February 2015 - crux-commits

ports/opt (3.1): pure-ftpd: update to 1.0.37
by crux＠crux.nu 23 Feb '15

23 Feb '15

commit 939b08d21ce87f9f261f5967b21cd40910cbdd42 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 23 14:27:11 2015 +0100 pure-ftpd: update to 1.0.37 diff --git a/pure-ftpd/.md5sum b/pure-ftpd/.md5sum index acae9aa..cc3386e 100644 --- a/pure-ftpd/.md5sum +++ b/pure-ftpd/.md5sum @@ -1,3 +1,3 @@ 0b7a656fc4d50cc638a87668f9079430 pure-ftpd -7899c75c1fed7dbad0352eb31080e066 pure-ftpd-1.0.36.tar.bz2 +8ece9270ead3d1f8db3675c3dfc9d9ad pure-ftpd-1.0.37.tar.bz2 91e56b81f8f77c8b9d81d455817b1892 pure-ftpd.conf diff --git a/pure-ftpd/Pkgfile b/pure-ftpd/Pkgfile index e82b462..b8a8150 100644 --- a/pure-ftpd/Pkgfile +++ b/pure-ftpd/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl name=pure-ftpd -version=1.0.36 +version=1.0.37 release=1 source=(http://download.pureftpd.org/$name/releases/$name-$version.tar.bz2 \ pure-ftpd pure-ftpd.conf)

1 0

ports/opt (3.1): newsbeuter: update to 2.9
by crux＠crux.nu 23 Feb '15

23 Feb '15

commit abc6889635fc3dd2764133942d2bf68be6dde5e6 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 23 14:25:47 2015 +0100 newsbeuter: update to 2.9 diff --git a/newsbeuter/.md5sum b/newsbeuter/.md5sum index d5d75d6..0045d7f 100644 --- a/newsbeuter/.md5sum +++ b/newsbeuter/.md5sum @@ -1 +1 @@ -5d8f1a5eed700beccfeb512ae003613d newsbeuter-2.8.tar.gz +9cf332dc7e591023147bda7add430835 newsbeuter-2.9.tar.gz diff --git a/newsbeuter/Pkgfile b/newsbeuter/Pkgfile index edd548e..deb3e19 100644 --- a/newsbeuter/Pkgfile +++ b/newsbeuter/Pkgfile @@ -4,7 +4,7 @@ # Depends on: curl libxml2 sqlite3 stfl json-c name=newsbeuter -version=2.8 +version=2.9 release=1 source=(http://www.newsbeuter.org/downloads/$name-$version.tar.gz)

1 0

ports/compat-32 (3.1): mesa3d-32: 10.4.4 -> 10.4.5
by crux＠crux.nu 22 Feb '15

22 Feb '15

commit 27affda0a7f8b759ea5faa0b2e131c3b147afd39 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Feb 22 13:06:09 2015 +1100 mesa3d-32: 10.4.4 -> 10.4.5 diff --git a/mesa3d-32/.md5sum b/mesa3d-32/.md5sum index bc4cd64..f7a692c 100644 --- a/mesa3d-32/.md5sum +++ b/mesa3d-32/.md5sum @@ -1 +1 @@ -62faf98ac79c5587f8e917e187419e6c MesaLib-10.4.4.tar.bz2 +fd44bf89d48d1744591d9dbe0ce1d54e MesaLib-10.4.5.tar.bz2 diff --git a/mesa3d-32/Pkgfile b/mesa3d-32/Pkgfile index 15e58d5..4920feb 100644 --- a/mesa3d-32/Pkgfile +++ b/mesa3d-32/Pkgfile @@ -4,7 +4,7 @@ # Depends on: elfutils-32 expat-32 libdrm-32 libvdpau-32 libxml2-python-32 llvm-32 talloc-32 xorg-dri2proto-32 xorg-dri3proto-32 xorg-glproto-32 xorg-libxdamage-32 xorg-libxshmfence-32 xorg-libxt-32 xorg-libxvmc-32 xorg-libxxf86vm-32 eudev-32 mesa3d xorg-presentproto-32 name=mesa3d-32 -version=10.4.4 +version=10.4.5 release=1 source=(ftp://ftp.freedesktop.org/pub/mesa/$version/MesaLib-$version.tar.bz…

1 0

ports/compat-32 (3.1): gtk-32: 2.24.24 -> 2.24.26
by crux＠crux.nu 22 Feb '15

22 Feb '15

commit 9bbefb8d159231e632aef300e8d6cc89ca439ff4 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Feb 22 13:35:26 2015 +1100 gtk-32: 2.24.24 -> 2.24.26 diff --git a/gtk-32/.footprint b/gtk-32/.footprint index 90a832f..b6b0e87 100644 --- a/gtk-32/.footprint +++ b/gtk-32/.footprint @@ -47,13 +47,13 @@ lrwxrwxrwx root/root usr/lib32/libgailutil.so -> libgailutil.so.18.0.1 lrwxrwxrwx root/root usr/lib32/libgailutil.so.18 -> libgailutil.so.18.0.1 -rwxr-xr-x root/root usr/lib32/libgailutil.so.18.0.1 -rw-r--r-- root/root usr/lib32/libgdk-x11-2.0.la -lrwxrwxrwx root/root usr/lib32/libgdk-x11-2.0.so -> libgdk-x11-2.0.so.0.2400.24 -lrwxrwxrwx root/root usr/lib32/libgdk-x11-2.0.so.0 -> libgdk-x11-2.0.so.0.2400.24 --rwxr-xr-x root/root usr/lib32/libgdk-x11-2.0.so.0.2400.24 +lrwxrwxrwx root/root usr/lib32/libgdk-x11-2.0.so -> libgdk-x11-2.0.so.0.2400.26 +lrwxrwxrwx root/root usr/lib32/libgdk-x11-2.0.so.0 -> libgdk-x11-2.0.so.0.2400.26 +-rwxr-xr-x root/root usr/lib32/libgdk-x11-2.0.so.0.2400.26 -rw-r--r-- root/root usr/lib32/libgtk-x11-2.0.la -lrwxrwxrwx root/root usr/lib32/libgtk-x11-2.0.so -> libgtk-x11-2.0.so.0.2400.24 -lrwxrwxrwx root/root usr/lib32/libgtk-x11-2.0.so.0 -> libgtk-x11-2.0.so.0.2400.24 --rwxr-xr-x root/root usr/lib32/libgtk-x11-2.0.so.0.2400.24 +lrwxrwxrwx root/root usr/lib32/libgtk-x11-2.0.so -> libgtk-x11-2.0.so.0.2400.26 +lrwxrwxrwx root/root usr/lib32/libgtk-x11-2.0.so.0 -> libgtk-x11-2.0.so.0.2400.26 +-rwxr-xr-x root/root usr/lib32/libgtk-x11-2.0.so.0.2400.26 drwxr-xr-x root/root usr/lib32/pkgconfig/ -rw-r--r-- root/root usr/lib32/pkgconfig/gail.pc -rw-r--r-- root/root usr/lib32/pkgconfig/gdk-2.0.pc diff --git a/gtk-32/.md5sum b/gtk-32/.md5sum index 3f4cd8e..18d9324 100644 --- a/gtk-32/.md5sum +++ b/gtk-32/.md5sum @@ -1 +1 @@ -f80ac8aa95ea8482ad89656d0370752e gtk+-2.24.24.tar.xz +4610cc60ff96073b83dc7de254bdaf38 gtk+-2.24.26.tar.xz diff --git a/gtk-32/Pkgfile b/gtk-32/Pkgfile index 4572ae2..55ed009 100644 --- a/gtk-32/Pkgfile +++ b/gtk-32/Pkgfile @@ -4,7 +4,7 @@ # Depends on: atk-32 gdk-pixbuf-32 pango-32 xorg-libsm-32 xorg-libxcursor-32 xorg-libxinerama-32 xorg-libxrandr-32 xorg-libxcomposite-32 gtk name=gtk-32 -version=2.24.24 +version=2.24.26 release=1 source=(http://download.gnome.org/sources/gtk+/${version%.*}/gtk+-$version.…

1 0

ports/compat-32 (3.1): util-linux-32: 2.25.2 -> 2.26
by crux＠crux.nu 22 Feb '15

22 Feb '15

commit 20c3a1489b07fe2d844d32daa6e74c413d9872ed Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Feb 22 13:05:31 2015 +1100 util-linux-32: 2.25.2 -> 2.26 diff --git a/util-linux-32/.footprint b/util-linux-32/.footprint index 74b9de1..c7ef2da 100644 --- a/util-linux-32/.footprint +++ b/util-linux-32/.footprint @@ -5,6 +5,11 @@ drwxr-xr-x root/root usr/lib32/ lrwxrwxrwx root/root usr/lib32/libblkid.so -> libblkid.so.1.1.0 lrwxrwxrwx root/root usr/lib32/libblkid.so.1 -> libblkid.so.1.1.0 -rwxr-xr-x root/root usr/lib32/libblkid.so.1.1.0 +-rw-r--r-- root/root usr/lib32/libfdisk.a +-rwxr-xr-x root/root usr/lib32/libfdisk.la +lrwxrwxrwx root/root usr/lib32/libfdisk.so -> libfdisk.so.1.1.0 +lrwxrwxrwx root/root usr/lib32/libfdisk.so.1 -> libfdisk.so.1.1.0 +-rwxr-xr-x root/root usr/lib32/libfdisk.so.1.1.0 -rw-r--r-- root/root usr/lib32/libmount.a -rwxr-xr-x root/root usr/lib32/libmount.la lrwxrwxrwx root/root usr/lib32/libmount.so -> libmount.so.1.1.0 @@ -22,6 +27,7 @@ lrwxrwxrwx root/root usr/lib32/libuuid.so.1 -> libuuid.so.1.3.0 -rwxr-xr-x root/root usr/lib32/libuuid.so.1.3.0 drwxr-xr-x root/root usr/lib32/pkgconfig/ -rw-r--r-- root/root usr/lib32/pkgconfig/blkid.pc +-rw-r--r-- root/root usr/lib32/pkgconfig/fdisk.pc -rw-r--r-- root/root usr/lib32/pkgconfig/mount.pc -rw-r--r-- root/root usr/lib32/pkgconfig/smartcols.pc -rw-r--r-- root/root usr/lib32/pkgconfig/uuid.pc diff --git a/util-linux-32/.md5sum b/util-linux-32/.md5sum index 6c95b4d..79b1640 100644 --- a/util-linux-32/.md5sum +++ b/util-linux-32/.md5sum @@ -1 +1 @@ -cab3d7be354000f629bc601238b629b3 util-linux-2.25.2.tar.xz +912c550a4e5c47c0ce9abd0733fa9a64 util-linux-2.26.tar.xz diff --git a/util-linux-32/Pkgfile b/util-linux-32/Pkgfile index 94266f1..eb3bcd8 100644 --- a/util-linux-32/Pkgfile +++ b/util-linux-32/Pkgfile @@ -4,7 +4,7 @@ # Depends on: ncurses-32 name=util-linux-32 -version=2.25.2 +version=2.26 release=1 source=(http://www.kernel.org/pub/linux/utils/util-linux/v${version:0:4}/ut…

1 0

ports/opt (3.1): wine: 1.7.36 -> 1.7.37
by crux＠crux.nu 22 Feb '15

22 Feb '15

commit e29f119c04ae40646a6673684a82104f19d1b7f5 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Feb 22 12:25:43 2015 +1100 wine: 1.7.36 -> 1.7.37 diff --git a/wine/.footprint b/wine/.footprint index c0b00a1..32d99c5 100644 --- a/wine/.footprint +++ b/wine/.footprint @@ -469,6 +469,7 @@ drwxr-xr-x root/root usr/include/wine/windows/ddk/ -rw-r--r-- root/root usr/include/wine/windows/msacm.h -rw-r--r-- root/root usr/include/wine/windows/msacmdlg.h -rw-r--r-- root/root usr/include/wine/windows/msacmdrv.h +-rw-r--r-- root/root usr/include/wine/windows/msasn1.h -rw-r--r-- root/root usr/include/wine/windows/mscat.h -rw-r--r-- root/root usr/include/wine/windows/mscoree.h -rw-r--r-- root/root usr/include/wine/windows/mscoree.idl @@ -921,6 +922,7 @@ drwxr-xr-x root/root usr/lib/wine/ -rwxr-xr-x root/root usr/lib/wine/compstui.dll.so -rwxr-xr-x root/root usr/lib/wine/comsvcs.dll.so -rwxr-xr-x root/root usr/lib/wine/conhost.exe.so +-rwxr-xr-x root/root usr/lib/wine/connect.dll.so -rwxr-xr-x root/root usr/lib/wine/control.exe.so -rwxr-xr-x root/root usr/lib/wine/credui.dll.so -rwxr-xr-x root/root usr/lib/wine/crtdll.dll.so @@ -1138,6 +1140,7 @@ drwxr-xr-x root/root usr/lib/wine/fakedlls/ -rw-r--r-- root/root usr/lib/wine/fakedlls/compstui.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/comsvcs.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/conhost.exe +-rw-r--r-- root/root usr/lib/wine/fakedlls/connect.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/control.exe -rw-r--r-- root/root usr/lib/wine/fakedlls/credui.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/crtdll.dll @@ -1309,6 +1312,7 @@ drwxr-xr-x root/root usr/lib/wine/fakedlls/ -rw-r--r-- root/root usr/lib/wine/fakedlls/mciqtz32.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/mciseq.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/mciwave.dll +-rw-r--r-- root/root usr/lib/wine/fakedlls/mf.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/mfplat.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/mfreadwrite.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/mgmtapi.dll @@ -1579,8 +1583,12 @@ drwxr-xr-x root/root usr/lib/wine/fakedlls/ -rw-r--r-- root/root usr/lib/wine/fakedlls/wuapi.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/wuaueng.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/wusa.exe +-rw-r--r-- root/root usr/lib/wine/fakedlls/x3daudio1_1.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/x3daudio1_7.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/xapofx1_1.dll +-rw-r--r-- root/root usr/lib/wine/fakedlls/xapofx1_3.dll +-rw-r--r-- root/root usr/lib/wine/fakedlls/xapofx1_4.dll +-rw-r--r-- root/root usr/lib/wine/fakedlls/xapofx1_5.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/xaudio2_7.dll -rw-r--r-- root/root usr/lib/wine/fakedlls/xcopy.exe -rw-r--r-- root/root usr/lib/wine/fakedlls/xinput1_1.dll @@ -1827,6 +1835,7 @@ drwxr-xr-x root/root usr/lib/wine/fakedlls/ -rwxr-xr-x root/root usr/lib/wine/mciqtz32.dll.so -rwxr-xr-x root/root usr/lib/wine/mciseq.dll.so -rwxr-xr-x root/root usr/lib/wine/mciwave.dll.so +-rwxr-xr-x root/root usr/lib/wine/mf.dll.so -rwxr-xr-x root/root usr/lib/wine/mfplat.dll.so -rwxr-xr-x root/root usr/lib/wine/mfreadwrite.dll.so -rwxr-xr-x root/root usr/lib/wine/mgmtapi.dll.so @@ -2097,8 +2106,12 @@ drwxr-xr-x root/root usr/lib/wine/fakedlls/ -rwxr-xr-x root/root usr/lib/wine/wuapi.dll.so -rwxr-xr-x root/root usr/lib/wine/wuaueng.dll.so -rwxr-xr-x root/root usr/lib/wine/wusa.exe.so +-rwxr-xr-x root/root usr/lib/wine/x3daudio1_1.dll.so -rwxr-xr-x root/root usr/lib/wine/x3daudio1_7.dll.so -rwxr-xr-x root/root usr/lib/wine/xapofx1_1.dll.so +-rwxr-xr-x root/root usr/lib/wine/xapofx1_3.dll.so +-rwxr-xr-x root/root usr/lib/wine/xapofx1_4.dll.so +-rwxr-xr-x root/root usr/lib/wine/xapofx1_5.dll.so -rwxr-xr-x root/root usr/lib/wine/xaudio2_7.dll.so -rwxr-xr-x root/root usr/lib/wine/xcopy.exe.so -rwxr-xr-x root/root usr/lib/wine/xinput1_1.dll.so @@ -2222,6 +2235,7 @@ drwxr-xr-x root/root usr/lib32/wine/ -rwxr-xr-x root/root usr/lib32/wine/compstui.dll.so -rwxr-xr-x root/root usr/lib32/wine/comsvcs.dll.so -rwxr-xr-x root/root usr/lib32/wine/conhost.exe.so +-rwxr-xr-x root/root usr/lib32/wine/connect.dll.so -rwxr-xr-x root/root usr/lib32/wine/control.exe.so -rwxr-xr-x root/root usr/lib32/wine/credui.dll.so -rwxr-xr-x root/root usr/lib32/wine/crtdll.dll.so @@ -2448,6 +2462,7 @@ drwxr-xr-x root/root usr/lib32/wine/fakedlls/ -rw-r--r-- root/root usr/lib32/wine/fakedlls/compstui.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/comsvcs.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/conhost.exe +-rw-r--r-- root/root usr/lib32/wine/fakedlls/connect.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/control.exe -rw-r--r-- root/root usr/lib32/wine/fakedlls/credui.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/crtdll.dll @@ -2630,6 +2645,7 @@ drwxr-xr-x root/root usr/lib32/wine/fakedlls/ -rw-r--r-- root/root usr/lib32/wine/fakedlls/mciqtz32.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/mciseq.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/mciwave.dll +-rw-r--r-- root/root usr/lib32/wine/fakedlls/mf.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/mfplat.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/mfreadwrite.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/mgmtapi.dll @@ -2948,8 +2964,12 @@ drwxr-xr-x root/root usr/lib32/wine/fakedlls/ -rw-r--r-- root/root usr/lib32/wine/fakedlls/wuapi.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/wuaueng.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/wusa.exe +-rw-r--r-- root/root usr/lib32/wine/fakedlls/x3daudio1_1.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/x3daudio1_7.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/xapofx1_1.dll +-rw-r--r-- root/root usr/lib32/wine/fakedlls/xapofx1_3.dll +-rw-r--r-- root/root usr/lib32/wine/fakedlls/xapofx1_4.dll +-rw-r--r-- root/root usr/lib32/wine/fakedlls/xapofx1_5.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/xaudio2_7.dll -rw-r--r-- root/root usr/lib32/wine/fakedlls/xcopy.exe -rw-r--r-- root/root usr/lib32/wine/fakedlls/xinput1_1.dll @@ -3204,6 +3224,7 @@ drwxr-xr-x root/root usr/lib32/wine/fakedlls/ -rwxr-xr-x root/root usr/lib32/wine/mciqtz32.dll.so -rwxr-xr-x root/root usr/lib32/wine/mciseq.dll.so -rwxr-xr-x root/root usr/lib32/wine/mciwave.dll.so +-rwxr-xr-x root/root usr/lib32/wine/mf.dll.so -rwxr-xr-x root/root usr/lib32/wine/mfplat.dll.so -rwxr-xr-x root/root usr/lib32/wine/mfreadwrite.dll.so -rwxr-xr-x root/root usr/lib32/wine/mgmtapi.dll.so @@ -3522,8 +3543,12 @@ drwxr-xr-x root/root usr/lib32/wine/fakedlls/ -rwxr-xr-x root/root usr/lib32/wine/wuapi.dll.so -rwxr-xr-x root/root usr/lib32/wine/wuaueng.dll.so -rwxr-xr-x root/root usr/lib32/wine/wusa.exe.so +-rwxr-xr-x root/root usr/lib32/wine/x3daudio1_1.dll.so -rwxr-xr-x root/root usr/lib32/wine/x3daudio1_7.dll.so -rwxr-xr-x root/root usr/lib32/wine/xapofx1_1.dll.so +-rwxr-xr-x root/root usr/lib32/wine/xapofx1_3.dll.so +-rwxr-xr-x root/root usr/lib32/wine/xapofx1_4.dll.so +-rwxr-xr-x root/root usr/lib32/wine/xapofx1_5.dll.so -rwxr-xr-x root/root usr/lib32/wine/xaudio2_7.dll.so -rwxr-xr-x root/root usr/lib32/wine/xcopy.exe.so -rwxr-xr-x root/root usr/lib32/wine/xinput1_1.dll.so diff --git a/wine/.md5sum b/wine/.md5sum index cde1521..da164bd 100644 --- a/wine/.md5sum +++ b/wine/.md5sum @@ -1,4 +1,4 @@ -3660517d7c87846f76f8bf40b92a6121 wine-1.7.36.tar.bz2 +99741c9efece0bf062b39992b63cf5ca wine-1.7.37.tar.bz2 2d12a9475e2986177dc38572592bd94d wine-mono-4.5.4.msi 54bd9d6b4fdcd556d89b4ef83c31ac8c wine_gecko-2.34-x86.msi 2b658806733be574309c418f6c0d4cba wine_gecko-2.34-x86_64.msi diff --git a/wine/Pkgfile b/wine/Pkgfile index 9b7c46d..2e58887 100644 --- a/wine/Pkgfile +++ b/wine/Pkgfile @@ -5,7 +5,7 @@ # Depends on: fontconfig-32 freeglut-32 xorg-libxcomposite-32 xorg-libxcursor-32 xorg-libxinerama-32 xorg-libxrandr-32 xorg-libxxf86dga-32 alsa-lib-32 libpng-32 libjpeg-turbo-32 prelink gnutls-32 name=wine -version=1.7.36 +version=1.7.37 release=1 source=(http://downloads.sourceforge.net/wine/$name-$version.tar.bz2 http://downloads.sourceforge.net/wine/wine_gecko-2.34-x86.msi diff --git a/wine/libwine-install.patch b/wine/libwine-install.patch deleted file mode 100644 index 990e7e7..0000000 --- a/wine/libwine-install.patch +++ /dev/null @@ -1,35 +0,0 @@ -@@ -, +, @@ - configure: Add explicit install targets in libs/wine for make_makefiles. ---- a/configure -+++ a/configure -@@ -16379,7 +16379,7 @@ wine_fn_config_makefile documentation enable_documentation - wine_fn_config_makefile fonts enable_fonts install-lib - wine_fn_config_makefile include enable_include install-dev - wine_fn_config_makefile libs/port enable_libs_port --wine_fn_config_makefile libs/wine enable_libs_wine -+wine_fn_config_makefile libs/wine enable_libs_wine install-dev,install-lib - wine_fn_config_makefile libs/wpp enable_libs_wpp - wine_fn_config_makefile loader enable_loader install-lib,manpage - wine_fn_config_program aspnet_regiis enable_aspnet_regiis install ---- a/configure.ac -+++ a/configure.ac -@@ -3173,7 +3173,7 @@ WINE_CONFIG_MAKEFILE([documentation]) - WINE_CONFIG_MAKEFILE([fonts],,[install-lib]) - WINE_CONFIG_MAKEFILE([include],,[install-dev]) - WINE_CONFIG_MAKEFILE([libs/port]) --WINE_CONFIG_MAKEFILE([libs/wine]) -+WINE_CONFIG_MAKEFILE([libs/wine],,[install-dev,install-lib]) - WINE_CONFIG_MAKEFILE([libs/wpp]) - WINE_CONFIG_MAKEFILE([loader],,[install-lib,manpage]) - WINE_CONFIG_PROGRAM(aspnet_regiis,,[install]) ---- a/libs/wine/Makefile.in -+++ a/libs/wine/Makefile.in -@@ -111,4 +111,8 @@ version.c: dummy - $(RELPATH): - @cd $(TOOLSDIR)/tools && $(MAKE) relpath$(TOOLSEXT) - -+# Make sure that make_makefiles sees the install rules -+install install-lib:: -+install install-dev:: -+ - @LIBWINE_RULES@

1 0

ports/contrib (3.1): xscreensaver: removed dependency netpbm, it's not being used anymore and is not linked to netpbm so a rebuild is not necessary
by crux＠crux.nu 22 Feb '15

22 Feb '15

commit d695ab8fc53d6f702bd53675cb893d4adcafdf4e Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Feb 22 11:11:15 2015 +1100 xscreensaver: removed dependency netpbm, it's not being used anymore and is not linked to netpbm so a rebuild is not necessary diff --git a/xscreensaver/Pkgfile b/xscreensaver/Pkgfile index 44806a0..c8cefb4 100644 --- a/xscreensaver/Pkgfile +++ b/xscreensaver/Pkgfile @@ -2,7 +2,7 @@ # URL: http://www.jwz.org/xscreensaver/ # Maintainer: Danny Rawlins, crux at romster dot me # Packager: Jay Dolan, jdolan at jdolan dot dyndns dot org -# Depends on: bc fortune libglade giflib intltool netpbm xorg-libxmu glu +# Depends on: bc fortune giflib glu intltool libglade util-linux xorg-libxmu name=xscreensaver version=5.32

1 0

ports/xorg (3.1): mesa3d: updated to 10.4.5
by crux＠crux.nu 21 Feb '15

21 Feb '15

commit 0d0caf5d5cb2d92247811a3561e53fba74a7299a Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Sun Feb 22 00:21:10 2015 +0100 mesa3d: updated to 10.4.5 diff --git a/mesa3d/.md5sum b/mesa3d/.md5sum index bc4cd64..f7a692c 100644 --- a/mesa3d/.md5sum +++ b/mesa3d/.md5sum @@ -1 +1 @@ -62faf98ac79c5587f8e917e187419e6c MesaLib-10.4.4.tar.bz2 +fd44bf89d48d1744591d9dbe0ce1d54e MesaLib-10.4.5.tar.bz2 diff --git a/mesa3d/Pkgfile b/mesa3d/Pkgfile index 45cf6b7..bc520e3 100644 --- a/mesa3d/Pkgfile +++ b/mesa3d/Pkgfile @@ -4,7 +4,7 @@ # Depends on: elfutils expat libdrm libvdpau libxml2-python llvm talloc xorg-dri2proto xorg-dri3proto xorg-glproto xorg-libxdamage xorg-libxshmfence xorg-libxt xorg-libxvmc xorg-libxxf86vm xorg-makedepend xorg-presentproto name=mesa3d -version=10.4.4 +version=10.4.5 release=1 source=(ftp://ftp.freedesktop.org/pub/mesa/$version/MesaLib-$version.tar.bz…

1 0

ports/core (3.1): man-pages: updated to 3.80
by crux＠crux.nu 21 Feb '15

21 Feb '15

commit 38fb30008c1b0a4f0c5ddafc4d316665910162d7 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Sun Feb 22 00:06:24 2015 +0100 man-pages: updated to 3.80 diff --git a/man-pages/.footprint b/man-pages/.footprint index fe61be9..6141ad5 100644 --- a/man-pages/.footprint +++ b/man-pages/.footprint @@ -436,6 +436,7 @@ drwxr-xr-x root/root usr/man/man2/ -rw-r--r-- root/root usr/man/man2/io_setup.2.gz -rw-r--r-- root/root usr/man/man2/io_submit.2.gz -rw-r--r-- root/root usr/man/man2/ioctl.2.gz +-rw-r--r-- root/root usr/man/man2/ioctl_fat.2.gz -rw-r--r-- root/root usr/man/man2/ioctl_list.2.gz -rw-r--r-- root/root usr/man/man2/ioperm.2.gz -rw-r--r-- root/root usr/man/man2/iopl.2.gz diff --git a/man-pages/.md5sum b/man-pages/.md5sum index 9088ad3..6402a60 100644 --- a/man-pages/.md5sum +++ b/man-pages/.md5sum @@ -1,2 +1,2 @@ -938950106f4483383dd367fe9e8aab9f man-pages-3.79.tar.xz +d06a8440349a2c2450ea59412fa653f8 man-pages-3.80.tar.xz 825fde78e6fddd02426ecdd50e2cbe0d man-pages-posix-2013-a.tar.xz diff --git a/man-pages/Pkgfile b/man-pages/Pkgfile index f34b386..1247146 100644 --- a/man-pages/Pkgfile +++ b/man-pages/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=man-pages -version=3.79 +version=3.80 release=1 source=(http://www.kernel.org/pub/linux/docs/$name/$name-$version.tar.xz \ http://www.kernel.org/pub/linux/docs/$name/$name-posix/$name-posix-2013-a.t…)

1 0

ports/core (3.1): [notify] glibc: added patches for CVE-2012-3406, CVE-2014-7817, CVE-2014-9402 and CVE-2015-1472
by crux＠crux.nu 21 Feb '15

21 Feb '15

commit 82ff7b38d97f65850e247f0239f4732f01edb7b6 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Sat Feb 21 17:11:07 2015 +0100 [notify] glibc: added patches for CVE-2012-3406, CVE-2014-7817, CVE-2014-9402 and CVE-2015-1472 diff --git a/glibc/.md5sum b/glibc/.md5sum index fedcfaa..471c4d1 100644 --- a/glibc/.md5sum +++ b/glibc/.md5sum @@ -1,4 +1,8 @@ +c241d3240d0d98af4f1b948cd940dbd8 CVE-2012-3406-Stack-overflow-in-vfprintf-BZ-16617.patch 1d06c7a6084db7710bec7215143c5799 CVE-2014-0475.patch +59f56ab2c3b3334074c07dec6c217301 CVE-2014-7817-wordexp-fails-to-honour-WRDE_NOCMD.patch +27ae57547600f9c6a9a897aa6f4e5555 CVE-2014-9402-Avoid-infinite-loop-in-nss_dns-getnetbyname.patch +b2a77e95e8694f37415f86e8bc0a1fe5 CVE-2015-1472-wscanf-allocates-too-little-memory.patch a568134a222776d8fc23059dfb25d835 glibc-2.19-multilib-dirs.patch e26b8cc666b162f999404b03970f14e4 glibc-2.19.tar.xz 96156bec8e05de67384dc93e72bdc313 host.conf diff --git a/glibc/CVE-2012-3406-Stack-overflow-in-vfprintf-BZ-16617.patch b/glibc/CVE-2012-3406-Stack-overflow-in-vfprintf-BZ-16617.patch new file mode 100644 index 0000000..6b40c96 --- /dev/null +++ b/glibc/CVE-2012-3406-Stack-overflow-in-vfprintf-BZ-16617.patch @@ -0,0 +1,274 @@ +From 6143805bb45e716829d86851e9372f55a136064b Mon Sep 17 00:00:00 2001 +From: Jeff Law <law(a)redhat.com> +Date: Mon, 15 Dec 2014 10:09:32 +0100 +Subject: [PATCH 35/37] CVE-2012-3406: Stack overflow in vfprintf [BZ #16617] + +A larger number of format specifiers coudld cause a stack overflow, +potentially allowing to bypass _FORTIFY_SOURCE format string +protection. + +Conflicts: + ChangeLog + NEWS +--- + ChangeLog | 13 +++++++++ + NEWS | 57 ++++++++++++++++++++++++++++++++++++++++ + stdio-common/Makefile | 2 +- + stdio-common/bug23-2.c | 70 +++++++++++++++++++++++++++++++++++++++++++++++++ + stdio-common/bug23-3.c | 50 +++++++++++++++++++++++++++++++++++ + stdio-common/bug23-4.c | 31 ++++++++++++++++++++++ + stdio-common/vfprintf.c | 40 ++++++++++++++++++++++++++-- + 7 files changed, 260 insertions(+), 3 deletions(-) + create mode 100644 stdio-common/bug23-2.c + create mode 100644 stdio-common/bug23-3.c + create mode 100644 stdio-common/bug23-4.c + +diff --git a/stdio-common/bug23-2.c b/stdio-common/bug23-2.c +new file mode 100644 +index 0000000..9e0cfe6 +--- /dev/null ++++ b/stdio-common/bug23-2.c +@@ -0,0 +1,70 @@ ++#include <stdio.h> ++#include <string.h> ++#include <stdlib.h> ++ ++static const char expected[] = "\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55\ ++\n\ ++a\n\ ++abbcd55%%%%%%%%%%%%%%%%%%%%%%%%%%\n"; ++ ++static int ++do_test (void) ++{ ++ char *buf = malloc (strlen (expected) + 1); ++ snprintf (buf, strlen (expected) + 1, ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ "%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%\n", ++ "a", "b", "c", "d", 5); ++ return strcmp (buf, expected) != 0; ++} ++ ++#define TEST_FUNCTION do_test () ++#include "../test-skeleton.c" +diff --git a/stdio-common/bug23-3.c b/stdio-common/bug23-3.c +new file mode 100644 +index 0000000..57c8cef +--- /dev/null ++++ b/stdio-common/bug23-3.c +@@ -0,0 +1,50 @@ ++#include <stdio.h> ++#include <string.h> ++#include <stdlib.h> ++ ++int ++do_test (void) ++{ ++ size_t instances = 16384; ++#define X0 "\n%1$s\n" "%1$s" "%2$s" "%2$s" "%3$s" "%4$s" "%5$d" "%5$d" ++ const char *item = "\na\nabbcd55"; ++#define X3 X0 X0 X0 X0 X0 X0 X0 X0 ++#define X6 X3 X3 X3 X3 X3 X3 X3 X3 ++#define X9 X6 X6 X6 X6 X6 X6 X6 X6 ++#define X12 X9 X9 X9 X9 X9 X9 X9 X9 ++#define X14 X12 X12 X12 X12 ++#define TRAILER "%%%%%%%%%%%%%%%%%%%%%%%%%%" ++#define TRAILER2 TRAILER TRAILER ++ size_t length = instances * strlen (item) + strlen (TRAILER) + 1; ++ ++ char *buf = malloc (length + 1); ++ snprintf (buf, length + 1, ++ X14 TRAILER2 "\n", ++ "a", "b", "c", "d", 5); ++ ++ const char *p = buf; ++ size_t i; ++ for (i = 0; i < instances; ++i) ++ { ++ const char *expected; ++ for (expected = item; *expected; ++expected) ++ { ++ if (*p != *expected) ++ { ++ printf ("mismatch at offset %zu (%zu): expected %d, got %d\n", ++ (size_t) (p - buf), i, *expected & 0xFF, *p & 0xFF); ++ return 1; ++ } ++ ++p; ++ } ++ } ++ if (strcmp (p, TRAILER "\n") != 0) ++ { ++ printf ("mismatch at trailer: [%s]\n", p); ++ return 1; ++ } ++ free (buf); ++ return 0; ++} ++#define TEST_FUNCTION do_test () ++#include "../test-skeleton.c" +diff --git a/stdio-common/bug23-4.c b/stdio-common/bug23-4.c +new file mode 100644 +index 0000000..a478564 +--- /dev/null ++++ b/stdio-common/bug23-4.c +@@ -0,0 +1,31 @@ ++#include <stdio.h> ++#include <stdlib.h> ++#include <string.h> ++#include <sys/resource.h> ++ ++#define LIMIT 1000000 ++ ++int ++main (void) ++{ ++ struct rlimit lim; ++ getrlimit (RLIMIT_STACK, &lim); ++ lim.rlim_cur = 1048576; ++ setrlimit (RLIMIT_STACK, &lim); ++ char *fmtstr = malloc (4 * LIMIT + 1); ++ if (fmtstr == NULL) ++ abort (); ++ char *output = malloc (LIMIT + 1); ++ if (output == NULL) ++ abort (); ++ for (size_t i = 0; i < LIMIT; i++) ++ memcpy (fmtstr + 4 * i, "%1$d", 4); ++ fmtstr[4 * LIMIT] = '\0'; ++ int ret = snprintf (output, LIMIT + 1, fmtstr, 0); ++ if (ret != LIMIT) ++ abort (); ++ for (size_t i = 0; i < LIMIT; i++) ++ if (output[i] != '0') ++ abort (); ++ return 0; ++} +diff --git a/stdio-common/vfprintf.c b/stdio-common/vfprintf.c +index f7e5f61..f423be6 100644 +--- a/stdio-common/vfprintf.c ++++ b/stdio-common/vfprintf.c +@@ -263,6 +263,12 @@ vfprintf (FILE *s, const CHAR_T *format, va_list ap) + /* For the argument descriptions, which may be allocated on the heap. */ + void *args_malloced = NULL; + ++ /* For positional argument handling. */ ++ struct printf_spec *specs; ++ ++ /* Track if we malloced the SPECS array and thus must free it. */ ++ bool specs_malloced = false; ++ + /* This table maps a character into a number representing a + class. In each step there is a destination label for each + class. */ +@@ -1678,8 +1684,8 @@ do_positional: + size_t nspecs = 0; + /* A more or less arbitrary start value. */ + size_t nspecs_size = 32 * sizeof (struct printf_spec); +- struct printf_spec *specs = alloca (nspecs_size); + ++ specs = alloca (nspecs_size); + /* The number of arguments the format string requests. This will + determine the size of the array needed to store the argument + attributes. */ +@@ -1720,11 +1726,39 @@ do_positional: + if (nspecs * sizeof (*specs) >= nspecs_size) + { + /* Extend the array of format specifiers. */ ++ if (nspecs_size * 2 < nspecs_size) ++ { ++ __set_errno (ENOMEM); ++ done = -1; ++ goto all_done; ++ } + struct printf_spec *old = specs; +- specs = extend_alloca (specs, nspecs_size, 2 * nspecs_size); ++ if (__libc_use_alloca (2 * nspecs_size)) ++ specs = extend_alloca (specs, nspecs_size, 2 * nspecs_size); ++ else ++ { ++ nspecs_size *= 2; ++ specs = malloc (nspecs_size); ++ if (specs == NULL) ++ { ++ __set_errno (ENOMEM); ++ specs = old; ++ done = -1; ++ goto all_done; ++ } ++ } + + /* Copy the old array's elements to the new space. */ + memmove (specs, old, nspecs * sizeof (*specs)); ++ ++ /* If we had previously malloc'd space for SPECS, then ++ release it after the copy is complete. */ ++ if (specs_malloced) ++ free (old); ++ ++ /* Now set SPECS_MALLOCED if needed. */ ++ if (!__libc_use_alloca (nspecs_size)) ++ specs_malloced = true; + } + + /* Parse the format specifier. */ +@@ -2045,6 +2079,8 @@ do_positional: + } + + all_done: ++ if (specs_malloced) ++ free (specs); + if (__glibc_unlikely (args_malloced != NULL)) + free (args_malloced); + if (__glibc_unlikely (workstart != NULL)) +-- +2.2.1 + diff --git a/glibc/CVE-2014-7817-wordexp-fails-to-honour-WRDE_NOCMD.patch b/glibc/CVE-2014-7817-wordexp-fails-to-honour-WRDE_NOCMD.patch new file mode 100644 index 0000000..8e4a32f --- /dev/null +++ b/glibc/CVE-2014-7817-wordexp-fails-to-honour-WRDE_NOCMD.patch @@ -0,0 +1,174 @@ +From b9b6e3f01655942891bf4c66a2c5e8246cdad7e1 Mon Sep 17 00:00:00 2001 +From: Carlos O'Donell <carlos(a)redhat.com> +Date: Wed, 19 Nov 2014 11:44:12 -0500 +Subject: [PATCH 1/2] CVE-2014-7817: wordexp fails to honour WRDE_NOCMD. + +The function wordexp() fails to properly handle the WRDE_NOCMD +flag when processing arithmetic inputs in the form of "$((... ``))" +where "..." can be anything valid. The backticks in the arithmetic +epxression are evaluated by in a shell even if WRDE_NOCMD forbade +command substitution. This allows an attacker to attempt to pass +dangerous commands via constructs of the above form, and bypass +the WRDE_NOCMD flag. This patch fixes this by checking for WRDE_NOCMD +in exec_comm(), the only place that can execute a shell. All other +checks for WRDE_NOCMD are superfluous and removed. + +We expand the testsuite and add 3 new regression tests of roughly +the same form but with a couple of nested levels. + +On top of the 3 new tests we add fork validation to the WRDE_NOCMD +testing. If any forks are detected during the execution of a wordexp() +call with WRDE_NOCMD, the test is marked as failed. This is slightly +heuristic since vfork might be used in the future, but it provides a +higher level of assurance that no shells were executed as part of +command substitution with WRDE_NOCMD in effect. In addition it doesn't +require libpthread or libdl, instead we use the public implementation +namespace function __register_atfork (already part of the public ABI +for libpthread). + +Tested on x86_64 with no regressions. + +Conflicts: + ChangeLog + NEWS +--- + ChangeLog | 266 +++++++++++++++++++++++++++++++++++++++++++++++++++ + NEWS | 10 ++ + posix/wordexp-test.c | 44 +++++++++ + posix/wordexp.c | 16 +--- + 4 files changed, 324 insertions(+), 12 deletions(-) + +diff --git a/posix/wordexp-test.c b/posix/wordexp-test.c +index 4957006..bdd65e4 100644 +--- a/posix/wordexp-test.c ++++ b/posix/wordexp-test.c +@@ -27,6 +27,25 @@ + + #define IFS " \n\t" + ++extern void *__dso_handle __attribute__ ((__weak__, __visibility__ ("hidden"))); ++extern int __register_atfork (void (*) (void), void (*) (void), void (*) (void), void *); ++ ++static int __app_register_atfork (void (*prepare) (void), void (*parent) (void), void (*child) (void)) ++{ ++ return __register_atfork (prepare, parent, child, ++ &__dso_handle == NULL ? NULL : __dso_handle); ++} ++ ++/* Number of forks seen. */ ++static int registered_forks; ++ ++/* For each fork increment the fork count. */ ++static void ++register_fork (void) ++{ ++ registered_forks++; ++} ++ + struct test_case_struct + { + int retval; +@@ -206,6 +225,12 @@ struct test_case_struct + { WRDE_SYNTAX, NULL, "$((2+))", 0, 0, { NULL, }, IFS }, + { WRDE_SYNTAX, NULL, "`", 0, 0, { NULL, }, IFS }, + { WRDE_SYNTAX, NULL, "$((010+4+))", 0, 0, { NULL }, IFS }, ++ /* Test for CVE-2014-7817. We test 3 combinations of command ++ substitution inside an arithmetic expression to make sure that ++ no commands are executed and error is returned. */ ++ { WRDE_CMDSUB, NULL, "$((`echo 1`))", WRDE_NOCMD, 0, { NULL, }, IFS }, ++ { WRDE_CMDSUB, NULL, "$((1+`echo 1`))", WRDE_NOCMD, 0, { NULL, }, IFS }, ++ { WRDE_CMDSUB, NULL, "$((1+$((`echo 1`))))", WRDE_NOCMD, 0, { NULL, }, IFS }, + + { -1, NULL, NULL, 0, 0, { NULL, }, IFS }, + }; +@@ -258,6 +283,15 @@ main (int argc, char *argv[]) + return -1; + } + ++ /* If we are not allowed to do command substitution, we install ++ fork handlers to verify that no forks happened. No forks should ++ happen at all if command substitution is disabled. */ ++ if (__app_register_atfork (register_fork, NULL, NULL) != 0) ++ { ++ printf ("Failed to register fork handler.\n"); ++ return -1; ++ } ++ + for (test = 0; test_case[test].retval != -1; test++) + if (testit (&test_case[test])) + ++fail; +@@ -367,6 +401,9 @@ testit (struct test_case_struct *tc) + + printf ("Test %d (%s): ", ++tests, tc->words); + ++ if (tc->flags & WRDE_NOCMD) ++ registered_forks = 0; ++ + if (tc->flags & WRDE_APPEND) + { + /* initial wordexp() call, to be appended to */ +@@ -378,6 +415,13 @@ testit (struct test_case_struct *tc) + } + retval = wordexp (tc->words, &we, tc->flags); + ++ if ((tc->flags & WRDE_NOCMD) ++ && (registered_forks > 0)) ++ { ++ printf ("FAILED fork called for WRDE_NOCMD\n"); ++ return 1; ++ } ++ + if (tc->flags & WRDE_DOOFFS) + start_offs = sav_we.we_offs; + +diff --git a/posix/wordexp.c b/posix/wordexp.c +index 366ec18..36a1367 100644 +--- a/posix/wordexp.c ++++ b/posix/wordexp.c +@@ -893,6 +893,10 @@ exec_comm (char *comm, char **word, size_t *word_length, size_t *max_length, + pid_t pid; + int noexec = 0; + ++ /* Do nothing if command substitution should not succeed. */ ++ if (flags & WRDE_NOCMD) ++ return WRDE_CMDSUB; ++ + /* Don't fork() unless necessary */ + if (!comm || !*comm) + return 0; +@@ -2082,9 +2086,6 @@ parse_dollars (char **word, size_t *word_length, size_t *max_length, + } + } + +- if (flags & WRDE_NOCMD) +- return WRDE_CMDSUB; +- + (*offset) += 2; + return parse_comm (word, word_length, max_length, words, offset, flags, + quoted? NULL : pwordexp, ifs, ifs_white); +@@ -2196,9 +2197,6 @@ parse_dquote (char **word, size_t *word_length, size_t *max_length, + break; + + case '`': +- if (flags & WRDE_NOCMD) +- return WRDE_CMDSUB; +- + ++(*offset); + error = parse_backtick (word, word_length, max_length, words, + offset, flags, NULL, NULL, NULL); +@@ -2357,12 +2355,6 @@ wordexp (const char *words, wordexp_t *pwordexp, int flags) + break; + + case '`': +- if (flags & WRDE_NOCMD) +- { +- error = WRDE_CMDSUB; +- goto do_error; +- } +- + ++words_offset; + error = parse_backtick (&word, &word_length, &max_length, words, + &words_offset, flags, pwordexp, ifs, +-- +2.2.1 + diff --git a/glibc/CVE-2014-9402-Avoid-infinite-loop-in-nss_dns-getnetbyname.patch b/glibc/CVE-2014-9402-Avoid-infinite-loop-in-nss_dns-getnetbyname.patch new file mode 100644 index 0000000..d9c01fa --- /dev/null +++ b/glibc/CVE-2014-9402-Avoid-infinite-loop-in-nss_dns-getnetbyname.patch @@ -0,0 +1,32 @@ +From c9e9c2e4b1bdd880e11ad1d0756da87634456b95 Mon Sep 17 00:00:00 2001 +From: Florian Weimer <fweimer(a)redhat.com> +Date: Mon, 15 Dec 2014 17:41:13 +0100 +Subject: [PATCH] Avoid infinite loop in nss_dns getnetbyname [BZ #17630] + +Conflicts: + ChangeLog + NEWS +--- + ChangeLog | 14 ++++++++++++++ + NEWS | 8 ++++++++ + resolv/nss_dns/dns-network.c | 4 ++-- + 3 files changed, 24 insertions(+), 2 deletions(-) + +diff --git a/resolv/nss_dns/dns-network.c b/resolv/nss_dns/dns-network.c +index 13ad38c..1993ec1 100644 +--- a/resolv/nss_dns/dns-network.c ++++ b/resolv/nss_dns/dns-network.c +@@ -398,8 +398,8 @@ getanswer_r (const querybuf *answer, int anslen, struct netent *result, + + case BYNAME: + { +- char **ap = result->n_aliases++; +- while (*ap != NULL) ++ char **ap; ++ for (ap = result->n_aliases; *ap != NULL; ++ap) + { + /* Check each alias name for being of the forms: + 4.3.2.1.in-addr.arpa = net 1.2.3.4 +-- +2.2.1 + diff --git a/glibc/CVE-2015-1472-wscanf-allocates-too-little-memory.patch b/glibc/CVE-2015-1472-wscanf-allocates-too-little-memory.patch new file mode 100644 index 0000000..e472684 --- /dev/null +++ b/glibc/CVE-2015-1472-wscanf-allocates-too-little-memory.patch @@ -0,0 +1,105 @@ +From 18d9cd1d9d95503074db705686d0236c99db5d00 Mon Sep 17 00:00:00 2001 +From: Paul Pluzhnikov <ppluzhnikov(a)google.com> +Date: Fri, 6 Feb 2015 00:30:42 -0500 +Subject: [PATCH 2/2] CVE-2015-1472: wscanf allocates too little memory + +BZ #16618 + +Under certain conditions wscanf can allocate too little memory for the +to-be-scanned arguments and overflow the allocated buffer. The +implementation now correctly computes the required buffer size when +using malloc. + +A regression test was added to tst-sscanf. + +Conflicts: + ChangeLog + NEWS +--- + ChangeLog | 133 ++++++++++++++++++++++++++++++++++++++++++++++ + NEWS | 44 +++++++++++++++ + stdio-common/tst-sscanf.c | 33 ++++++++++++ + stdio-common/vfscanf.c | 12 ++--- + 4 files changed, 216 insertions(+), 6 deletions(-) + +diff --git a/stdio-common/tst-sscanf.c b/stdio-common/tst-sscanf.c +index 1214c7d..c62bee6 100644 +--- a/stdio-common/tst-sscanf.c ++++ b/stdio-common/tst-sscanf.c +@@ -232,5 +232,38 @@ main (void) + } + } + ++ /* BZ #16618 ++ The test will segfault during SSCANF if the buffer overflow ++ is not fixed. The size of `s` is such that it forces the use ++ of malloc internally and this triggers the incorrect computation. ++ Thus the value for SIZE is arbitrariy high enough that malloc ++ is used. */ ++ { ++#define SIZE 131072 ++ CHAR *s = malloc ((SIZE + 1) * sizeof (*s)); ++ if (s == NULL) ++ abort (); ++ for (size_t i = 0; i < SIZE; i++) ++ s[i] = L('0'); ++ s[SIZE] = L('\0'); ++ int i = 42; ++ /* Scan multi-digit zero into `i`. */ ++ if (SSCANF (s, L("%d"), &i) != 1) ++ { ++ printf ("FAIL: bug16618: SSCANF did not read one input item.\n"); ++ result = 1; ++ } ++ if (i != 0) ++ { ++ printf ("FAIL: bug16618: Value of `i` was not zero as expected.\n"); ++ result = 1; ++ } ++ free (s); ++ if (result != 1) ++ printf ("PASS: bug16618: Did not crash.\n"); ++#undef SIZE ++ } ++ ++ + return result; + } +diff --git a/stdio-common/vfscanf.c b/stdio-common/vfscanf.c +index 2e1e91a..d7a18e3 100644 +--- a/stdio-common/vfscanf.c ++++ b/stdio-common/vfscanf.c +@@ -272,9 +272,10 @@ _IO_vfscanf_internal (_IO_FILE *s, const char *format, _IO_va_list argptr, + if (__builtin_expect (wpsize == wpmax, 0)) \ + { \ + CHAR_T *old = wp; \ +- size_t newsize = (UCHAR_MAX + 1 > 2 * wpmax \ +- ? UCHAR_MAX + 1 : 2 * wpmax); \ +- if (use_malloc || !__libc_use_alloca (newsize)) \ ++ bool fits = __glibc_likely (wpmax <= SIZE_MAX / sizeof (CHAR_T) / 2); \ ++ size_t wpneed = MAX (UCHAR_MAX + 1, 2 * wpmax); \ ++ size_t newsize = fits ? wpneed * sizeof (CHAR_T) : SIZE_MAX; \ ++ if (!__libc_use_alloca (newsize)) \ + { \ + wp = realloc (use_malloc ? wp : NULL, newsize); \ + if (wp == NULL) \ +@@ -286,14 +287,13 @@ _IO_vfscanf_internal (_IO_FILE *s, const char *format, _IO_va_list argptr, + } \ + if (! use_malloc) \ + MEMCPY (wp, old, wpsize); \ +- wpmax = newsize; \ ++ wpmax = wpneed; \ + use_malloc = true; \ + } \ + else \ + { \ + size_t s = wpmax * sizeof (CHAR_T); \ +- wp = (CHAR_T *) extend_alloca (wp, s, \ +- newsize * sizeof (CHAR_T)); \ ++ wp = (CHAR_T *) extend_alloca (wp, s, newsize); \ + wpmax = s / sizeof (CHAR_T); \ + if (old != NULL) \ + MEMCPY (wp, old, wpsize); \ +-- +2.2.1 + diff --git a/glibc/Pkgfile b/glibc/Pkgfile index e4910ed..5bd7570 100644 --- a/glibc/Pkgfile +++ b/glibc/Pkgfile @@ -4,11 +4,15 @@ name=glibc version=2.19 -release=4 +release=5 source=(http://ftp.gnu.org/gnu/glibc/glibc-$version.tar.xz \ http://crux.nu/files/distfiles/kernel-headers-3.12.tar.bz2 \ $name-$version-multilib-dirs.patch \ CVE-2014-0475.patch iconv-gconv_trans.c.patch \ + CVE-2012-3406-Stack-overflow-in-vfprintf-BZ-16617.patch \ + CVE-2014-7817-wordexp-fails-to-honour-WRDE_NOCMD.patch \ + CVE-2014-9402-Avoid-infinite-loop-in-nss_dns-getnetbyname.patch \ + CVE-2015-1472-wscanf-allocates-too-little-memory.patch \ hosts resolv.conf nsswitch.conf host.conf ld.so.conf) build() { @@ -20,6 +24,10 @@ build() { patch -p1 -d $SRC/$name-$version -i $SRC/$name-$version-multilib-dirs.patch patch -p1 -d $SRC/$name-$version -i $SRC/CVE-2014-0475.patch patch -p1 -d $SRC/$name-$version -i $SRC/iconv-gconv_trans.c.patch + patch -p1 -d $SRC/$name-$version -i $SRC/CVE-2012-3406-Stack-overflow-in-vfprintf-BZ-16617.patch + patch -p1 -d $SRC/$name-$version -i $SRC/CVE-2014-7817-wordexp-fails-to-honour-WRDE_NOCMD.patch + patch -p1 -d $SRC/$name-$version -i $SRC/CVE-2014-9402-Avoid-infinite-loop-in-nss_dns-getnetbyname.patch + patch -p1 -d $SRC/$name-$version -i $SRC/CVE-2015-1472-wscanf-allocates-too-little-memory.patch mkdir $SRC/build cd $SRC/build

1 0