September 2015 - crux-commits

ports/xorg (3.2): xorg-font-dejavu-ttf: 2.34 -> 2.35
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit 16b5ae955740735df54ec181571e0777f748f012 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Wed Aug 26 12:58:44 2015 +1000 xorg-font-dejavu-ttf: 2.34 -> 2.35 diff --git a/xorg-font-dejavu-ttf/.md5sum b/xorg-font-dejavu-ttf/.md5sum index 8c96991..66305f6 100644 --- a/xorg-font-dejavu-ttf/.md5sum +++ b/xorg-font-dejavu-ttf/.md5sum @@ -1 +1 @@ -161462de16e2ca79873bc2b0d2e6c74c dejavu-fonts-ttf-2.34.tar.bz2 +59eaca5acf5c7c8212e92778e3e01f32 dejavu-fonts-ttf-2.35.tar.bz2 diff --git a/xorg-font-dejavu-ttf/Pkgfile b/xorg-font-dejavu-ttf/Pkgfile index 8941316..0becc27 100644 --- a/xorg-font-dejavu-ttf/Pkgfile +++ b/xorg-font-dejavu-ttf/Pkgfile @@ -1,22 +1,22 @@ # Description: A font family based on the Bitstream Vera Fonts # URL: http://dejavu-fonts.org -# Maintainer: Jose V Beneyto, sepen at crux dot nu -# Packager: Tilman Sauerbeck, tilman at crux dot nu -# Depends on: xorg-mkfontdir, xorg-mkfontscale, fontconfig +# Maintainer: CRUX Xorg Team, xorg-ports at crux dot nu +# Depends on: xorg-mkfontdir xorg-mkfontscale fontconfig name=xorg-font-dejavu-ttf -version=2.34 +version=2.35 release=1 source=(http://downloads.sourceforge.net/project/dejavu/dejavu/$version/dej… build() { cd dejavu-fonts-ttf-$version - install -d -m 0755 $PKG/usr/share/fonts/X11/TTF - install -m 0644 ttf/*.ttf $PKG/usr/share/fonts/X11/TTF + install -m 0755 -d $PKG/usr/share/fonts/X11/TTF + install -m 0644 -t $PKG/usr/share/fonts/X11/TTF ttf/*.ttf + + install -m 0755 -d $PKG/etc/fonts/conf.{d,avail} + install -m 0644 -t $PKG/etc/fonts/conf.avail fontconfig/*.conf - install -d -m 0755 $PKG/etc/fonts/conf.{d,avail} - install -m 0644 fontconfig/*.conf $PKG/etc/fonts/conf.avail cd $PKG/etc/fonts/conf.d ln -s ../conf.avail/* . }

1 0

ports/opt (3.2): subversion: updated to 1.9.1
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit d5493f6e10dcbf7601827ed82d3e644d0a50d261 Author: Jose V Beneyto <sepen(a)crux.nu> Date: Wed Sep 2 09:57:58 2015 +0200 subversion: updated to 1.9.1 diff --git a/subversion/.md5sum b/subversion/.md5sum index 171e7c4..be56f30 100644 --- a/subversion/.md5sum +++ b/subversion/.md5sum @@ -1 +1 @@ -20ae7b0d4ef07eeaf73eb4e23317b495 subversion-1.9.0.tar.bz2 +8e879b61fffe3ac0cf16aeae1e8eda32 subversion-1.9.1.tar.bz2 diff --git a/subversion/Pkgfile b/subversion/Pkgfile index 23f3dba..d561470 100644 --- a/subversion/Pkgfile +++ b/subversion/Pkgfile @@ -5,7 +5,7 @@ # Depends on: apr serf expat sqlite3 name=subversion -version=1.9.0 +version=1.9.1 release=1 source=(http://www.apache.org/dist/$name/$name-$version.tar.bz2)

1 0

ports/opt (3.2): gdk-pixbuf: updated to 2.31.7
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit 17bc714d2d8394217fe81eab64b22fb14e4cbf96 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Sep 3 13:10:38 2015 +0200 gdk-pixbuf: updated to 2.31.7 diff --git a/gdk-pixbuf/.footprint b/gdk-pixbuf/.footprint index 1fb345a..dd4feb9 100644 --- a/gdk-pixbuf/.footprint +++ b/gdk-pixbuf/.footprint @@ -62,13 +62,13 @@ drwxr-xr-x root/root usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/ drwxr-xr-x root/root usr/lib/girepository-1.0/ -rw-r--r-- root/root usr/lib/girepository-1.0/GdkPixbuf-2.0.typelib -rwxr-xr-x root/root usr/lib/libgdk_pixbuf-2.0.la -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so -> libgdk_pixbuf-2.0.so.0.3100.6 -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so.0 -> libgdk_pixbuf-2.0.so.0.3100.6 --rwxr-xr-x root/root usr/lib/libgdk_pixbuf-2.0.so.0.3100.6 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so -> libgdk_pixbuf-2.0.so.0.3100.7 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so.0 -> libgdk_pixbuf-2.0.so.0.3100.7 +-rwxr-xr-x root/root usr/lib/libgdk_pixbuf-2.0.so.0.3100.7 -rwxr-xr-x root/root usr/lib/libgdk_pixbuf_xlib-2.0.la -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so -> libgdk_pixbuf_xlib-2.0.so.0.3100.6 -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0 -> libgdk_pixbuf_xlib-2.0.so.0.3100.6 --rwxr-xr-x root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0.3100.6 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so -> libgdk_pixbuf_xlib-2.0.so.0.3100.7 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0 -> libgdk_pixbuf_xlib-2.0.so.0.3100.7 +-rwxr-xr-x root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0.3100.7 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-2.0.pc -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-xlib-2.0.pc diff --git a/gdk-pixbuf/.md5sum b/gdk-pixbuf/.md5sum index 9578175..ed34846 100644 --- a/gdk-pixbuf/.md5sum +++ b/gdk-pixbuf/.md5sum @@ -1,3 +1,3 @@ -67219eb45ed0aba90b3158042b909d4e gdk-pixbuf-2.31.6.tar.xz +8a42218ed76a75e38dc737c0c5d30190 gdk-pixbuf-2.31.7.tar.xz d5311640870a5de1dc8aefcb4509a99d gdk-pixbuf-register.sh 94f3472231326d5352d007497db82798 gdk-pixbuf.loaders diff --git a/gdk-pixbuf/CVE-2015-4491.patch b/gdk-pixbuf/CVE-2015-4491.patch deleted file mode 100644 index 9b5e297..0000000 --- a/gdk-pixbuf/CVE-2015-4491.patch +++ /dev/null @@ -1,81 +0,0 @@ -From 62eab9b3d73a07f1b1821ff05eda6ccf5e2c5901 Mon Sep 17 00:00:00 2001 -From: Matthias Clasen <mclasen(a)redhat.com> -Date: Mon, 13 Jul 2015 00:33:40 -0400 -Subject: [PATCH] pixops: Be more careful about integer overflow - -Our loader code is supposed to handle out-of-memory and overflow -situations gracefully, reporting errors instead of aborting. But -if you load an image at a specific size, we also execute our -scaling code, which was not careful enough about overflow in some -places. This commit makes the scaling code silently return if -it fails to allocate filter tables. - -https://bugzilla.gnome.org/show_bug.cgi?id=752297 ---- - gdk-pixbuf/pixops/pixops.c | 22 +++++++++++++++++----- - 1 file changed, 17 insertions(+), 5 deletions(-) - -diff --git a/gdk-pixbuf/pixops/pixops.c b/gdk-pixbuf/pixops/pixops.c -index 29a1c14..226ad09 100644 ---- a/gdk-pixbuf/pixops/pixops.c -+++ b/gdk-pixbuf/pixops/pixops.c -@@ -1272,7 +1272,16 @@ make_filter_table (PixopsFilter *filter) - int i_offset, j_offset; - int n_x = filter->x.n; - int n_y = filter->y.n; -- int *weights = g_new (int, SUBSAMPLE * SUBSAMPLE * n_x * n_y); -+ gsize n_weights; -+ int *weights; -+ -+ n_weights = SUBSAMPLE * SUBSAMPLE * n_x * n_y; -+ if (n_weights / (SUBSAMPLE * SUBSAMPLE) != n_x * n_y) -+ return NULL; /* overflow, bail */ -+ -+ weights = g_new (int, n_weights); -+ if (!weights) -+ return NULL; /* overflow, bail */ - - for (i_offset=0; i_offset < SUBSAMPLE; i_offset++) - for (j_offset=0; j_offset < SUBSAMPLE; j_offset++) -@@ -1347,8 +1356,11 @@ pixops_process (guchar *dest_buf, - if (x_step == 0 || y_step == 0) - return; /* overflow, bail out */ - -- line_bufs = g_new (guchar *, filter->y.n); - filter_weights = make_filter_table (filter); -+ if (!filter_weights) -+ return; /* overflow, bail out */ -+ -+ line_bufs = g_new (guchar *, filter->y.n); - - check_shift = check_size ? get_check_shift (check_size) : 0; - -@@ -1468,7 +1480,7 @@ tile_make_weights (PixopsFilterDimension *dim, - double scale) - { - int n = ceil (1 / scale + 1); -- double *pixel_weights = g_new (double, SUBSAMPLE * n); -+ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); - int offset; - int i; - -@@ -1526,7 +1538,7 @@ bilinear_magnify_make_weights (PixopsFilterDimension *dim, - } - - dim->n = n; -- dim->weights = g_new (double, SUBSAMPLE * n); -+ dim->weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); - - pixel_weights = dim->weights; - -@@ -1617,7 +1629,7 @@ bilinear_box_make_weights (PixopsFilterDimension *dim, - double scale) - { - int n = ceil (1/scale + 3.0); -- double *pixel_weights = g_new (double, SUBSAMPLE * n); -+ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); - double w; - int offset, i; - --- -2.4.3 diff --git a/gdk-pixbuf/Pkgfile b/gdk-pixbuf/Pkgfile index 799bb21..da49cad 100644 --- a/gdk-pixbuf/Pkgfile +++ b/gdk-pixbuf/Pkgfile @@ -4,7 +4,7 @@ # Depends on: gobject-introspection libpng libtiff xorg-libx11 name=gdk-pixbuf -version=2.31.6 +version=2.31.7 release=1 source=(http://download.gnome.org/sources/$name/2.31/$name-$version.tar.xz \ gdk-pixbuf.loaders gdk-pixbuf-register.sh)

1 0

ports/opt (3.2): Merge branch '3.1' into 3.2
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit 8003656a486cf5b2ecfc2e1edce82a1ecda43272 Merge: 5bff501 17bc714 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Sep 3 13:11:05 2015 +0200 Merge branch '3.1' into 3.2

1 0

ports/opt (3.2): [notify] chromium: updated to 45.0.2454.85
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit 6c72d47a6ec62aa5650bc0a38e0b2c6b80fc11c4 Author: Jose V Beneyto <sepen(a)crux.nu> Date: Wed Sep 2 15:24:11 2015 +0200 [notify] chromium: updated to 45.0.2454.85 This update contains 29 security fixes and improvements: http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html diff --git a/chromium/.footprint b/chromium/.footprint index d7f18ce..0dd5a5b 100644 --- a/chromium/.footprint +++ b/chromium/.footprint @@ -6,6 +6,8 @@ drwxr-xr-x root/root usr/lib/chromium/ -rwsr-xr-x root/root usr/lib/chromium/chrome-sandbox -rw-r--r-- root/root usr/lib/chromium/chrome_100_percent.pak -rw-r--r-- root/root usr/lib/chromium/chrome_200_percent.pak +-rw-r--r-- root/root usr/lib/chromium/chrome_material_100_percent.pak +-rw-r--r-- root/root usr/lib/chromium/chrome_material_200_percent.pak -rwxr-xr-x root/root usr/lib/chromium/chromium -rw-r--r-- root/root usr/lib/chromium/content_resources.pak -rw-r--r-- root/root usr/lib/chromium/keyboard_resources.pak @@ -70,6 +72,14 @@ drwxr-xr-x root/root usr/lib/chromium/resources/inspector/Images/ -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/responsiveDesign_2x.png -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/searchNext.png -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/searchPrev.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateHttp.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateHttp_2x.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateInsecure.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateInsecure_2x.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateSecure.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateSecure_2x.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateWarning.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateWarning_2x.png -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/serviceWorker.svg -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/sessionStorage.png -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/settingsListRemove.png @@ -93,15 +103,15 @@ drwxr-xr-x root/root usr/lib/chromium/resources/inspector/Images/ -rw-r--r-- root/root usr/lib/chromium/resources/inspector/InspectorBackendCommands.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/SupportedCSSProperties.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/accessibility_module.js +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/animation_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/audits_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/cm_modes_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/components_lazy_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/console_module.js --rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools.css --rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools.html -rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools_extension_api.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/elements_module.js +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/emulated_devices_module.js (EMPTY) -rw-r--r-- root/root usr/lib/chromium/resources/inspector/heap_snapshot_worker_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/inspector.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/inspector.html @@ -113,6 +123,7 @@ drwxr-xr-x root/root usr/lib/chromium/resources/inspector/Images/ -rw-r--r-- root/root usr/lib/chromium/resources/inspector/resources_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/screencast_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/script_formatter_worker_module.js +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/security_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/settings_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/snippets_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/source_frame_module.js diff --git a/chromium/.md5sum b/chromium/.md5sum index 41ca00f..10a389e 100644 --- a/chromium/.md5sum +++ b/chromium/.md5sum @@ -1,3 +1,3 @@ -426bb0101b53521c448f7b16d9165d29 chromium-44.0.2403.157.tar.xz +fa430c3694ea64da5f26c9bbb0059021 chromium-45.0.2454.85.tar.xz b527005e021b14869a669e42c46b661d chromium.desktop 64968626706b07721983ac59fb3babbf chromium.sh diff --git a/chromium/Pkgfile b/chromium/Pkgfile index 3408a34..c2c6a45 100644 --- a/chromium/Pkgfile +++ b/chromium/Pkgfile @@ -5,7 +5,7 @@ # Depends on: ninja dbus-glib gtk libevent nss xorg-libxscrnsaver xorg-libxtst libgcrypt xorg-libxdamage yasm xorg-libxt gperf speech-dispatcher libdrm libexif pciutils name=chromium -version=44.0.2403.157 +version=45.0.2454.85 release=1 source=(http://commondatastorage.googleapis.com/$name-browser-official/$nam… \ $name.sh $name.desktop)

1 0

ports/opt (3.2): subversion: updated to 1.9.1
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit d5493f6e10dcbf7601827ed82d3e644d0a50d261 Author: Jose V Beneyto <sepen(a)crux.nu> Date: Wed Sep 2 09:57:58 2015 +0200 subversion: updated to 1.9.1 diff --git a/subversion/.md5sum b/subversion/.md5sum index 171e7c4..be56f30 100644 --- a/subversion/.md5sum +++ b/subversion/.md5sum @@ -1 +1 @@ -20ae7b0d4ef07eeaf73eb4e23317b495 subversion-1.9.0.tar.bz2 +8e879b61fffe3ac0cf16aeae1e8eda32 subversion-1.9.1.tar.bz2 diff --git a/subversion/Pkgfile b/subversion/Pkgfile index 23f3dba..d561470 100644 --- a/subversion/Pkgfile +++ b/subversion/Pkgfile @@ -5,7 +5,7 @@ # Depends on: apr serf expat sqlite3 name=subversion -version=1.9.0 +version=1.9.1 release=1 source=(http://www.apache.org/dist/$name/$name-$version.tar.bz2)

1 0

ports/opt (3.2): Merge branch '3.1' into 3.2
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit 8003656a486cf5b2ecfc2e1edce82a1ecda43272 Merge: 5bff501 17bc714 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Sep 3 13:11:05 2015 +0200 Merge branch '3.1' into 3.2

1 0

ports/opt (3.2): gdk-pixbuf: updated to 2.31.7
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit 17bc714d2d8394217fe81eab64b22fb14e4cbf96 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Sep 3 13:10:38 2015 +0200 gdk-pixbuf: updated to 2.31.7 diff --git a/gdk-pixbuf/.footprint b/gdk-pixbuf/.footprint index 1fb345a..dd4feb9 100644 --- a/gdk-pixbuf/.footprint +++ b/gdk-pixbuf/.footprint @@ -62,13 +62,13 @@ drwxr-xr-x root/root usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/ drwxr-xr-x root/root usr/lib/girepository-1.0/ -rw-r--r-- root/root usr/lib/girepository-1.0/GdkPixbuf-2.0.typelib -rwxr-xr-x root/root usr/lib/libgdk_pixbuf-2.0.la -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so -> libgdk_pixbuf-2.0.so.0.3100.6 -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so.0 -> libgdk_pixbuf-2.0.so.0.3100.6 --rwxr-xr-x root/root usr/lib/libgdk_pixbuf-2.0.so.0.3100.6 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so -> libgdk_pixbuf-2.0.so.0.3100.7 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so.0 -> libgdk_pixbuf-2.0.so.0.3100.7 +-rwxr-xr-x root/root usr/lib/libgdk_pixbuf-2.0.so.0.3100.7 -rwxr-xr-x root/root usr/lib/libgdk_pixbuf_xlib-2.0.la -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so -> libgdk_pixbuf_xlib-2.0.so.0.3100.6 -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0 -> libgdk_pixbuf_xlib-2.0.so.0.3100.6 --rwxr-xr-x root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0.3100.6 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so -> libgdk_pixbuf_xlib-2.0.so.0.3100.7 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0 -> libgdk_pixbuf_xlib-2.0.so.0.3100.7 +-rwxr-xr-x root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0.3100.7 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-2.0.pc -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-xlib-2.0.pc diff --git a/gdk-pixbuf/.md5sum b/gdk-pixbuf/.md5sum index 9578175..ed34846 100644 --- a/gdk-pixbuf/.md5sum +++ b/gdk-pixbuf/.md5sum @@ -1,3 +1,3 @@ -67219eb45ed0aba90b3158042b909d4e gdk-pixbuf-2.31.6.tar.xz +8a42218ed76a75e38dc737c0c5d30190 gdk-pixbuf-2.31.7.tar.xz d5311640870a5de1dc8aefcb4509a99d gdk-pixbuf-register.sh 94f3472231326d5352d007497db82798 gdk-pixbuf.loaders diff --git a/gdk-pixbuf/CVE-2015-4491.patch b/gdk-pixbuf/CVE-2015-4491.patch deleted file mode 100644 index 9b5e297..0000000 --- a/gdk-pixbuf/CVE-2015-4491.patch +++ /dev/null @@ -1,81 +0,0 @@ -From 62eab9b3d73a07f1b1821ff05eda6ccf5e2c5901 Mon Sep 17 00:00:00 2001 -From: Matthias Clasen <mclasen(a)redhat.com> -Date: Mon, 13 Jul 2015 00:33:40 -0400 -Subject: [PATCH] pixops: Be more careful about integer overflow - -Our loader code is supposed to handle out-of-memory and overflow -situations gracefully, reporting errors instead of aborting. But -if you load an image at a specific size, we also execute our -scaling code, which was not careful enough about overflow in some -places. This commit makes the scaling code silently return if -it fails to allocate filter tables. - -https://bugzilla.gnome.org/show_bug.cgi?id=752297 ---- - gdk-pixbuf/pixops/pixops.c | 22 +++++++++++++++++----- - 1 file changed, 17 insertions(+), 5 deletions(-) - -diff --git a/gdk-pixbuf/pixops/pixops.c b/gdk-pixbuf/pixops/pixops.c -index 29a1c14..226ad09 100644 ---- a/gdk-pixbuf/pixops/pixops.c -+++ b/gdk-pixbuf/pixops/pixops.c -@@ -1272,7 +1272,16 @@ make_filter_table (PixopsFilter *filter) - int i_offset, j_offset; - int n_x = filter->x.n; - int n_y = filter->y.n; -- int *weights = g_new (int, SUBSAMPLE * SUBSAMPLE * n_x * n_y); -+ gsize n_weights; -+ int *weights; -+ -+ n_weights = SUBSAMPLE * SUBSAMPLE * n_x * n_y; -+ if (n_weights / (SUBSAMPLE * SUBSAMPLE) != n_x * n_y) -+ return NULL; /* overflow, bail */ -+ -+ weights = g_new (int, n_weights); -+ if (!weights) -+ return NULL; /* overflow, bail */ - - for (i_offset=0; i_offset < SUBSAMPLE; i_offset++) - for (j_offset=0; j_offset < SUBSAMPLE; j_offset++) -@@ -1347,8 +1356,11 @@ pixops_process (guchar *dest_buf, - if (x_step == 0 || y_step == 0) - return; /* overflow, bail out */ - -- line_bufs = g_new (guchar *, filter->y.n); - filter_weights = make_filter_table (filter); -+ if (!filter_weights) -+ return; /* overflow, bail out */ -+ -+ line_bufs = g_new (guchar *, filter->y.n); - - check_shift = check_size ? get_check_shift (check_size) : 0; - -@@ -1468,7 +1480,7 @@ tile_make_weights (PixopsFilterDimension *dim, - double scale) - { - int n = ceil (1 / scale + 1); -- double *pixel_weights = g_new (double, SUBSAMPLE * n); -+ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); - int offset; - int i; - -@@ -1526,7 +1538,7 @@ bilinear_magnify_make_weights (PixopsFilterDimension *dim, - } - - dim->n = n; -- dim->weights = g_new (double, SUBSAMPLE * n); -+ dim->weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); - - pixel_weights = dim->weights; - -@@ -1617,7 +1629,7 @@ bilinear_box_make_weights (PixopsFilterDimension *dim, - double scale) - { - int n = ceil (1/scale + 3.0); -- double *pixel_weights = g_new (double, SUBSAMPLE * n); -+ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); - double w; - int offset, i; - --- -2.4.3 diff --git a/gdk-pixbuf/Pkgfile b/gdk-pixbuf/Pkgfile index 799bb21..da49cad 100644 --- a/gdk-pixbuf/Pkgfile +++ b/gdk-pixbuf/Pkgfile @@ -4,7 +4,7 @@ # Depends on: gobject-introspection libpng libtiff xorg-libx11 name=gdk-pixbuf -version=2.31.6 +version=2.31.7 release=1 source=(http://download.gnome.org/sources/$name/2.31/$name-$version.tar.xz \ gdk-pixbuf.loaders gdk-pixbuf-register.sh)

1 0

ports/opt (3.2): [notify] chromium: updated to 45.0.2454.85
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit 6c72d47a6ec62aa5650bc0a38e0b2c6b80fc11c4 Author: Jose V Beneyto <sepen(a)crux.nu> Date: Wed Sep 2 15:24:11 2015 +0200 [notify] chromium: updated to 45.0.2454.85 This update contains 29 security fixes and improvements: http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html diff --git a/chromium/.footprint b/chromium/.footprint index d7f18ce..0dd5a5b 100644 --- a/chromium/.footprint +++ b/chromium/.footprint @@ -6,6 +6,8 @@ drwxr-xr-x root/root usr/lib/chromium/ -rwsr-xr-x root/root usr/lib/chromium/chrome-sandbox -rw-r--r-- root/root usr/lib/chromium/chrome_100_percent.pak -rw-r--r-- root/root usr/lib/chromium/chrome_200_percent.pak +-rw-r--r-- root/root usr/lib/chromium/chrome_material_100_percent.pak +-rw-r--r-- root/root usr/lib/chromium/chrome_material_200_percent.pak -rwxr-xr-x root/root usr/lib/chromium/chromium -rw-r--r-- root/root usr/lib/chromium/content_resources.pak -rw-r--r-- root/root usr/lib/chromium/keyboard_resources.pak @@ -70,6 +72,14 @@ drwxr-xr-x root/root usr/lib/chromium/resources/inspector/Images/ -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/responsiveDesign_2x.png -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/searchNext.png -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/searchPrev.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateHttp.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateHttp_2x.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateInsecure.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateInsecure_2x.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateSecure.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateSecure_2x.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateWarning.png +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/securityStateWarning_2x.png -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/serviceWorker.svg -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/sessionStorage.png -rw-r--r-- root/root usr/lib/chromium/resources/inspector/Images/settingsListRemove.png @@ -93,15 +103,15 @@ drwxr-xr-x root/root usr/lib/chromium/resources/inspector/Images/ -rw-r--r-- root/root usr/lib/chromium/resources/inspector/InspectorBackendCommands.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/SupportedCSSProperties.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/accessibility_module.js +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/animation_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/audits_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/cm_modes_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/components_lazy_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/console_module.js --rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools.css --rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools.html -rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/devtools_extension_api.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/elements_module.js +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/emulated_devices_module.js (EMPTY) -rw-r--r-- root/root usr/lib/chromium/resources/inspector/heap_snapshot_worker_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/inspector.css -rw-r--r-- root/root usr/lib/chromium/resources/inspector/inspector.html @@ -113,6 +123,7 @@ drwxr-xr-x root/root usr/lib/chromium/resources/inspector/Images/ -rw-r--r-- root/root usr/lib/chromium/resources/inspector/resources_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/screencast_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/script_formatter_worker_module.js +-rw-r--r-- root/root usr/lib/chromium/resources/inspector/security_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/settings_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/snippets_module.js -rw-r--r-- root/root usr/lib/chromium/resources/inspector/source_frame_module.js diff --git a/chromium/.md5sum b/chromium/.md5sum index 41ca00f..10a389e 100644 --- a/chromium/.md5sum +++ b/chromium/.md5sum @@ -1,3 +1,3 @@ -426bb0101b53521c448f7b16d9165d29 chromium-44.0.2403.157.tar.xz +fa430c3694ea64da5f26c9bbb0059021 chromium-45.0.2454.85.tar.xz b527005e021b14869a669e42c46b661d chromium.desktop 64968626706b07721983ac59fb3babbf chromium.sh diff --git a/chromium/Pkgfile b/chromium/Pkgfile index 3408a34..c2c6a45 100644 --- a/chromium/Pkgfile +++ b/chromium/Pkgfile @@ -5,7 +5,7 @@ # Depends on: ninja dbus-glib gtk libevent nss xorg-libxscrnsaver xorg-libxtst libgcrypt xorg-libxdamage yasm xorg-libxt gperf speech-dispatcher libdrm libexif pciutils name=chromium -version=44.0.2403.157 +version=45.0.2454.85 release=1 source=(http://commondatastorage.googleapis.com/$name-browser-official/$nam… \ $name.sh $name.desktop)

1 0

ports/opt (3.1): gdk-pixbuf: updated to 2.31.7
by crux＠crux.nu 03 Sep '15

03 Sep '15

commit 17bc714d2d8394217fe81eab64b22fb14e4cbf96 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Sep 3 13:10:38 2015 +0200 gdk-pixbuf: updated to 2.31.7 diff --git a/gdk-pixbuf/.footprint b/gdk-pixbuf/.footprint index 1fb345a..dd4feb9 100644 --- a/gdk-pixbuf/.footprint +++ b/gdk-pixbuf/.footprint @@ -62,13 +62,13 @@ drwxr-xr-x root/root usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/ drwxr-xr-x root/root usr/lib/girepository-1.0/ -rw-r--r-- root/root usr/lib/girepository-1.0/GdkPixbuf-2.0.typelib -rwxr-xr-x root/root usr/lib/libgdk_pixbuf-2.0.la -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so -> libgdk_pixbuf-2.0.so.0.3100.6 -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so.0 -> libgdk_pixbuf-2.0.so.0.3100.6 --rwxr-xr-x root/root usr/lib/libgdk_pixbuf-2.0.so.0.3100.6 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so -> libgdk_pixbuf-2.0.so.0.3100.7 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf-2.0.so.0 -> libgdk_pixbuf-2.0.so.0.3100.7 +-rwxr-xr-x root/root usr/lib/libgdk_pixbuf-2.0.so.0.3100.7 -rwxr-xr-x root/root usr/lib/libgdk_pixbuf_xlib-2.0.la -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so -> libgdk_pixbuf_xlib-2.0.so.0.3100.6 -lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0 -> libgdk_pixbuf_xlib-2.0.so.0.3100.6 --rwxr-xr-x root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0.3100.6 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so -> libgdk_pixbuf_xlib-2.0.so.0.3100.7 +lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0 -> libgdk_pixbuf_xlib-2.0.so.0.3100.7 +-rwxr-xr-x root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0.3100.7 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-2.0.pc -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-xlib-2.0.pc diff --git a/gdk-pixbuf/.md5sum b/gdk-pixbuf/.md5sum index 9578175..ed34846 100644 --- a/gdk-pixbuf/.md5sum +++ b/gdk-pixbuf/.md5sum @@ -1,3 +1,3 @@ -67219eb45ed0aba90b3158042b909d4e gdk-pixbuf-2.31.6.tar.xz +8a42218ed76a75e38dc737c0c5d30190 gdk-pixbuf-2.31.7.tar.xz d5311640870a5de1dc8aefcb4509a99d gdk-pixbuf-register.sh 94f3472231326d5352d007497db82798 gdk-pixbuf.loaders diff --git a/gdk-pixbuf/CVE-2015-4491.patch b/gdk-pixbuf/CVE-2015-4491.patch deleted file mode 100644 index 9b5e297..0000000 --- a/gdk-pixbuf/CVE-2015-4491.patch +++ /dev/null @@ -1,81 +0,0 @@ -From 62eab9b3d73a07f1b1821ff05eda6ccf5e2c5901 Mon Sep 17 00:00:00 2001 -From: Matthias Clasen <mclasen(a)redhat.com> -Date: Mon, 13 Jul 2015 00:33:40 -0400 -Subject: [PATCH] pixops: Be more careful about integer overflow - -Our loader code is supposed to handle out-of-memory and overflow -situations gracefully, reporting errors instead of aborting. But -if you load an image at a specific size, we also execute our -scaling code, which was not careful enough about overflow in some -places. This commit makes the scaling code silently return if -it fails to allocate filter tables. - -https://bugzilla.gnome.org/show_bug.cgi?id=752297 ---- - gdk-pixbuf/pixops/pixops.c | 22 +++++++++++++++++----- - 1 file changed, 17 insertions(+), 5 deletions(-) - -diff --git a/gdk-pixbuf/pixops/pixops.c b/gdk-pixbuf/pixops/pixops.c -index 29a1c14..226ad09 100644 ---- a/gdk-pixbuf/pixops/pixops.c -+++ b/gdk-pixbuf/pixops/pixops.c -@@ -1272,7 +1272,16 @@ make_filter_table (PixopsFilter *filter) - int i_offset, j_offset; - int n_x = filter->x.n; - int n_y = filter->y.n; -- int *weights = g_new (int, SUBSAMPLE * SUBSAMPLE * n_x * n_y); -+ gsize n_weights; -+ int *weights; -+ -+ n_weights = SUBSAMPLE * SUBSAMPLE * n_x * n_y; -+ if (n_weights / (SUBSAMPLE * SUBSAMPLE) != n_x * n_y) -+ return NULL; /* overflow, bail */ -+ -+ weights = g_new (int, n_weights); -+ if (!weights) -+ return NULL; /* overflow, bail */ - - for (i_offset=0; i_offset < SUBSAMPLE; i_offset++) - for (j_offset=0; j_offset < SUBSAMPLE; j_offset++) -@@ -1347,8 +1356,11 @@ pixops_process (guchar *dest_buf, - if (x_step == 0 || y_step == 0) - return; /* overflow, bail out */ - -- line_bufs = g_new (guchar *, filter->y.n); - filter_weights = make_filter_table (filter); -+ if (!filter_weights) -+ return; /* overflow, bail out */ -+ -+ line_bufs = g_new (guchar *, filter->y.n); - - check_shift = check_size ? get_check_shift (check_size) : 0; - -@@ -1468,7 +1480,7 @@ tile_make_weights (PixopsFilterDimension *dim, - double scale) - { - int n = ceil (1 / scale + 1); -- double *pixel_weights = g_new (double, SUBSAMPLE * n); -+ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); - int offset; - int i; - -@@ -1526,7 +1538,7 @@ bilinear_magnify_make_weights (PixopsFilterDimension *dim, - } - - dim->n = n; -- dim->weights = g_new (double, SUBSAMPLE * n); -+ dim->weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); - - pixel_weights = dim->weights; - -@@ -1617,7 +1629,7 @@ bilinear_box_make_weights (PixopsFilterDimension *dim, - double scale) - { - int n = ceil (1/scale + 3.0); -- double *pixel_weights = g_new (double, SUBSAMPLE * n); -+ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); - double w; - int offset, i; - --- -2.4.3 diff --git a/gdk-pixbuf/Pkgfile b/gdk-pixbuf/Pkgfile index 799bb21..da49cad 100644 --- a/gdk-pixbuf/Pkgfile +++ b/gdk-pixbuf/Pkgfile @@ -4,7 +4,7 @@ # Depends on: gobject-introspection libpng libtiff xorg-libx11 name=gdk-pixbuf -version=2.31.6 +version=2.31.7 release=1 source=(http://download.gnome.org/sources/$name/2.31/$name-$version.tar.xz \ gdk-pixbuf.loaders gdk-pixbuf-register.sh)

1 0