July 2020 - crux-commits

ports/xorg (3.6): Merge branch '3.5' into 3.6
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit dd4728e3ea379e73a414421b2d43e3df4a3f86ba Merge: 9d8b2426 7617936b Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Fri Jul 31 22:52:14 2020 +0200 Merge branch '3.5' into 3.6

1 0

ports/xorg (3.6): [notify] xorg-libx11: 1.6.10. Fix for CVE-2020-14344
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit 7617936b6ec8893f24f2716b3f419b9143abc49c Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Fri Jul 31 22:48:49 2020 +0200 [notify] xorg-libx11: 1.6.10. Fix for CVE-2020-14344 X.Org security advisory: July 31, 2020 Heap corruption in the X input method client in libX11 ====================================================== CVE-2020-14344 The X Input Method (XIM) client implementation in libX11 has some integer overflows and signed/unsigned comparison issues that can lead to heap corruption when handling malformed messages from an input method. diff --git a/xorg-libx11/.signature b/xorg-libx11/.signature index fb9895e8..6a4dc0d5 100644 --- a/xorg-libx11/.signature +++ b/xorg-libx11/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndJShL5nVQU+teNZL3HWRSEF3lEUM5vrdUrVpFdQNMPyGuru/ir2akC9Nl/BNrhVI2hZ4z986bBgyXhSgXK2SiQw= -SHA256 (Pkgfile) = 12e8fe843d6069bd190e015b0890aa59bcb4428625ea7b98f71c903dc347d4b6 +RWTSGWF5Q7TndP5QnMnd3Bc3AYuxunpA7/co8XQG1Uqr2Yu5rHi9aAXA4Xt8x5f5f2Gh09v9+xqjIqxRIOlcRplN6o+o9TffAA8= +SHA256 (Pkgfile) = ec42db901f6c6e501c12a1b4cfcb2d011480dd91f92fae24334590829a9c5dd5 SHA256 (.footprint) = ccb5120a2b76cd91ac3aa131a2de98674a22f34e0c7197ad2d98e41cb78f8775 -SHA256 (libX11-1.6.9.tar.bz2) = 9cc7e8d000d6193fa5af580d50d689380b8287052270f5bb26a5fb6b58b2bed1 +SHA256 (libX11-1.6.10.tar.bz2) = af48626989b8515c994777896bd7b7ba2bd5b1ef4e1efaee0a55d8852bbe6226 diff --git a/xorg-libx11/Pkgfile b/xorg-libx11/Pkgfile index 67e1a96b..5ceabac9 100644 --- a/xorg-libx11/Pkgfile +++ b/xorg-libx11/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xorg-libxcb xorg-xtrans name=xorg-libx11 -version=1.6.9 +version=1.6.10 release=1 source=(https://www.x.org/releases/individual/lib/libX11-$version.tar.bz2)

1 0

ports/xorg (3.6): mesa3d: 20.1.4
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit a5b9b1a1618176b45a33a3a9a20a52643440862a Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Jul 23 17:40:36 2020 +0200 mesa3d: 20.1.4 diff --git a/mesa3d/.signature b/mesa3d/.signature index 8cf9b069..16530e9e 100644 --- a/mesa3d/.signature +++ b/mesa3d/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndLPZ5N0rEXs1EiOxHZA3OYCt2Fpt46HUjgR9HO/8+NxVEpuCnDaJosBHDg8Ym6zPHd0UEBVmLSc94Q+489AkvgU= -SHA256 (Pkgfile) = 774a99bd3b2c694b1153648bfc9a86b4e327c6c7a198f76b92269e51f11c47c6 +RWTSGWF5Q7TndMLAZto3z/4ZISjP35fI9Ky9OhfphlnCkVyGDGf6oRltM6qyvjcLcI/veTXh9NN8g+696jNsoL2mveM/eTlkuAU= +SHA256 (Pkgfile) = a91c5403397c8f3540d3ad3b862c2bd824415b8ebd9661f39b36bb408cad68e9 SHA256 (.footprint) = 68f502c4699284136e261b85197c12ff5c7a3a637cd249a2a878097267520385 -SHA256 (mesa-20.1.3.tar.xz) = 9872b8d46bee822177ffbe4292addff7bdb84cefc1fe776b8e6b2881a8362bf1 +SHA256 (mesa-20.1.4.tar.xz) = 6800271c2be2a0447510eb4e9b67edd9521859a4d565310617c4b359eb6799fe diff --git a/mesa3d/Pkgfile b/mesa3d/Pkgfile index 0196441a..5edc56e4 100644 --- a/mesa3d/Pkgfile +++ b/mesa3d/Pkgfile @@ -5,7 +5,7 @@ # Optional: libva name=mesa3d -version=20.1.3 +version=20.1.4 release=1 source=(https://mesa.freedesktop.org/archive/mesa-$version.tar.xz)

1 0

ports/xorg (3.5): [notify] xorg-libx11: 1.6.10. Fix for CVE-2020-14344
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit 7617936b6ec8893f24f2716b3f419b9143abc49c Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Fri Jul 31 22:48:49 2020 +0200 [notify] xorg-libx11: 1.6.10. Fix for CVE-2020-14344 X.Org security advisory: July 31, 2020 Heap corruption in the X input method client in libX11 ====================================================== CVE-2020-14344 The X Input Method (XIM) client implementation in libX11 has some integer overflows and signed/unsigned comparison issues that can lead to heap corruption when handling malformed messages from an input method. diff --git a/xorg-libx11/.signature b/xorg-libx11/.signature index fb9895e8..6a4dc0d5 100644 --- a/xorg-libx11/.signature +++ b/xorg-libx11/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndJShL5nVQU+teNZL3HWRSEF3lEUM5vrdUrVpFdQNMPyGuru/ir2akC9Nl/BNrhVI2hZ4z986bBgyXhSgXK2SiQw= -SHA256 (Pkgfile) = 12e8fe843d6069bd190e015b0890aa59bcb4428625ea7b98f71c903dc347d4b6 +RWTSGWF5Q7TndP5QnMnd3Bc3AYuxunpA7/co8XQG1Uqr2Yu5rHi9aAXA4Xt8x5f5f2Gh09v9+xqjIqxRIOlcRplN6o+o9TffAA8= +SHA256 (Pkgfile) = ec42db901f6c6e501c12a1b4cfcb2d011480dd91f92fae24334590829a9c5dd5 SHA256 (.footprint) = ccb5120a2b76cd91ac3aa131a2de98674a22f34e0c7197ad2d98e41cb78f8775 -SHA256 (libX11-1.6.9.tar.bz2) = 9cc7e8d000d6193fa5af580d50d689380b8287052270f5bb26a5fb6b58b2bed1 +SHA256 (libX11-1.6.10.tar.bz2) = af48626989b8515c994777896bd7b7ba2bd5b1ef4e1efaee0a55d8852bbe6226 diff --git a/xorg-libx11/Pkgfile b/xorg-libx11/Pkgfile index 67e1a96b..5ceabac9 100644 --- a/xorg-libx11/Pkgfile +++ b/xorg-libx11/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xorg-libxcb xorg-xtrans name=xorg-libx11 -version=1.6.9 +version=1.6.10 release=1 source=(https://www.x.org/releases/individual/lib/libX11-$version.tar.bz2)

1 0

ports/opt (3.6): Merge branch '3.5' into 3.6
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit ebac9c7bbb834895a068f9b135f9e5a46e18eb71 Merge: e8d12ce3d 1eef00b41 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Fri Jul 31 22:46:26 2020 +0200 Merge branch '3.5' into 3.6

1 0

ports/opt (3.6): cmake: 3.18.1
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit 1eef00b41037ac40fac76ecf06eede90b7958a03 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Fri Jul 31 22:44:16 2020 +0200 cmake: 3.18.1 diff --git a/cmake/.signature b/cmake/.signature index 509ebcf19..0fee42a47 100644 --- a/cmake/.signature +++ b/cmake/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/V6I/aJJEYGmdnJVWegPido5QSFJWtuaLUGT2Ye2nOe8tom+NZG/ZHefBEdUOtP/VbXkimGFQU/z9M9J1jEePAk= -SHA256 (Pkgfile) = 39ab742d410cecb8928cc7ee21df330b53197f882ca326ca0d5cfdaca5cf9570 +RWSE3ohX2g5d/aWhdQlASRmFMIttYGaCSNyssUk31C9A4wJImEqDoon1b7h9ffUSl74H1xtsJS2XOjFrRa+JaMR9gcKHBt7OJQQ= +SHA256 (Pkgfile) = d93960f046d51151b0f923dfb3dac83e871b2a4f4c1a177d2e8e371efcc6bf11 SHA256 (.footprint) = 840d20d9b911a488b0f58fab1a012c829df803fbe4086e534eb71aea2f5d289d -SHA256 (cmake-3.18.0.tar.gz) = 83b4ffcb9482a73961521d2bafe4a16df0168f03f56e6624c419c461e5317e29 +SHA256 (cmake-3.18.1.tar.gz) = c0e3338bd37e67155b9d1e9526fec326b5c541f74857771b7ffed0c46ad62508 diff --git a/cmake/Pkgfile b/cmake/Pkgfile index 278a9841f..785335d19 100644 --- a/cmake/Pkgfile +++ b/cmake/Pkgfile @@ -4,7 +4,7 @@ # Depends on: curl libarchive expat ncurses name=cmake -version=3.18.0 +version=3.18.1 release=1 source=(https://cmake.org/files/v${version%.*}/$name-$version.tar.gz)

1 0

ports/opt (3.6): sysstat: 12.2.3
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit 06bd25233c79414ddc1dd4e92ba0ee18f719278c Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Fri Jul 31 22:42:01 2020 +0200 sysstat: 12.2.3 diff --git a/sysstat/.signature b/sysstat/.signature index 79d6d231d..3e8c4a957 100644 --- a/sysstat/.signature +++ b/sysstat/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/fFl6f3Q5y6/3MmBw3fx537UEjxkXbGGVNiJSasL7f1kbS6Hh1yl2zJPkzOu3Lulzhsuly/1uvyLiJLxYjox8g0= -SHA256 (Pkgfile) = fe7b5d6360ca7ecfd2713bfb46e34712d554363d0e1b3745c1ab8873a8b47304 +RWSE3ohX2g5d/aCqsFXx7rtV18i3NEBnrtgJzVLJG2VhodmcGgXQPcEZ3ybpaFvc0/jrM4ij0Qt4uWeBU+Ap8Jrd4QabrLjVpQ8= +SHA256 (Pkgfile) = c32596e42421e9e869fd1a21affad35b272a2d0a084a66150289205c6fb2efc1 SHA256 (.footprint) = 40fa0a104999c90b74335e617aebe00964d7575c850421c8b732d300684808fc -SHA256 (sysstat-12.2.2.tar.xz) = 78388b64acec81378b962e66b40e57acd4b18ff17a849bc9308f95d290248c9c +SHA256 (sysstat-12.2.3.tar.xz) = c197dd852085e421d04c710fbb67b93e6581a8da1352bc1458db9974a464f430 diff --git a/sysstat/Pkgfile b/sysstat/Pkgfile index 25a0c7554..f1f180fba 100644 --- a/sysstat/Pkgfile +++ b/sysstat/Pkgfile @@ -4,7 +4,7 @@ # Depends on: name=sysstat -version=12.2.2 +version=12.2.3 release=1 source=(http://pagesperso-orange.fr/sebastien.godard/$name-$version.tar.xz)

1 0

ports/opt (3.6): exfatprogs: update to 1.0.4
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit 6b951ad7d305f55cb6ca266433e9bb7600b5aac2 Author: Juergen Daubert <jue(a)jue.li> Date: Fri Jul 31 12:12:39 2020 +0200 exfatprogs: update to 1.0.4 diff --git a/exfatprogs/.signature b/exfatprogs/.signature index 30ad2ac37..028d70445 100644 --- a/exfatprogs/.signature +++ b/exfatprogs/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/RIzjzE2/HX+7roqOIZtdE6Ifn0Ihvjh247gQPREBAim7wnCnWVl6Kq2+yhCgRr3lkJ80G3+Ji8kHtpj2A19jww= -SHA256 (Pkgfile) = bf6ae38d7072b746b8bdb8b249c9edf264b01af03bdbf910776db1e16b832ba6 +RWSE3ohX2g5d/eyfltBKlZlPmx8OtWs1a/zZXJIKQO+8RQE5OZQSQusxL0tiA3RVamuWm6EXxzeVoHYs9ckihtlSQwGDpeVvEAU= +SHA256 (Pkgfile) = f3232334e76e59d5a37fb6a5735b22570e3c6d6b45a50b0f8f4d0c167bb24cd8 SHA256 (.footprint) = cc6eebb5fcd06a6f411aa2c2237cb02b1d77ca6cca8102a66847498ed90a2c17 -SHA256 (exfatprogs-1.0.3.tar.gz) = 5cb2c9e65a1633148d498913508977e6073d6f454a7addfa98623f6d065d5589 +SHA256 (exfatprogs-1.0.4.tar.gz) = 3f755d35785a74138348b3a22dfcda5afc8a69e66a6a0c79be48225e6ca321ce diff --git a/exfatprogs/Pkgfile b/exfatprogs/Pkgfile index 901be03bb..56e54fe4a 100644 --- a/exfatprogs/Pkgfile +++ b/exfatprogs/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Juergen Daubert, jue at crux dot nu name=exfatprogs -version=1.0.3 +version=1.0.4 release=1 source=(https://github.com/exfatprogs/exfatprogs/archive/$version/$name-$ve…

1 0

ports/opt (3.6): git: update to 2.28.0, remove python from deps
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit 74a02e699c0f60486020785707940db10d4b6b56 Author: Juergen Daubert <jue(a)jue.li> Date: Fri Jul 31 12:10:09 2020 +0200 git: update to 2.28.0, remove python from deps only git-p4, import from and submit to Perforce repositories, depends on python2, so we don't realy care diff --git a/git/.signature b/git/.signature index 611ffa2b1..d468b7bb2 100644 --- a/git/.signature +++ b/git/.signature @@ -1,8 +1,8 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/YYeMZG/anlm1gY+yUtqxDpcayRZOrF1n2LwwEioBYUYmI8ExnOjBU25yO2VGQpGg+N3Sx7/yd72IMpDMDKCYQo= -SHA256 (Pkgfile) = 38288ac06693b4689e41ec7becaf4d70fbbedd911fcc3ced3129a46069c98815 +RWSE3ohX2g5d/VBFRsS8fHrr67a/M4LPu0T+P8i1mJ1143BsSxntXERVV9T/1SOf4/5MDQSodNipcuIpR055Xjv1nBYCnndufQs= +SHA256 (Pkgfile) = cc0be512601fddc2c9f7d90e7a0b2ed4f9133b3e51bce06dbe4371c0d059cc66 SHA256 (.footprint) = 0e46bb77691e6f20a071f60c0d222b540d744a12b54943b49fd406af8800f8d2 -SHA256 (git-2.27.0.tar.xz) = 73ca9774d7fa226e1d87c1909401623f96dca6a044e583b9a762e84d7d1a73f9 -SHA256 (git-manpages-2.27.0.tar.xz) = e6cbab49b04c975886fdddf46eb24c5645c6799224208db8b01143091d9bd49c +SHA256 (git-2.28.0.tar.xz) = dfa5d1a253aa451465478fe45c6a40ab8605b340fdb4c4e80b16d7f87708439d +SHA256 (git-manpages-2.28.0.tar.xz) = 665a7fa41f9a39248e48422dcf533e1a0133a4a6eddfc25ee55e28e42fc07cb7 SHA256 (git) = 432108f8c5f5abeb429cab25181b43ee42060d46fa7fbe7e4b02790b56f61e8a SHA256 (gitd.rc) = 3a7a13fcfbf493890e58a3c1c8a71de08518b35fa6fe6109120a03cd8beeac25 diff --git a/git/Pkgfile b/git/Pkgfile index 6f62c2d53..1e7eaf2aa 100644 --- a/git/Pkgfile +++ b/git/Pkgfile @@ -1,12 +1,12 @@ # Description: Directory content manager -# URL: http://www.kernel.org/pub/software/scm/git/docs +# URL: https://git-scm.com/ # Maintainer: Thomas Penteker, tek at serverop dot de # Packager: Tilman Sauerbeck, tilman at crux dot nu -# Depends on: expat, curl, python +# Depends on: expat curl # Nice to have: tk name=git -version=2.27.0 +version=2.28.0 release=1 source=(https://www.kernel.org/pub/software/scm/git/git-{,manpages-}$versio… git gitd.rc) @@ -18,7 +18,7 @@ build() { prefix=/usr \ gitexecdir=/usr/lib/git-core \ INSTALLSITEMAN3DIR=/usr/share/man/man3 \ - perllibdir=/usr/lib/perl5/site_perl/5.28 \ + perllibdir=$(perl -e 'use Config; print $Config::Config{'installsitelib'}') \ DESTDIR=$PKG install cd $SRC

1 0

ports/opt (3.6): jdk: update to 8.265.01.1
by crux＠crux.nu 31 Jul '20

31 Jul '20

commit a3b7bbfb2c7625a1a9ec46110619b59eb21457da Author: Juergen Daubert <jue(a)jue.li> Date: Thu Jul 30 12:05:08 2020 +0200 jdk: update to 8.265.01.1 diff --git a/jdk/.signature b/jdk/.signature index e2a5b54a4..67a51be6d 100644 --- a/jdk/.signature +++ b/jdk/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/XL4nPuyrorA5x1S+w0GP0dwj+LC4CiMp8sFISIWvGA2ZP28c2jesx1bpGk7geST3d+0ro3x8tvspiEHk1nCxA0= -SHA256 (Pkgfile) = 06d2b04a7d658af3e3d25fc2c98db615e66e9ad9d962d6148d4aeff3de330c7e +RWSE3ohX2g5d/e/qTURbmsAtwTjpenfSRwbA3Qe2SzMzx+JNcRfqEqmA3XP4/mQn422sXIn12qDvU+nhf5SFQJ3ujnC+h0vrOgs= +SHA256 (Pkgfile) = 3002d9938f6e3ab788bf4b9335a2fd6eedfae5607b8e5176312247c5612225e0 SHA256 (.footprint) = 3ec8500becdb7af8fa4c6a3cdfb740fe2bc4dfdedfbf7b5178ef0d2948d647a8 -SHA256 (amazon-corretto-8.262.10.1-linux-x64.tar.gz) = ef8e21f9318856c012da992734eca041b7ae2122797cd23c7706cc128cda4277 +SHA256 (amazon-corretto-8.265.01.1-linux-x64.tar.gz) = 1db9c4bd89b9949c97bc5e690aedce2872bb716cf35c670a29cadeeb80d0cb18 diff --git a/jdk/Pkgfile b/jdk/Pkgfile index bac54fc5b..71f6869b8 100644 --- a/jdk/Pkgfile +++ b/jdk/Pkgfile @@ -4,7 +4,7 @@ # Depends on: util-linux gtk alsa-lib name=jdk -version=8.262.10.1 +version=8.265.01.1 release=1 source=(https://corretto.aws/downloads/resources/$version/amazon-corretto-$version-linux-x64.tar.gz)

1 0