November 2016 - crux-commits

ports/core (3.2): flex: update to 2.6.1, project is now hosted on github
by crux＠crux.nu 02 Nov '16

02 Nov '16

commit eaebf54397a6f44bb4a7272be5955f907ffa3bc9 Author: Juergen Daubert <jue(a)jue.li> Date: Wed Nov 2 09:56:41 2016 +0100 flex: update to 2.6.1, project is now hosted on github diff --git a/flex/.md5sum b/flex/.md5sum index 0aa37a2..19ee67c 100644 --- a/flex/.md5sum +++ b/flex/.md5sum @@ -1,2 +1 @@ -78f98fd91043a6a2a36c456c12b61704 flex-2.6.0-2.patch -3cbbfa1554d0b75fad9f8100732454de flex-2.6.0.tar.xz +cd3c86290fc2676a641aefafeb10848a flex-2.6.1.tar.xz diff --git a/flex/Pkgfile b/flex/Pkgfile index edb851d..b89d668 100644 --- a/flex/Pkgfile +++ b/flex/Pkgfile @@ -1,20 +1,15 @@ # Description: Fast Lexical Analyzer Generator -# URL: http://flex.sourceforge.net/ +# URL: https://github.com/westes/flex # Maintainer: CRUX System Team, core-ports at crux dot nu name=flex -version=2.6.0 -release=2 -source=(http://downloads.sourceforge.net/project/$name/$name-$version.tar.xz - $name-$version-2.patch) +version=2.6.1 +release=1 +source=(https://github.com/westes/flex/releases/download/v$version/$name-$version.tar.xz) build() { cd $name-$version - # fix for FS#1284 - patch -p1 -i $SRC/$name-$version-2.patch - touch doc/flex.1 - ./configure --prefix=/usr --disable-nls make

1 0

ports/core (3.3): updated signatures
by crux＠crux.nu 02 Nov '16

02 Nov '16

commit 4eccbd2704cdbd7d385bc4d2025378bfa31776f7 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Nov 2 09:03:34 2016 +0100 updated signatures diff --git a/curl/.signature b/curl/.signature index a7ca272..47ded5a 100644 --- a/curl/.signature +++ b/curl/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqrptY6/R1qZ5CZ34NtpOPv5MSQXPn4ZiS/UIOU2AaHUIq7anwUK9Y+t9iUt7gDSYecXCOBPbG0en3dPM9uvigwc= -SHA256 (Pkgfile) = f0c6884ca3eefca9ed18681a884ad39d803f8f31fbd8c0e576c8428151f226c0 -SHA256 (.footprint) = c9e7afa8b622091738da647d703b3ef9fefdedc4d80ceec94fbe0055be0aa534 -SHA256 (curl-7.50.3.tar.lzma) = 8c5457e2ecfc38d7e1103bf5e0f87895222340200de9ceefd300c3420698f5ea +RWRJc1FUaeVeqnCaAA/lBe+2ntpuGS7p4ojLaMeXnu470RGYSa1oV/cO4zQzRiOrGVLu8uCz3LB4FmM6Ks9aNni3qzA2wGf+xQI= +SHA256 (Pkgfile) = 270f604fabfd03704a64cab6c65fcd03df75fceac59abed2a2164bf22858aa5a +SHA256 (.footprint) = a298d8a22fb7b1f499f514771d0968c9ee874efd76a9d39213a854b391bead53 +SHA256 (curl-7.51.0.tar.lzma) = 9eef5f6bbb972ffc631f4c76cfe93161bf5186926133c77267b24f5191700518 diff --git a/file/.signature b/file/.signature index f91f8f3..fb1b17a 100644 --- a/file/.signature +++ b/file/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqvof/YhDJyOAlpmfzWBTU1YinEHZPyfVCiG5/WQacKgVh+kkrjM0tMfHEuRmY8pT2MApBc0y2pHOgw4Cs0GyaAU= -SHA256 (Pkgfile) = a2a58d7a1651b442bd25082b50043b601a56d27b2c4c922b1b656347553a7255 +RWRJc1FUaeVeqp3MrJZxlx/sDJgg5koazmACpdFGpZmTrkvzhglLemWut6UxwZCoA6TRMrQydTmQ0S4HBDNqU+NfB9V1UBp4MgE= +SHA256 (Pkgfile) = bf56f754d2a2daaa7a5042f59ba384bf05c153104407c088ef6d8be7de5b28f9 SHA256 (.footprint) = 6014d14d7cc92d75a5935fb931dde0242ea5bc2abe18703e9d2cd6a2197012bd -SHA256 (file-5.28.tar.gz) = 0ecb5e146b8655d1fa84159a847ee619fc102575205a0ff9c6cc60fc5ee2e012 +SHA256 (file-5.29.tar.gz) = ea661277cd39bf8f063d3a83ee875432cc3680494169f952787e002bdd3884c0

1 0

ports/core (3.3): Merge branch '3.2' into 3.3
by crux＠crux.nu 02 Nov '16

02 Nov '16

commit 5b946ab2c37bd8c0f316e4c77305ae1e3218be5f Merge: 907962e 53c6722 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Nov 2 09:03:04 2016 +0100 Merge branch '3.2' into 3.3

1 0

ports/core (3.3): [notify] curl: updated to 7.51.0
by crux＠crux.nu 02 Nov '16

02 Nov '16

commit 53c6722a1e80512a1876b0629179ae54033cc8a9 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Nov 2 09:02:09 2016 +0100 [notify] curl: updated to 7.51.0 Resolves: CVE-2016-8615: cookie injection for other servers CVE-2016-8616: case insensitive password comparison CVE-2016-8617: OOB write via unchecked multiplication CVE-2016-8618: double-free in curl_maprintf CVE-2016-8619: double-free in krb5 code CVE-2016-8620: glob parser write/read out of bounds CVE-2016-8621: curl_getdate read out of bounds CVE-2016-8622: URL unescape heap overflow via integer truncation CVE-2016-8623: Use-after-free via shared cookies CVE-2016-8624: invalid URL parsing with '#' CVE-2016-8625: IDNA 2003 makes curl use wrong host https://curl.haxx.se/changes.html diff --git a/curl/.footprint b/curl/.footprint index 3c35548..5cb0c9c 100644 --- a/curl/.footprint +++ b/curl/.footprint @@ -176,6 +176,7 @@ drwxr-xr-x root/root usr/share/man/man3/ -rw-r--r-- root/root usr/share/man/man3/CURLOPT_IOCTLFUNCTION.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_IPRESOLVE.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_ISSUERCERT.3.gz +-rw-r--r-- root/root usr/share/man/man3/CURLOPT_KEEP_SENDING_ON_ERROR.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_KEYPASSWD.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_KRBLEVEL.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_LOCALPORT.3.gz diff --git a/curl/.md5sum b/curl/.md5sum index 55ec8da..a427d2d 100644 --- a/curl/.md5sum +++ b/curl/.md5sum @@ -1 +1 @@ -6080c1eb3e72d5da6c892ba72a074ad2 curl-7.50.3.tar.lzma +0f876ef6d5776d96b08510461d57db1b curl-7.51.0.tar.lzma diff --git a/curl/Pkgfile b/curl/Pkgfile index 1c90291..6ca674a 100644 --- a/curl/Pkgfile +++ b/curl/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl, zlib name=curl -version=7.50.3 +version=7.51.0 release=1 source=(http://curl.haxx.se/download/$name-$version.tar.lzma)

1 0

ports/core (3.3): file: updated to 5.29
by crux＠crux.nu 02 Nov '16

02 Nov '16

commit 64be6e651a6ab63f829337a5c31e33d2b104ebc5 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Oct 25 21:27:04 2016 +0200 file: updated to 5.29 diff --git a/file/.md5sum b/file/.md5sum index 3ad33a4..6b37936 100644 --- a/file/.md5sum +++ b/file/.md5sum @@ -1 +1 @@ -3f7771424aa855f32094b49571e19b33 file-5.28.tar.gz +b7b57b36b577c9cede2f2d1342203302 file-5.29.tar.gz diff --git a/file/Pkgfile b/file/Pkgfile index f5db220..fbbd4e8 100644 --- a/file/Pkgfile +++ b/file/Pkgfile @@ -4,7 +4,7 @@ # Depends on: zlib name=file -version=5.28 +version=5.29 release=1 source=(ftp://ftp.astron.com/pub/file/$name-$version.tar.gz)

1 0

ports/core (3.2): [notify] curl: updated to 7.51.0
by crux＠crux.nu 02 Nov '16

02 Nov '16

commit 53c6722a1e80512a1876b0629179ae54033cc8a9 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Nov 2 09:02:09 2016 +0100 [notify] curl: updated to 7.51.0 Resolves: CVE-2016-8615: cookie injection for other servers CVE-2016-8616: case insensitive password comparison CVE-2016-8617: OOB write via unchecked multiplication CVE-2016-8618: double-free in curl_maprintf CVE-2016-8619: double-free in krb5 code CVE-2016-8620: glob parser write/read out of bounds CVE-2016-8621: curl_getdate read out of bounds CVE-2016-8622: URL unescape heap overflow via integer truncation CVE-2016-8623: Use-after-free via shared cookies CVE-2016-8624: invalid URL parsing with '#' CVE-2016-8625: IDNA 2003 makes curl use wrong host https://curl.haxx.se/changes.html diff --git a/curl/.footprint b/curl/.footprint index 3c35548..5cb0c9c 100644 --- a/curl/.footprint +++ b/curl/.footprint @@ -176,6 +176,7 @@ drwxr-xr-x root/root usr/share/man/man3/ -rw-r--r-- root/root usr/share/man/man3/CURLOPT_IOCTLFUNCTION.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_IPRESOLVE.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_ISSUERCERT.3.gz +-rw-r--r-- root/root usr/share/man/man3/CURLOPT_KEEP_SENDING_ON_ERROR.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_KEYPASSWD.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_KRBLEVEL.3.gz -rw-r--r-- root/root usr/share/man/man3/CURLOPT_LOCALPORT.3.gz diff --git a/curl/.md5sum b/curl/.md5sum index 55ec8da..a427d2d 100644 --- a/curl/.md5sum +++ b/curl/.md5sum @@ -1 +1 @@ -6080c1eb3e72d5da6c892ba72a074ad2 curl-7.50.3.tar.lzma +0f876ef6d5776d96b08510461d57db1b curl-7.51.0.tar.lzma diff --git a/curl/Pkgfile b/curl/Pkgfile index 1c90291..6ca674a 100644 --- a/curl/Pkgfile +++ b/curl/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl, zlib name=curl -version=7.50.3 +version=7.51.0 release=1 source=(http://curl.haxx.se/download/$name-$version.tar.lzma)

1 0

ports/contrib (3.2): net-snmp: removed old information
by crux＠crux.nu 01 Nov '16

01 Nov '16

commit 905ea7ad45924bbc22f660bca1b6d7869a487b13 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Nov 1 23:09:37 2016 +0100 net-snmp: removed old information diff --git a/net-snmp/README b/net-snmp/README deleted file mode 100644 index 5774702..0000000 --- a/net-snmp/README +++ /dev/null @@ -1,13 +0,0 @@ -README for net-snmp - -REQUIREMENTS - -PRE-INSTALL - -POST-INSTALL -If you want to separate privileges - run post-install. - -It might be handy to run "snmpconf -g basic_setup" to configure -net-snmp. - -RESOURCES

1 0