March 2018 - crux-commits

ports/core (3.3): man-db: update to 2.8.2
by crux＠crux.nu 01 Mar '18

01 Mar '18

commit 3c5a46ecf2fb9dfa6d06d70405f04d65889c636e Author: Juergen Daubert <jue(a)jue.li> Date: Thu Mar 1 11:07:45 2018 +0100 man-db: update to 2.8.2 diff --git a/man-db/.footprint b/man-db/.footprint index ac322637..6723898c 100644 --- a/man-db/.footprint +++ b/man-db/.footprint @@ -15,12 +15,12 @@ drwxr-xr-x root/root usr/etc/ -rw-r--r-- root/root usr/etc/man_db.conf drwxr-xr-x root/root usr/lib/ drwxr-xr-x root/root usr/lib/man-db/ --rwxr-xr-x root/root usr/lib/man-db/libman-2.8.1.so +-rwxr-xr-x root/root usr/lib/man-db/libman-2.8.2.so -rwxr-xr-x root/root usr/lib/man-db/libman.la -lrwxrwxrwx root/root usr/lib/man-db/libman.so -> libman-2.8.1.so --rwxr-xr-x root/root usr/lib/man-db/libmandb-2.8.1.so +lrwxrwxrwx root/root usr/lib/man-db/libman.so -> libman-2.8.2.so +-rwxr-xr-x root/root usr/lib/man-db/libmandb-2.8.2.so -rwxr-xr-x root/root usr/lib/man-db/libmandb.la -lrwxrwxrwx root/root usr/lib/man-db/libmandb.so -> libmandb-2.8.1.so +lrwxrwxrwx root/root usr/lib/man-db/libmandb.so -> libmandb-2.8.2.so drwxr-xr-x root/root usr/lib/man-db/man-db/ -rwxr-xr-x root/root usr/lib/man-db/man-db/globbing -rwxr-xr-x root/root usr/lib/man-db/man-db/manconv diff --git a/man-db/.md5sum b/man-db/.md5sum index 9c82f0fd..103a0045 100644 --- a/man-db/.md5sum +++ b/man-db/.md5sum @@ -1,2 +1,2 @@ -51842978e06686286421f9498d1009b7 man-db-2.8.1.tar.xz +300788c0939a3b41d50302b04f730fa3 man-db-2.8.2.tar.xz 43dcb76783c4b2f0578b43a43124f9e9 mandb.cron diff --git a/man-db/.signature b/man-db/.signature index 05ce8468..211f9019 100644 --- a/man-db/.signature +++ b/man-db/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqsbCsC3Y2m6mSOZ1A04tmvVx6o3uXaMHvMn40hUx9YyJRrwdy6jVx2eI/M/K8T3NQd40oZuN8b0RNDL49vaxFAU= -SHA256 (Pkgfile) = 689abf9732cb3c3dedc077c6a18e901391f12240139419b318d4f56831bc7183 -SHA256 (.footprint) = 2ff2d92fb6e4d5798c610a80095d75f23cd4523d74d8f48f72a35955606ae057 -SHA256 (man-db-2.8.1.tar.xz) = a6aec641ca3d9942b054cc0e9c3f05cb46a3a992bc0006795755e2fed1357f3e +RWRJc1FUaeVeqlK0SZv0AlLH8VERzxyU3iOlSF8K0vGrSoSWbcoKnIWxfClrqPnCbO597D2PqXQiJAurmmcxbC82Gnpx45nneAI= +SHA256 (Pkgfile) = 378c78bbb6b81226ca24d91a61b69a65296afb420f2cdc9665397718ecede0a6 +SHA256 (.footprint) = 0c8a119e4c512d591218a92024bead9f95a6ad0517194e45c5f989e423705d69 +SHA256 (man-db-2.8.2.tar.xz) = 45bdff87df888ddd93dc2a68abca91a2012d6e08333a8fc7c0dfefe9cbde0c5c SHA256 (mandb.cron) = f2e9f1210bf6b7c3335cc6f3a9551651812428109ea8c4adc9cd5cf73461e0f1 diff --git a/man-db/Pkgfile b/man-db/Pkgfile index 14e264ec..7b9687d4 100644 --- a/man-db/Pkgfile +++ b/man-db/Pkgfile @@ -4,7 +4,7 @@ # Depends on: zlib gdbm libpipeline name=man-db -version=2.8.1 +version=2.8.2 release=1 source=(http://download.savannah.gnu.org/releases/$name/$name-$version.tar.… \ mandb.cron)

1 0

ports/xorg (3.3): mesa-demos: update to 8.4.0
by crux＠crux.nu 01 Mar '18

01 Mar '18

commit 794e343f37a8f8e5e1ea6b2d9e56841038e92d11 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Mar 1 11:05:45 2018 +0100 mesa-demos: update to 8.4.0 diff --git a/mesa-demos/.md5sum b/mesa-demos/.md5sum index 0cbff38..bdf2aa8 100644 --- a/mesa-demos/.md5sum +++ b/mesa-demos/.md5sum @@ -1 +1 @@ -628e75c23c17394f11a316c36f8e4164 mesa-demos-8.3.0.tar.bz2 +6b65a02622765522176d00f553086fa3 mesa-demos-8.4.0.tar.bz2 diff --git a/mesa-demos/.signature b/mesa-demos/.signature index c99a5d0..b3370b0 100644 --- a/mesa-demos/.signature +++ b/mesa-demos/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndGNy76E1vQXzTWTmNy6RqKNHbew9dLbF6pkvu0qz4AlItsGuRJZ4wlUkBVVi7kHEExMsFkqgmkIhlYFHTqoiHwY= -SHA256 (Pkgfile) = 82b924952c8eb53bef50e42d6cfebc2044a9c01ae054c93beb3224a4a29a5606 +RWTSGWF5Q7TndKiL/RsTujJU3ZIw2HJ8RFcHiJCqHvduYZWYrea5jzBpPQOCDUt7C4Io2rEXW/IF6zzalM/jhSx8LtjPh6RcYQ8= +SHA256 (Pkgfile) = c62a3fa0ae5e108022866e1b4763184ee23b411d90d9e754707bb0da83f181ed SHA256 (.footprint) = a328423b6004ca0d68a4ede62c70b950fc7e488a771c89630cf8f10a868bd341 -SHA256 (mesa-demos-8.3.0.tar.bz2) = c173154bbd0d5fb53d732471984def42fb1b14ac85fcb834138fb9518b3e0bef +SHA256 (mesa-demos-8.4.0.tar.bz2) = 01e99c94a0184e63e796728af89bfac559795fb2a0d6f506fa900455ca5fff7d diff --git a/mesa-demos/Pkgfile b/mesa-demos/Pkgfile index a7d5b6d..2cacc75 100644 --- a/mesa-demos/Pkgfile +++ b/mesa-demos/Pkgfile @@ -4,9 +4,9 @@ # Depends on: glew glu name=mesa-demos -version=8.3.0 +version=8.4.0 release=1 -source=(ftp://ftp.freedesktop.org/pub/mesa/demos/$version/$name-$version.tar.bz2) +source=(https://mesa.freedesktop.org/archive/demos/$name-$version.tar.bz2) build() { cd $name-$version

1 0

ports/opt (3.3): [notify] dovecot: update to 2.3.0.1, closes FS#1599
by crux＠crux.nu 01 Mar '18

01 Mar '18

commit b927b2f2d7680a3241d70b6c70f1ec8602169831 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Mar 1 09:57:59 2018 +0100 [notify] dovecot: update to 2.3.0.1, closes FS#1599 security fix, see https://dovecot.org/list/dovecot-news/2018-February/000371.html diff --git a/dovecot/.md5sum b/dovecot/.md5sum index 3b4936f51..21943f3b4 100644 --- a/dovecot/.md5sum +++ b/dovecot/.md5sum @@ -1,5 +1,3 @@ -a1a5efc13766e3b2d0a154e9716f0f7a CVE-2017-15132-1.patch -f043e0bb2773cd38f74ada8c164524a6 CVE-2017-15132.patch ec342928dd97131f82dba41546741b5f dovecot -a8802617ddf68972f5f97bd8677e5856 dovecot-2.3.0.tar.gz +865d6ad94c98ac3289fa06a77b1c014e dovecot-2.3.0.1.tar.gz 1cc42484b5515bddf47edcf26b288b6b dovecot-config.patch diff --git a/dovecot/.signature b/dovecot/.signature index c9707c0a1..a7f0a14ea 100644 --- a/dovecot/.signature +++ b/dovecot/.signature @@ -1,9 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/SkROei+JVsseDKn6SIUNsjxW4JVhAKiDa6r4HZW5ka8HbQjpy6OBAAyHGpg/+/NM5m9pchHJcjlYyFH2k1VXQs= -SHA256 (Pkgfile) = f325affa0506d8e0a7f7ac40e81503af99fa2ee54a3a8c38a76205de6e8e396b +RWSE3ohX2g5d/d5N12tWoNTQhb7I2Fr15CI5nf6EiZ2gY+6Rhbz6ryRonaZ1C0T02UcuQeVDNq4sOW7xEVNd5IwW2K3Msih3vQE= +SHA256 (Pkgfile) = 4d2c31432a6ab2b7a42ea598e913f45ee22ddc15d7f1ba53d95ccf30896c884b SHA256 (.footprint) = d464c6eb14ad58ab166c901d6c1a6f66a010f3e934f3b1645a9cd20d24663b4b -SHA256 (dovecot-2.3.0.tar.gz) = de60cb470d025e4dd0f8e8fbbb4b9316dfd4930eb949d307330669ffbeaf8581 -SHA256 (CVE-2017-15132.patch) = ddbfdb187e1e763aa10364e57ed82bd37d264d66ed01559a7dbdeccb9f41e91f -SHA256 (CVE-2017-15132-1.patch) = 480980136322c3361ab334346218504397668df49d66afef0bca70b7e4d40fae +SHA256 (dovecot-2.3.0.1.tar.gz) = ab772b3e214683aba347203c9391295552255c4d69afb324c7b8c8fc5ad6f153 SHA256 (dovecot-config.patch) = a6f09e637f1ac15368d2d18736dc353e4a188959c5940dedd5306b689156e91c SHA256 (dovecot) = ead06d36290cca8be6be350f2c05edf53a4e9ce8aec5d5d663b1162ae96c17c7 diff --git a/dovecot/CVE-2017-15132-1.patch b/dovecot/CVE-2017-15132-1.patch deleted file mode 100644 index b1d8b4923..000000000 --- a/dovecot/CVE-2017-15132-1.patch +++ /dev/null @@ -1,57 +0,0 @@ -From a9b135760aea6d1790d447d351c56b78889dac22 Mon Sep 17 00:00:00 2001 -From: Aki Tuomi <aki.tuomi(a)dovecot.fi> -Date: Fri, 26 Jan 2018 10:55:54 +0200 -Subject: [PATCH] lib-auth: Remove request after abort - -Otherwise the request will still stay in hash table -and get dereferenced when all requests are aborted -causing an attempt to access free'd memory. - -Found by Apollon Oikonomopoulos <apoikos(a)debian.org> - -Broken in 1a29ed2f96da1be22fa5a4d96c7583aa81b8b060 ---- - src/lib-auth/auth-client-request.c | 2 ++ - src/lib-auth/auth-server-connection.c | 7 +++++++ - src/lib-auth/auth-server-connection.h | 2 ++ - 3 files changed, 11 insertions(+) - -diff --git a/src/lib-auth/auth-client-request.c b/src/lib-auth/auth-client-request.c -index 046f7c307d..f6d0290a13 100644 ---- a/src/lib-auth/auth-client-request.c -+++ b/src/lib-auth/auth-client-request.c -@@ -186,6 +186,8 @@ void auth_client_request_abort(struct auth_client_request **_request) - - auth_client_send_cancel(request->conn->client, request->id); - call_callback(request, AUTH_REQUEST_STATUS_ABORT, NULL, NULL); -+ /* remove the request */ -+ auth_server_connection_remove_request(request->conn, request->id); - pool_unref(&request->pool); - } - -diff --git a/src/lib-auth/auth-server-connection.c b/src/lib-auth/auth-server-connection.c -index 9d65450fb3..7eea061cad 100644 ---- a/src/lib-auth/auth-server-connection.c -+++ b/src/lib-auth/auth-server-connection.c -@@ -483,3 +483,10 @@ auth_server_connection_add_request(struct auth_server_connection *conn, - hash_table_insert(conn->requests, POINTER_CAST(id), request); - return id; - } -+ -+void auth_server_connection_remove_request(struct auth_server_connection *conn, -+ unsigned int id) -+{ -+ i_assert(conn->handshake_received); -+ hash_table_remove(conn->requests, POINTER_CAST(id)); -+} -diff --git a/src/lib-auth/auth-server-connection.h b/src/lib-auth/auth-server-connection.h -index 179b5dbd4c..c2c533a41d 100644 ---- a/src/lib-auth/auth-server-connection.h -+++ b/src/lib-auth/auth-server-connection.h -@@ -40,4 +40,6 @@ void auth_server_connection_disconnect(struct auth_server_connection *conn, - unsigned int - auth_server_connection_add_request(struct auth_server_connection *conn, - struct auth_client_request *request); -+void auth_server_connection_remove_request(struct auth_server_connection *conn, -+ unsigned int id); - #endif diff --git a/dovecot/CVE-2017-15132.patch b/dovecot/CVE-2017-15132.patch deleted file mode 100644 index 6b147abef..000000000 --- a/dovecot/CVE-2017-15132.patch +++ /dev/null @@ -1,28 +0,0 @@ -From 1a29ed2f96da1be22fa5a4d96c7583aa81b8b060 Mon Sep 17 00:00:00 2001 -From: Timo Sirainen <timo.sirainen(a)dovecot.fi> -Date: Mon, 18 Dec 2017 16:50:51 +0200 -Subject: [PATCH] lib-auth: Fix memory leak in auth_client_request_abort() - -This caused memory leaks when authentication was aborted. For example -with IMAP: - -a AUTHENTICATE PLAIN -* - -Broken by 9137c55411aa39d41c1e705ddc34d5bd26c65021 ---- - src/lib-auth/auth-client-request.c | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/src/lib-auth/auth-client-request.c b/src/lib-auth/auth-client-request.c -index 480fb42b30..046f7c307d 100644 ---- a/src/lib-auth/auth-client-request.c -+++ b/src/lib-auth/auth-client-request.c -@@ -186,6 +186,7 @@ void auth_client_request_abort(struct auth_client_request **_request) - - auth_client_send_cancel(request->conn->client, request->id); - call_callback(request, AUTH_REQUEST_STATUS_ABORT, NULL, NULL); -+ pool_unref(&request->pool); - } - - unsigned int auth_client_request_get_id(struct auth_client_request *request) diff --git a/dovecot/Pkgfile b/dovecot/Pkgfile index a9f4f109e..4c0b42b99 100644 --- a/dovecot/Pkgfile +++ b/dovecot/Pkgfile @@ -4,18 +4,13 @@ # Depends on: zlib bzip2 openssl libcap name=dovecot -version=2.3.0 -release=3 +version=2.3.0.1 +release=1 source=(https://dovecot.org/releases/2.3/$name-$version.tar.gz - CVE-2017-15132.patch CVE-2017-15132-1.patch dovecot-config.patch dovecot) build () { - cd $name-ce-$version - - patch -p1 -i $SRC/CVE-2017-15132.patch - patch -p1 -i $SRC/CVE-2017-15132-1.patch - patch -p1 -i $SRC/$name-config.patch + cd $name-$version ./configure --prefix=/usr \ --libexecdir=/usr/lib \

1 0