536a9251dad90ee0c9e7b5592b2f3d Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 2 10:49:47 2015 +0100 nfs-utils: update to 1.3.2 diff --git a/nfs-utils/.footprint b/nfs-utils/.footprint index 8e120ec..0236123 100644 --- a/nfs-utils/.footprint +++ b/nfs-utils/.footprint @@ -17,6 +17,7 @@ drwxr-xr-x root/root usr/man/ drwxr-xr-x root/root usr/man/man5/ -rw-r--r-- root/root usr/man/man5/exports.5.gz -rw-r--r-- root/root usr/man/man5/nfs.5.gz +-rw-r--r-- root/root usr/man/man5/nfsmount.conf.5.gz drwxr-xr-x root/root usr/man/man7/ -rw-r--r-- root/root usr/man/man7/nfsd.7.gz drwxr-xr-x root/root usr/man/man8/ diff --git a/nfs-utils/.md5sum b/nfs-utils/.md5sum index 29b3a12..68a042e 100644 --- a/nfs-utils/.md5sum +++ b/nfs-utils/.md5sum @@ -1,5 +1,6 @@ c5ccf58f5f9f57aba75c8b72219eb6e6 exports 167ea3a16eb6f33b3642e920147bb265 idmapd.conf 1477840e1c19e0ac95c538db8b401d90 nfs -97f157f954edb6d4d4385a0c5986f36f nfs-utils-1.3.1.tar.bz2 +1e2f3c1ed468dee02d00c534c002ea10 nfs-utils-1.3.2.tar.bz2 071bb2c4e2104599f0bba55a8ce35f37 nfsserver +b4c745cd305c718157af2f24eef21525 statd_foreground_mode.patch diff --git a/nfs-utils/Pkgfile b/nfs-utils/Pkgfile index 8887014..2de2967 100644 --- a/nfs-utils/Pkgfile +++ b/nfs-utils/Pkgfile @@ -4,14 +4,17 @@ # Depends on: util-linux eudev libcap rpcbind libnfsidmap libevent keyutils sqlite3 name=nfs-utils -version=1.3.1 +version=1.3.2 release=1 source=(http://downloads.sourceforge.net/project/nfs/$name/$version/$name-$… \ - exports idmapd.conf nfs nfsserver) + exports idmapd.conf nfs nfsserver \ + statd_foreground_mode.patch) build () { cd $name-$version + patch -p1 -i $SRC/statd_foreground_mode.patch + ./configure --prefix=/usr \ --mandir=/usr/man \ --sysconfdir=/etc \ diff --git a/nfs-utils/statd_foreground_mode.patch b/nfs-utils/statd_foreground_mode.patch new file mode 100644 index 0000000..d171669 --- /dev/null +++ b/nfs-utils/statd_foreground_mode.patch @@ -0,0 +1,27 @@ +# https://bugzilla.redhat.com/show_bug.cgi?id=1188052 + +commit 17a3e5bffb7110d46de1bf42b64b90713ff5ea50 +Author: Chris Mayo <aklhfex(a)gmail.com> +Date: Sun Feb 1 12:03:46 2015 -0500 + + statd: Fix test for foreground mode + + daemon_init parameter has the opposite sense + to code removed in commit 7addf9d + + Signed-off-by: Chris Mayo <aklhfex(a)gmail.com> + Signed-off-by: Steve Dickson <steved(a)redhat.com> + +diff --git a/utils/statd/statd.c b/utils/statd/statd.c +index 60ce6d1..2b7a167 100644 +--- a/utils/statd/statd.c ++++ b/utils/statd/statd.c +@@ -393,7 +393,7 @@ int main (int argc, char **argv) + simulator (--argc, ++argv); /* simulator() does exit() */ + #endif + +- daemon_init(!(run_mode & MODE_NODAEMON)); ++ daemon_init((run_mode & MODE_NODAEMON)); + + if (run_mode & MODE_LOG_STDERR) { + xlog_syslog(0);

1 0

ports/opt (3.1): mysql: update to 5.6.23
by crux＠crux.nu 02 Feb '15

02 Feb '15

commit 599233c07b5bf6d8582478e33ff6a645a81c975e Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 2 10:50:37 2015 +0100 mysql: update to 5.6.23 diff --git a/mysql/.md5sum b/mysql/.md5sum index aa623ba..4557e09 100644 --- a/mysql/.md5sum +++ b/mysql/.md5sum @@ -1,3 +1,3 @@ 0bf963dec6788c90f82ab7b104b8f427 my.cnf -3985b634294482363f3d87e0d67f2262 mysql-5.6.22.tar.gz +60344f26eae136a267a0277407926e79 mysql-5.6.23.tar.gz 642a596f13ebd7e459c5ff2fd382f06b mysqld diff --git a/mysql/Pkgfile b/mysql/Pkgfile index b8fe3e8..2de6685 100644 --- a/mysql/Pkgfile +++ b/mysql/Pkgfile @@ -4,8 +4,8 @@ # Depends on: tcp_wrappers ncurses zlib openssl cmake libaio name=mysql -version=5.6.22 -release=2 +version=5.6.23 +release=1 source=(http://mirror.switch.ch/mirror/mysql/Downloads/MySQL-5.6/$name-$version.tar.gz \ my.cnf mysqld)

1 0