February 2024 - crux-commits

ports/core (3.8): pkgconf: 2.1.0 -> 2.1.1
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit 6c590020899fb991ba56d01b0b3bde22a463e6c3 Author: Tim Biermann <tbier(a)posteo.de> Date: Mon Feb 5 06:56:34 2024 +0100 pkgconf: 2.1.0 -> 2.1.1 diff --git a/pkgconf/.signature b/pkgconf/.signature index 3f5ec77a..921a65a3 100644 --- a/pkgconf/.signature +++ b/pkgconf/.signature @@ -1,7 +1,7 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqin5sr+3XI02apIpBZWmtHkVvQjLvo/u6wuwf1YwqaFxbe2Sm2wUQOr6gbCA28Ig511oT9uvsmJNEIbf7QzzdAw= -SHA256 (Pkgfile) = c771e0f752270f9e5aee4c826d76f7722c25750b4d08404aafe26eb8a3938ce8 +RWRJc1FUaeVeqiyzKgAI3yPKkOjQb4ryk6wKIzEZ99WSPInmV46S5ltfFUPX9x/lBBa1SZQPkQ2FMFW24z2wbCeQnUV9B4t+wQg= +SHA256 (Pkgfile) = 772350677e78406a15e8322bf2b4cc708ea7db787426641e9cbd258ff9b178fc SHA256 (.footprint) = f3bc795dc574418696dc219d19d75f55bcaa137837d18ddb6db00c233707006d -SHA256 (pkgconf-2.1.0.tar.xz) = 266d5861ee51c52bc710293a1d36622ae16d048d71ec56034a02eb9cf9677761 +SHA256 (pkgconf-2.1.1.tar.xz) = 3a224f2accf091b77a5781316e27b9ee3ba82c083cc2e539e08940b68a44fec5 SHA256 (i686-pc-linux-gnu.personality) = 6697c6db7deaae269ea75624a70e80949241f2cf59a537f31ecfcac726d90bc1 SHA256 (x86_64-pc-linux-gnu.personality) = c8297817ba0b57d003878db247ff34b4c47a7594c9f67dcfe8ff8d6567956cd5 diff --git a/pkgconf/Pkgfile b/pkgconf/Pkgfile index caf83f90..59b1bd8d 100644 --- a/pkgconf/Pkgfile +++ b/pkgconf/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=pkgconf -version=2.1.0 +version=2.1.1 release=1 source=(https://distfiles.ariadne.space/pkgconf/pkgconf-$version.tar.xz i686-pc-linux-gnu.personality x86_64-pc-linux-gnu.personality)

1 0

ports/core (3.8): [notify] glibc: added patch to fix CVE-2023-6780, CVE-2023-6780, CVE-2023-6246
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit c0a1b0a578d78291ae0cfc48c833c650f611f168 Author: Juergen Daubert <jue(a)jue.li> Date: Sun Feb 4 11:56:01 2024 +0100 [notify] glibc: added patch to fix CVE-2023-6780, CVE-2023-6780, CVE-2023-6246 diff --git a/glibc/.signature b/glibc/.signature index cc09fd96..26aa6a51 100644 --- a/glibc/.signature +++ b/glibc/.signature @@ -1,10 +1,10 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqnXAHCjzBaV3UybbGrGs0ZsT2e5IygAmAXt1moVQwX7ieVJChxNrbMTmAPexHOWHS6nLiYNWoNmGnb619GvU+wE= -SHA256 (Pkgfile) = fa3878caf7961200bf8479e2b6d2144782ab58a63f92da278bf529ff957336d0 +RWRJc1FUaeVeqt614Lc2Xa156+9z29YEuMMHpIOEUBCksMKgI3FHbAvbzkgiBKvfb28JHYnLsVf93jZgvqshql0UBp87pDtPmgM= +SHA256 (Pkgfile) = bf7accf5263780b7cc2cf82a6724a9d4c765e3699233f4fe8ac9477c49096595 SHA256 (.footprint) = 9eff4b9e8478995dd0aceacfe9301a250827c8b27cb1d4605c696ac55eec873c SHA256 (glibc-2.36.tar.xz) = 1c959fea240906226062cb4b1e7ebce71a9f0e3c0836c09e7e3423d434fcfe75 SHA256 (linux-5.15.55.tar.xz) = 1ef6bd508b6c3af3bef2d5b337e4477254dba284c79e329aa38f9763ae3bfdcc -SHA256 (glibc-2.36-8.patch) = df6b79339aa767fa3bea1443e1908ea124084b8eeee9e94ab03cc3afab0e4354 +SHA256 (glibc-2.36-9.patch) = 1bf45371ef0d171cb58e7811d2b98a3679f2530878fe41fe8154449bc3181f64 SHA256 (hosts) = 5c02b256c105f1d4a12fb738d71c1bab9eb126533074d7a0c8a14b92670c9431 SHA256 (resolv.conf) = 72ccb58768a72a771ec37142bc361a18478a07ec9de6e925a20760794389bf51 SHA256 (nsswitch.conf) = 859b8984e5e90aff3cce8f9779996ae4033b280d2122840e9411e2f44a1c2e61 diff --git a/glibc/Pkgfile b/glibc/Pkgfile index be247780..b16784eb 100644 --- a/glibc/Pkgfile +++ b/glibc/Pkgfile @@ -4,12 +4,12 @@ name=glibc version=2.36 -release=8 +release=9 _kernel_version=5.15.55 source=(https://ftp.gnu.org/gnu/glibc/glibc-$version.tar.xz https://www.kernel.org/pub/linux/kernel/v5.x/linux-$_kernel_version.tar.xz - glibc-$version-8.patch + glibc-$version-9.patch hosts resolv.conf nsswitch.conf host.conf ld.so.conf locale-gen locale.gen.in) @@ -19,7 +19,7 @@ build() { make -C $SRC/linux-$_kernel_version INSTALL_HDR_PATH=$PKG/usr headers_install chown root:root $PKG/usr - patch -p1 -d $SRC/$name-${version:0:4} -i $SRC/$name-$version-8.patch + patch -p1 -d $SRC/$name-${version:0:4} -i $SRC/$name-$version-9.patch mkdir $SRC/build cd $SRC/build diff --git a/glibc/glibc-2.36-8.patch b/glibc/glibc-2.36-9.patch similarity index 97% rename from glibc/glibc-2.36-8.patch rename to glibc/glibc-2.36-9.patch index df41fa4b..549a0aca 100644 --- a/glibc/glibc-2.36-8.patch +++ b/glibc/glibc-2.36-9.patch @@ -2357,6 +2357,32 @@ index 8be2d220f8..4a4d5aa6b2 100644 const unsigned char *cp; const unsigned char *usrc; +diff --git a/misc/Makefile b/misc/Makefile +index ba8232a0e9..66e9ded8f9 100644 +--- a/misc/Makefile ++++ b/misc/Makefile +@@ -115,7 +115,10 @@ tests-special += $(objpfx)tst-error1-mem.out \ + $(objpfx)tst-allocate_once-mem.out + endif + +-tests-container := tst-syslog ++tests-container := \ ++ tst-syslog \ ++ tst-syslog-long-progname \ ++ # tests-container + + CFLAGS-select.c += -fexceptions -fasynchronous-unwind-tables + CFLAGS-tsearch.c += $(uses-callbacks) +@@ -175,6 +178,9 @@ $(objpfx)tst-allocate_once-mem.out: $(objpfx)tst-allocate_once.out + $(common-objpfx)malloc/mtrace $(objpfx)tst-allocate_once.mtrace > $@; \ + $(evaluate-test) + ++tst-syslog-long-progname-ENV = GLIBC_TUNABLES=glibc.malloc.check=3 \ ++ LD_PRELOAD=libc_malloc_debug.so.0 ++ + $(objpfx)tst-select: $(librt) + $(objpfx)tst-select-time64: $(librt) + $(objpfx)tst-pselect: $(librt) diff --git a/misc/bits/syslog.h b/misc/bits/syslog.h index fd30dd3114..916d2b6f12 100644 --- a/misc/bits/syslog.h @@ -2446,10 +2472,30 @@ index d933fea104..3888153ed2 100644 __END_DECLS diff --git a/misc/syslog.c b/misc/syslog.c -index 554089bfc4..f67d4b58a4 100644 +index 554089bfc4..9336036666 100644 --- a/misc/syslog.c +++ b/misc/syslog.c -@@ -167,7 +167,7 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, +@@ -41,6 +41,7 @@ static char sccsid[] = "@(#)syslog.c 8.4 (Berkeley) 3/18/94"; + #include <sys/uio.h> + #include <sys/un.h> + #include <syslog.h> ++#include <limits.h> + + static int LogType = SOCK_DGRAM; /* type of socket connection */ + static int LogFile = -1; /* fd for log */ +@@ -122,8 +123,9 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, + { + /* Try to use a static buffer as an optimization. */ + char bufs[1024]; +- char *buf = NULL; +- size_t bufsize = 0; ++ char *buf = bufs; ++ size_t bufsize; ++ + int msgoff; + int saved_errno = errno; + +@@ -167,7 +169,7 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, _nl_C_locobj_ptr); #define SYSLOG_HEADER(__pri, __timestamp, __msgoff, pid) \ @@ -2458,19 +2504,74 @@ index 554089bfc4..f67d4b58a4 100644 __pri, __timestamp, __msgoff, \ LogTag == NULL ? __progname : LogTag, \ "[" + (pid == 0), pid, "]" + (pid == 0) -@@ -193,28 +193,32 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, - int vl = __vsnprintf_internal (bufs + l, sizeof bufs - l, fmt, apc, - mode_flags); - if (0 <= vl && vl < sizeof bufs - l) +@@ -175,53 +177,95 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, + #define SYSLOG_HEADER_WITHOUT_TS(__pri, __msgoff) \ + "<%d>: %n", __pri, __msgoff + +- int l; ++ int l, vl; + if (has_ts) + l = __snprintf (bufs, sizeof bufs, + SYSLOG_HEADER (pri, timestamp, &msgoff, pid)); + else + l = __snprintf (bufs, sizeof bufs, + SYSLOG_HEADER_WITHOUT_TS (pri, &msgoff)); +- if (0 <= l && l < sizeof bufs) ++ if (l < 0) ++ goto out; ++ ++ char *pos; ++ size_t len; ++ ++ if (l < sizeof bufs) + { +- va_list apc; +- va_copy (apc, ap); ++ /* At this point, there is still a chance that we can print the ++ remaining part of the log into bufs and use that. */ ++ pos = bufs + l; ++ len = sizeof (bufs) - l; ++ } ++ else ++ { ++ buf = NULL; ++ /* We already know that bufs is too small to use for this log message. ++ The next vsnprintf into bufs is used only to calculate the total ++ required buffer length. We will discard bufs contents and allocate ++ an appropriately sized buffer later instead. */ ++ pos = bufs; ++ len = sizeof (bufs); ++ } + +- /* Restore errno for %m format. */ +- __set_errno (saved_errno); ++ { ++ va_list apc; ++ va_copy (apc, ap); + +- int vl = __vsnprintf_internal (bufs + l, sizeof bufs - l, fmt, apc, +- mode_flags); +- if (0 <= vl && vl < sizeof bufs - l) - { - buf = bufs; - bufsize = l + vl; - } -+ buf = bufs; -+ bufsize = l + vl; ++ /* Restore errno for %m format. */ ++ __set_errno (saved_errno); - va_end (apc); - } +- va_end (apc); +- } ++ vl = __vsnprintf_internal (pos, len, fmt, apc, mode_flags); ++ va_end (apc); ++ ++ if (vl < 0 || vl >= INT_MAX - l) ++ goto out; ++ ++ if (vl >= len) ++ buf = NULL; ++ ++ bufsize = l + vl; ++ } if (buf == NULL) { @@ -2481,23 +2582,94 @@ index 554089bfc4..f67d4b58a4 100644 /* Tell the cancellation handler to free this buffer. */ clarg.buf = buf; ++ int cl; if (has_ts) - __snprintf (bufs, sizeof bufs, -+ __snprintf (buf, l + 1, - SYSLOG_HEADER (pri, timestamp, &msgoff, pid)); +- SYSLOG_HEADER (pri, timestamp, &msgoff, pid)); ++ cl = __snprintf (buf, l + 1, ++ SYSLOG_HEADER (pri, timestamp, &msgoff, pid)); else - __snprintf (bufs, sizeof bufs, -+ __snprintf (buf, l + 1, - SYSLOG_HEADER_WITHOUT_TS (pri, &msgoff)); +- SYSLOG_HEADER_WITHOUT_TS (pri, &msgoff)); ++ cl = __snprintf (buf, l + 1, ++ SYSLOG_HEADER_WITHOUT_TS (pri, &msgoff)); ++ if (cl != l) ++ goto out; + + va_list apc; + va_copy (apc, ap); -+ __vsnprintf_internal (buf + l, bufsize - l + 1, fmt, apc, -+ mode_flags); ++ cl = __vsnprintf_internal (buf + l, bufsize - l + 1, fmt, apc, ++ mode_flags); + va_end (apc); ++ ++ if (cl != vl) ++ goto out; } else { ++ int bl; + /* Nothing much to do but emit an error message. */ +- bufsize = __snprintf (bufs, sizeof bufs, +- "out of memory[%d]", __getpid ()); ++ bl = __snprintf (bufs, sizeof bufs, ++ "out of memory[%d]", __getpid ()); ++ if (bl < 0 || bl >= sizeof bufs) ++ goto out; ++ ++ bufsize = bl; + buf = bufs; ++ msgoff = 0; + } + } + +diff --git a/misc/tst-syslog-long-progname.c b/misc/tst-syslog-long-progname.c +new file mode 100644 +index 0000000000..88f37a8a00 +--- /dev/null ++++ b/misc/tst-syslog-long-progname.c +@@ -0,0 +1,39 @@ ++/* Test heap buffer overflow in syslog with long __progname (CVE-2023-6246) ++ Copyright (C) 2023 Free Software Foundation, Inc. ++ This file is part of the GNU C Library. ++ ++ The GNU C Library is free software; you can redistribute it and/or ++ modify it under the terms of the GNU Lesser General Public ++ License as published by the Free Software Foundation; either ++ version 2.1 of the License, or (at your option) any later version. ++ ++ The GNU C Library is distributed in the hope that it will be useful, ++ but WITHOUT ANY WARRANTY; without even the implied warranty of ++ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU ++ Lesser General Public License for more details. ++ ++ You should have received a copy of the GNU Lesser General Public ++ License along with the GNU C Library; if not, see ++ <https://www.gnu.org/licenses/>. */ ++ ++#include <syslog.h> ++#include <string.h> ++ ++extern char * __progname; ++ ++static int ++do_test (void) ++{ ++ char long_progname[2048]; ++ ++ memset (long_progname, 'X', sizeof (long_progname) - 1); ++ long_progname[sizeof (long_progname) - 1] = '\0'; ++ ++ __progname = long_progname; ++ ++ syslog (LOG_INFO, "Hello, World!"); ++ ++ return 0; ++} ++ ++#include <support/test-driver.c> +diff --git a/misc/tst-syslog-long-progname.root/postclean.req b/misc/tst-syslog-long-progname.root/postclean.req +new file mode 100644 +index 0000000000..e69de29bb2 diff --git a/misc/tst-syslog.c b/misc/tst-syslog.c index e550d15796..3560b518a2 100644 --- a/misc/tst-syslog.c @@ -8081,6 +8253,61 @@ index 2a82e53baf..d941024963 100644 #else register unsigned long thread_pointer __asm__ ("r2"); asm ("bcl 20,31,1f\n1:\t" +diff --git a/sysdeps/sparc/sparc32/memset.S b/sysdeps/sparc/sparc32/memset.S +index b1b67cb2d1..5154263317 100644 +--- a/sysdeps/sparc/sparc32/memset.S ++++ b/sysdeps/sparc/sparc32/memset.S +@@ -55,7 +55,7 @@ ENTRY(memset) + + andcc %o0, 3, %o2 + bne 3f +-4: andcc %o0, 4, %g0 ++5: andcc %o0, 4, %g0 + + be 2f + mov %g3, %g2 +@@ -139,7 +139,7 @@ ENTRY(memset) + stb %g3, [%o0 + 0x02] + 2: sub %o2, 4, %o2 + add %o1, %o2, %o1 +- b 4b ++ b 5b + sub %o0, %o2, %o0 + END(memset) + libc_hidden_builtin_def (memset) +diff --git a/sysdeps/sparc/sparc64/memmove.S b/sysdeps/sparc/sparc64/memmove.S +index 8d46f2cd4e..7746684160 100644 +--- a/sysdeps/sparc/sparc64/memmove.S ++++ b/sysdeps/sparc/sparc64/memmove.S +@@ -38,7 +38,7 @@ ENTRY(memmove) + /* + * normal, copy forwards + */ +-2: ble %XCC, .Ldbytecp ++2: bleu %XCC, .Ldbytecp + andcc %o1, 3, %o5 /* is src word aligned */ + bz,pn %icc, .Laldst + cmp %o5, 2 /* is src half-word aligned */ +diff --git a/sysdeps/sparc/sysdep.h b/sysdeps/sparc/sysdep.h +index 95068071cc..baab6817a6 100644 +--- a/sysdeps/sparc/sysdep.h ++++ b/sysdeps/sparc/sysdep.h +@@ -76,6 +76,15 @@ C_LABEL(name) \ + cfi_endproc; \ + .size name, . - name + ++#define ENTRY_NOCFI(name) \ ++ .align 4; \ ++ .global C_SYMBOL_NAME(name); \ ++ .type name, @function; \ ++C_LABEL(name) ++ ++#define END_NOCFI(name) \ ++ .size name, . - name ++ + #undef LOC + #define LOC(name) .L##name + diff --git a/sysdeps/unix/sysv/linux/Makefile b/sysdeps/unix/sysv/linux/Makefile index a139a16532..d5d9af4de2 100644 --- a/sysdeps/unix/sysv/linux/Makefile @@ -9480,6 +9707,47 @@ index ea38935497..f00817a6f6 100644 } #if __TIMESIZE != 64 libc_hidden_def (__shmctl64) +diff --git a/sysdeps/unix/sysv/linux/sparc/sparc32/sigreturn_stub.S b/sysdeps/unix/sysv/linux/sparc/sparc32/sigreturn_stub.S +index 2829e881eb..a1492ea59e 100644 +--- a/sysdeps/unix/sysv/linux/sparc/sparc32/sigreturn_stub.S ++++ b/sysdeps/unix/sysv/linux/sparc/sparc32/sigreturn_stub.S +@@ -23,12 +23,15 @@ + + [1] https://lkml.org/lkml/2016/5/27/465 */ + +-ENTRY (__rt_sigreturn_stub) ++ nop ++ nop ++ ++ENTRY_NOCFI (__rt_sigreturn_stub) + mov __NR_rt_sigreturn, %g1 + ta 0x10 +-END (__rt_sigreturn_stub) ++END_NOCFI (__rt_sigreturn_stub) + +-ENTRY (__sigreturn_stub) ++ENTRY_NOCFI (__sigreturn_stub) + mov __NR_sigreturn, %g1 + ta 0x10 +-END (__sigreturn_stub) ++END_NOCFI (__sigreturn_stub) +diff --git a/sysdeps/unix/sysv/linux/sparc/sparc64/sigreturn_stub.S b/sysdeps/unix/sysv/linux/sparc/sparc64/sigreturn_stub.S +index ac6af95e36..23b8b93f56 100644 +--- a/sysdeps/unix/sysv/linux/sparc/sparc64/sigreturn_stub.S ++++ b/sysdeps/unix/sysv/linux/sparc/sparc64/sigreturn_stub.S +@@ -23,7 +23,10 @@ + + [1] https://lkml.org/lkml/2016/5/27/465 */ + +-ENTRY (__rt_sigreturn_stub) ++ nop ++ nop ++ ++ENTRY_NOCFI (__rt_sigreturn_stub) + mov __NR_rt_sigreturn, %g1 + ta 0x6d +-END (__rt_sigreturn_stub) ++END_NOCFI (__rt_sigreturn_stub) diff --git a/sysdeps/unix/sysv/linux/sys/mount.h b/sysdeps/unix/sysv/linux/sys/mount.h index f965986ba8..19841d0738 100644 --- a/sysdeps/unix/sysv/linux/sys/mount.h @@ -10145,6 +10413,29 @@ index 0db2cb4152..7619e743e1 100644 movq -8(%rsp), %rdi ret .Lslow: +diff --git a/sysdeps/x86_64/ffsll.c b/sysdeps/x86_64/ffsll.c +index 842ebaeb4c..d352866d9f 100644 +--- a/sysdeps/x86_64/ffsll.c ++++ b/sysdeps/x86_64/ffsll.c +@@ -26,13 +26,13 @@ int + ffsll (long long int x) + { + long long int cnt; +- long long int tmp; + +- asm ("bsfq %2,%0\n" /* Count low bits in X and store in %1. */ +- "cmoveq %1,%0\n" /* If number was zero, use -1 as result. */ +- : "=&r" (cnt), "=r" (tmp) : "rm" (x), "1" (-1)); ++ asm ("mov $-1,%k0\n" /* Initialize cnt to -1. */ ++ "bsf %1,%0\n" /* Count low bits in x and store in cnt. */ ++ "inc %k0\n" /* Increment cnt by 1. */ ++ : "=&r" (cnt) : "r" (x)); + +- return cnt + 1; ++ return cnt; + } + + #ifndef __ILP32__ diff --git a/sysdeps/x86_64/fpu/fraiseexcpt.c b/sysdeps/x86_64/fpu/fraiseexcpt.c index 864f4777a2..23446ff4ac 100644 --- a/sysdeps/x86_64/fpu/fraiseexcpt.c

1 0

ports/core (3.8): glibc-32: added patch to fix CVE-2023-6780, CVE-2023-6780, CVE-2023-6246
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit 059ddba49d0813e3051c31f17546af103b3d92e6 Author: Juergen Daubert <jue(a)jue.li> Date: Sun Feb 4 11:57:09 2024 +0100 glibc-32: added patch to fix CVE-2023-6780, CVE-2023-6780, CVE-2023-6246 diff --git a/glibc-32/.signature b/glibc-32/.signature index 0c4e5d4e..de025769 100644 --- a/glibc-32/.signature +++ b/glibc-32/.signature @@ -1,8 +1,8 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqofgEKiOmXtZQvY/FHZvlQDmty1v/JbJ61lIIXiPoVh0QuXleptc40dvWPCY3ZcQuuEr3MsqA29kVAwrJjIGSwA= -SHA256 (Pkgfile) = b121998409a2c9cc616b5bc22a9430368117491c18833d13a90fc99b580d84ad +RWRJc1FUaeVeql66mOTUx3Cx1LqriUax7qi8Euq/rBd+wNQ2Pyki9pk4otMe0g03/qclXHsVIKXfjHRW09/SInE7blTgEq6+xAA= +SHA256 (Pkgfile) = a8b314815f444f63f1666e983a62e36ba2f286a9615c2ff60a5ce4b89d00aacf SHA256 (.footprint) = f676700a19f936a1af944e81a516dbf182723d6ac244eadabd3fd19e9a01daa5 SHA256 (glibc-2.36.tar.xz) = 1c959fea240906226062cb4b1e7ebce71a9f0e3c0836c09e7e3423d434fcfe75 SHA256 (linux-5.15.55.tar.xz) = 1ef6bd508b6c3af3bef2d5b337e4477254dba284c79e329aa38f9763ae3bfdcc -SHA256 (glibc-2.36-8.patch) = df6b79339aa767fa3bea1443e1908ea124084b8eeee9e94ab03cc3afab0e4354 +SHA256 (glibc-2.36-9.patch) = 1bf45371ef0d171cb58e7811d2b98a3679f2530878fe41fe8154449bc3181f64 SHA256 (lib32.conf) = 2f174d2bcefe1c29327690514f34d6970fffdd54398320ca23a11b5f1e3c9b2d diff --git a/glibc-32/Pkgfile b/glibc-32/Pkgfile index e1e86267..a8f19ac0 100644 --- a/glibc-32/Pkgfile +++ b/glibc-32/Pkgfile @@ -4,12 +4,12 @@ name=glibc-32 version=2.36 -release=9 +release=10 _kernel_version=5.15.55 source=(https://ftp.gnu.org/gnu/glibc/glibc-$version.tar.xz https://www.kernel.org/pub/linux/kernel/v5.x/linux-$_kernel_version.tar.xz - glibc-$version-8.patch lib32.conf) + glibc-$version-9.patch lib32.conf) build() { # install kernel headers @@ -17,7 +17,7 @@ build() { make -C $SRC/linux-$_kernel_version INSTALL_HDR_PATH=$PKG/usr headers_install chown root:root $PKG/usr - patch -p1 -d $SRC/glibc-${version:0:4} -i $SRC/glibc-$version-8.patch + patch -p1 -d $SRC/glibc-${version:0:4} -i $SRC/glibc-$version-9.patch mkdir $SRC/build cd $SRC/build diff --git a/glibc-32/glibc-2.36-8.patch b/glibc-32/glibc-2.36-9.patch similarity index 97% rename from glibc-32/glibc-2.36-8.patch rename to glibc-32/glibc-2.36-9.patch index df41fa4b..549a0aca 100644 --- a/glibc-32/glibc-2.36-8.patch +++ b/glibc-32/glibc-2.36-9.patch @@ -2357,6 +2357,32 @@ index 8be2d220f8..4a4d5aa6b2 100644 const unsigned char *cp; const unsigned char *usrc; +diff --git a/misc/Makefile b/misc/Makefile +index ba8232a0e9..66e9ded8f9 100644 +--- a/misc/Makefile ++++ b/misc/Makefile +@@ -115,7 +115,10 @@ tests-special += $(objpfx)tst-error1-mem.out \ + $(objpfx)tst-allocate_once-mem.out + endif + +-tests-container := tst-syslog ++tests-container := \ ++ tst-syslog \ ++ tst-syslog-long-progname \ ++ # tests-container + + CFLAGS-select.c += -fexceptions -fasynchronous-unwind-tables + CFLAGS-tsearch.c += $(uses-callbacks) +@@ -175,6 +178,9 @@ $(objpfx)tst-allocate_once-mem.out: $(objpfx)tst-allocate_once.out + $(common-objpfx)malloc/mtrace $(objpfx)tst-allocate_once.mtrace > $@; \ + $(evaluate-test) + ++tst-syslog-long-progname-ENV = GLIBC_TUNABLES=glibc.malloc.check=3 \ ++ LD_PRELOAD=libc_malloc_debug.so.0 ++ + $(objpfx)tst-select: $(librt) + $(objpfx)tst-select-time64: $(librt) + $(objpfx)tst-pselect: $(librt) diff --git a/misc/bits/syslog.h b/misc/bits/syslog.h index fd30dd3114..916d2b6f12 100644 --- a/misc/bits/syslog.h @@ -2446,10 +2472,30 @@ index d933fea104..3888153ed2 100644 __END_DECLS diff --git a/misc/syslog.c b/misc/syslog.c -index 554089bfc4..f67d4b58a4 100644 +index 554089bfc4..9336036666 100644 --- a/misc/syslog.c +++ b/misc/syslog.c -@@ -167,7 +167,7 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, +@@ -41,6 +41,7 @@ static char sccsid[] = "@(#)syslog.c 8.4 (Berkeley) 3/18/94"; + #include <sys/uio.h> + #include <sys/un.h> + #include <syslog.h> ++#include <limits.h> + + static int LogType = SOCK_DGRAM; /* type of socket connection */ + static int LogFile = -1; /* fd for log */ +@@ -122,8 +123,9 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, + { + /* Try to use a static buffer as an optimization. */ + char bufs[1024]; +- char *buf = NULL; +- size_t bufsize = 0; ++ char *buf = bufs; ++ size_t bufsize; ++ + int msgoff; + int saved_errno = errno; + +@@ -167,7 +169,7 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, _nl_C_locobj_ptr); #define SYSLOG_HEADER(__pri, __timestamp, __msgoff, pid) \ @@ -2458,19 +2504,74 @@ index 554089bfc4..f67d4b58a4 100644 __pri, __timestamp, __msgoff, \ LogTag == NULL ? __progname : LogTag, \ "[" + (pid == 0), pid, "]" + (pid == 0) -@@ -193,28 +193,32 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, - int vl = __vsnprintf_internal (bufs + l, sizeof bufs - l, fmt, apc, - mode_flags); - if (0 <= vl && vl < sizeof bufs - l) +@@ -175,53 +177,95 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, + #define SYSLOG_HEADER_WITHOUT_TS(__pri, __msgoff) \ + "<%d>: %n", __pri, __msgoff + +- int l; ++ int l, vl; + if (has_ts) + l = __snprintf (bufs, sizeof bufs, + SYSLOG_HEADER (pri, timestamp, &msgoff, pid)); + else + l = __snprintf (bufs, sizeof bufs, + SYSLOG_HEADER_WITHOUT_TS (pri, &msgoff)); +- if (0 <= l && l < sizeof bufs) ++ if (l < 0) ++ goto out; ++ ++ char *pos; ++ size_t len; ++ ++ if (l < sizeof bufs) + { +- va_list apc; +- va_copy (apc, ap); ++ /* At this point, there is still a chance that we can print the ++ remaining part of the log into bufs and use that. */ ++ pos = bufs + l; ++ len = sizeof (bufs) - l; ++ } ++ else ++ { ++ buf = NULL; ++ /* We already know that bufs is too small to use for this log message. ++ The next vsnprintf into bufs is used only to calculate the total ++ required buffer length. We will discard bufs contents and allocate ++ an appropriately sized buffer later instead. */ ++ pos = bufs; ++ len = sizeof (bufs); ++ } + +- /* Restore errno for %m format. */ +- __set_errno (saved_errno); ++ { ++ va_list apc; ++ va_copy (apc, ap); + +- int vl = __vsnprintf_internal (bufs + l, sizeof bufs - l, fmt, apc, +- mode_flags); +- if (0 <= vl && vl < sizeof bufs - l) - { - buf = bufs; - bufsize = l + vl; - } -+ buf = bufs; -+ bufsize = l + vl; ++ /* Restore errno for %m format. */ ++ __set_errno (saved_errno); - va_end (apc); - } +- va_end (apc); +- } ++ vl = __vsnprintf_internal (pos, len, fmt, apc, mode_flags); ++ va_end (apc); ++ ++ if (vl < 0 || vl >= INT_MAX - l) ++ goto out; ++ ++ if (vl >= len) ++ buf = NULL; ++ ++ bufsize = l + vl; ++ } if (buf == NULL) { @@ -2481,23 +2582,94 @@ index 554089bfc4..f67d4b58a4 100644 /* Tell the cancellation handler to free this buffer. */ clarg.buf = buf; ++ int cl; if (has_ts) - __snprintf (bufs, sizeof bufs, -+ __snprintf (buf, l + 1, - SYSLOG_HEADER (pri, timestamp, &msgoff, pid)); +- SYSLOG_HEADER (pri, timestamp, &msgoff, pid)); ++ cl = __snprintf (buf, l + 1, ++ SYSLOG_HEADER (pri, timestamp, &msgoff, pid)); else - __snprintf (bufs, sizeof bufs, -+ __snprintf (buf, l + 1, - SYSLOG_HEADER_WITHOUT_TS (pri, &msgoff)); +- SYSLOG_HEADER_WITHOUT_TS (pri, &msgoff)); ++ cl = __snprintf (buf, l + 1, ++ SYSLOG_HEADER_WITHOUT_TS (pri, &msgoff)); ++ if (cl != l) ++ goto out; + + va_list apc; + va_copy (apc, ap); -+ __vsnprintf_internal (buf + l, bufsize - l + 1, fmt, apc, -+ mode_flags); ++ cl = __vsnprintf_internal (buf + l, bufsize - l + 1, fmt, apc, ++ mode_flags); + va_end (apc); ++ ++ if (cl != vl) ++ goto out; } else { ++ int bl; + /* Nothing much to do but emit an error message. */ +- bufsize = __snprintf (bufs, sizeof bufs, +- "out of memory[%d]", __getpid ()); ++ bl = __snprintf (bufs, sizeof bufs, ++ "out of memory[%d]", __getpid ()); ++ if (bl < 0 || bl >= sizeof bufs) ++ goto out; ++ ++ bufsize = bl; + buf = bufs; ++ msgoff = 0; + } + } + +diff --git a/misc/tst-syslog-long-progname.c b/misc/tst-syslog-long-progname.c +new file mode 100644 +index 0000000000..88f37a8a00 +--- /dev/null ++++ b/misc/tst-syslog-long-progname.c +@@ -0,0 +1,39 @@ ++/* Test heap buffer overflow in syslog with long __progname (CVE-2023-6246) ++ Copyright (C) 2023 Free Software Foundation, Inc. ++ This file is part of the GNU C Library. ++ ++ The GNU C Library is free software; you can redistribute it and/or ++ modify it under the terms of the GNU Lesser General Public ++ License as published by the Free Software Foundation; either ++ version 2.1 of the License, or (at your option) any later version. ++ ++ The GNU C Library is distributed in the hope that it will be useful, ++ but WITHOUT ANY WARRANTY; without even the implied warranty of ++ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU ++ Lesser General Public License for more details. ++ ++ You should have received a copy of the GNU Lesser General Public ++ License along with the GNU C Library; if not, see ++ <https://www.gnu.org/licenses/>. */ ++ ++#include <syslog.h> ++#include <string.h> ++ ++extern char * __progname; ++ ++static int ++do_test (void) ++{ ++ char long_progname[2048]; ++ ++ memset (long_progname, 'X', sizeof (long_progname) - 1); ++ long_progname[sizeof (long_progname) - 1] = '\0'; ++ ++ __progname = long_progname; ++ ++ syslog (LOG_INFO, "Hello, World!"); ++ ++ return 0; ++} ++ ++#include <support/test-driver.c> +diff --git a/misc/tst-syslog-long-progname.root/postclean.req b/misc/tst-syslog-long-progname.root/postclean.req +new file mode 100644 +index 0000000000..e69de29bb2 diff --git a/misc/tst-syslog.c b/misc/tst-syslog.c index e550d15796..3560b518a2 100644 --- a/misc/tst-syslog.c @@ -8081,6 +8253,61 @@ index 2a82e53baf..d941024963 100644 #else register unsigned long thread_pointer __asm__ ("r2"); asm ("bcl 20,31,1f\n1:\t" +diff --git a/sysdeps/sparc/sparc32/memset.S b/sysdeps/sparc/sparc32/memset.S +index b1b67cb2d1..5154263317 100644 +--- a/sysdeps/sparc/sparc32/memset.S ++++ b/sysdeps/sparc/sparc32/memset.S +@@ -55,7 +55,7 @@ ENTRY(memset) + + andcc %o0, 3, %o2 + bne 3f +-4: andcc %o0, 4, %g0 ++5: andcc %o0, 4, %g0 + + be 2f + mov %g3, %g2 +@@ -139,7 +139,7 @@ ENTRY(memset) + stb %g3, [%o0 + 0x02] + 2: sub %o2, 4, %o2 + add %o1, %o2, %o1 +- b 4b ++ b 5b + sub %o0, %o2, %o0 + END(memset) + libc_hidden_builtin_def (memset) +diff --git a/sysdeps/sparc/sparc64/memmove.S b/sysdeps/sparc/sparc64/memmove.S +index 8d46f2cd4e..7746684160 100644 +--- a/sysdeps/sparc/sparc64/memmove.S ++++ b/sysdeps/sparc/sparc64/memmove.S +@@ -38,7 +38,7 @@ ENTRY(memmove) + /* + * normal, copy forwards + */ +-2: ble %XCC, .Ldbytecp ++2: bleu %XCC, .Ldbytecp + andcc %o1, 3, %o5 /* is src word aligned */ + bz,pn %icc, .Laldst + cmp %o5, 2 /* is src half-word aligned */ +diff --git a/sysdeps/sparc/sysdep.h b/sysdeps/sparc/sysdep.h +index 95068071cc..baab6817a6 100644 +--- a/sysdeps/sparc/sysdep.h ++++ b/sysdeps/sparc/sysdep.h +@@ -76,6 +76,15 @@ C_LABEL(name) \ + cfi_endproc; \ + .size name, . - name + ++#define ENTRY_NOCFI(name) \ ++ .align 4; \ ++ .global C_SYMBOL_NAME(name); \ ++ .type name, @function; \ ++C_LABEL(name) ++ ++#define END_NOCFI(name) \ ++ .size name, . - name ++ + #undef LOC + #define LOC(name) .L##name + diff --git a/sysdeps/unix/sysv/linux/Makefile b/sysdeps/unix/sysv/linux/Makefile index a139a16532..d5d9af4de2 100644 --- a/sysdeps/unix/sysv/linux/Makefile @@ -9480,6 +9707,47 @@ index ea38935497..f00817a6f6 100644 } #if __TIMESIZE != 64 libc_hidden_def (__shmctl64) +diff --git a/sysdeps/unix/sysv/linux/sparc/sparc32/sigreturn_stub.S b/sysdeps/unix/sysv/linux/sparc/sparc32/sigreturn_stub.S +index 2829e881eb..a1492ea59e 100644 +--- a/sysdeps/unix/sysv/linux/sparc/sparc32/sigreturn_stub.S ++++ b/sysdeps/unix/sysv/linux/sparc/sparc32/sigreturn_stub.S +@@ -23,12 +23,15 @@ + + [1] https://lkml.org/lkml/2016/5/27/465 */ + +-ENTRY (__rt_sigreturn_stub) ++ nop ++ nop ++ ++ENTRY_NOCFI (__rt_sigreturn_stub) + mov __NR_rt_sigreturn, %g1 + ta 0x10 +-END (__rt_sigreturn_stub) ++END_NOCFI (__rt_sigreturn_stub) + +-ENTRY (__sigreturn_stub) ++ENTRY_NOCFI (__sigreturn_stub) + mov __NR_sigreturn, %g1 + ta 0x10 +-END (__sigreturn_stub) ++END_NOCFI (__sigreturn_stub) +diff --git a/sysdeps/unix/sysv/linux/sparc/sparc64/sigreturn_stub.S b/sysdeps/unix/sysv/linux/sparc/sparc64/sigreturn_stub.S +index ac6af95e36..23b8b93f56 100644 +--- a/sysdeps/unix/sysv/linux/sparc/sparc64/sigreturn_stub.S ++++ b/sysdeps/unix/sysv/linux/sparc/sparc64/sigreturn_stub.S +@@ -23,7 +23,10 @@ + + [1] https://lkml.org/lkml/2016/5/27/465 */ + +-ENTRY (__rt_sigreturn_stub) ++ nop ++ nop ++ ++ENTRY_NOCFI (__rt_sigreturn_stub) + mov __NR_rt_sigreturn, %g1 + ta 0x6d +-END (__rt_sigreturn_stub) ++END_NOCFI (__rt_sigreturn_stub) diff --git a/sysdeps/unix/sysv/linux/sys/mount.h b/sysdeps/unix/sysv/linux/sys/mount.h index f965986ba8..19841d0738 100644 --- a/sysdeps/unix/sysv/linux/sys/mount.h @@ -10145,6 +10413,29 @@ index 0db2cb4152..7619e743e1 100644 movq -8(%rsp), %rdi ret .Lslow: +diff --git a/sysdeps/x86_64/ffsll.c b/sysdeps/x86_64/ffsll.c +index 842ebaeb4c..d352866d9f 100644 +--- a/sysdeps/x86_64/ffsll.c ++++ b/sysdeps/x86_64/ffsll.c +@@ -26,13 +26,13 @@ int + ffsll (long long int x) + { + long long int cnt; +- long long int tmp; + +- asm ("bsfq %2,%0\n" /* Count low bits in X and store in %1. */ +- "cmoveq %1,%0\n" /* If number was zero, use -1 as result. */ +- : "=&r" (cnt), "=r" (tmp) : "rm" (x), "1" (-1)); ++ asm ("mov $-1,%k0\n" /* Initialize cnt to -1. */ ++ "bsf %1,%0\n" /* Count low bits in x and store in cnt. */ ++ "inc %k0\n" /* Increment cnt by 1. */ ++ : "=&r" (cnt) : "r" (x)); + +- return cnt + 1; ++ return cnt; + } + + #ifndef __ILP32__ diff --git a/sysdeps/x86_64/fpu/fraiseexcpt.c b/sysdeps/x86_64/fpu/fraiseexcpt.c index 864f4777a2..23446ff4ac 100644 --- a/sysdeps/x86_64/fpu/fraiseexcpt.c

1 0

ports/opt (3.7): python3-mysqlclient: updated to version 2.2.3
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit 2d56e0178baea956fd23fcc84668cf91832bea71 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 5 11:04:35 2024 +0100 python3-mysqlclient: updated to version 2.2.3 diff --git a/python3-mysqlclient/.footprint b/python3-mysqlclient/.footprint index fbecafdac..bf1ebb4be 100644 --- a/python3-mysqlclient/.footprint +++ b/python3-mysqlclient/.footprint @@ -34,8 +34,8 @@ drwxr-xr-x root/root usr/lib/python3.10/site-packages/MySQLdb/constants/__pycach -rw-r--r-- root/root usr/lib/python3.10/site-packages/MySQLdb/cursors.py -rw-r--r-- root/root usr/lib/python3.10/site-packages/MySQLdb/release.py -rw-r--r-- root/root usr/lib/python3.10/site-packages/MySQLdb/times.py -drwxr-xr-x root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.2-py3.10.egg-info/ --rw-r--r-- root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.2-py3.10.egg-info/PKG-INFO --rw-r--r-- root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.2-py3.10.egg-info/SOURCES.txt --rw-r--r-- root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.2-py3.10.egg-info/dependency_links.txt --rw-r--r-- root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.2-py3.10.egg-info/top_level.txt +drwxr-xr-x root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.3-py3.10.egg-info/ +-rw-r--r-- root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.3-py3.10.egg-info/PKG-INFO +-rw-r--r-- root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.3-py3.10.egg-info/SOURCES.txt +-rw-r--r-- root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.3-py3.10.egg-info/dependency_links.txt +-rw-r--r-- root/root usr/lib/python3.10/site-packages/mysqlclient-2.2.3-py3.10.egg-info/top_level.txt diff --git a/python3-mysqlclient/.signature b/python3-mysqlclient/.signature index 74495d48c..b990595f4 100644 --- a/python3-mysqlclient/.signature +++ b/python3-mysqlclient/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/drwjPnLRfoZcPgzTLw5spwEOoImBSeGIOu9AA0bfqUJyFVFjuq4/1fzszD7m/PaixjzSRJyfbdcjp2NEA/GGAs= -SHA256 (Pkgfile) = 1feefffc8879e6b35fe5de973ab4cf89b104116bacab4783d2da60e2b97a030a -SHA256 (.footprint) = 5cdff9072e8838d8de0fcbfeda56fe1c9b94eb5e52732991ce5400cee32761fe -SHA256 (mysqlclient-2.2.2.tar.gz) = 6f57715fb08c80ab80d34febe0aa8ef8810e52d527ad7da2da76e8ce25e2f2e9 +RWSE3ohX2g5d/U1f49B8/5HprBYe7dm1/wDyVk6I2pLmxfckEI0XTiDYnhhSsEIdcGEAKJkj2l4ZEnrBsDO5ScH10DI3JsAVUAw= +SHA256 (Pkgfile) = 47eee6e4023718fcbe0ad8c4d82519f56e70ba0667ce972b319f1aaa9a8b94a2 +SHA256 (.footprint) = b9d9a67354c0ed8e5760103fc1c7d242d652f7a44ae0371e91e0de249f2935b5 +SHA256 (mysqlclient-2.2.3.tar.gz) = ee51656e36fc5a92920b807ee8b9e373e3b0e267c89cdc95d73b1dbe46863631 diff --git a/python3-mysqlclient/Pkgfile b/python3-mysqlclient/Pkgfile index 48531dd40..d660ef372 100644 --- a/python3-mysqlclient/Pkgfile +++ b/python3-mysqlclient/Pkgfile @@ -4,7 +4,7 @@ # Depends on: mariadb python3-setuptools name=python3-mysqlclient -version=2.2.2 +version=2.2.3 release=1 source=(https://pypi.org/packages/source/m/mysqlclient/mysqlclient-$version…

1 0

ports/opt (3.7): libxml2: updated to version 2.12.5
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit 476b0a5b7c1cee95a1a41f57bcc1a1e173184447 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 5 10:59:46 2024 +0100 libxml2: updated to version 2.12.5 diff --git a/libxml2/.footprint b/libxml2/.footprint index cc85ea5d5..884a5b845 100644 --- a/libxml2/.footprint +++ b/libxml2/.footprint @@ -57,9 +57,9 @@ drwxr-xr-x root/root usr/lib/cmake/ drwxr-xr-x root/root usr/lib/cmake/libxml2/ -rw-r--r-- root/root usr/lib/cmake/libxml2/libxml2-config.cmake -rwxr-xr-x root/root usr/lib/libxml2.la -lrwxrwxrwx root/root usr/lib/libxml2.so -> libxml2.so.2.12.4 -lrwxrwxrwx root/root usr/lib/libxml2.so.2 -> libxml2.so.2.12.4 --rwxr-xr-x root/root usr/lib/libxml2.so.2.12.4 +lrwxrwxrwx root/root usr/lib/libxml2.so -> libxml2.so.2.12.5 +lrwxrwxrwx root/root usr/lib/libxml2.so.2 -> libxml2.so.2.12.5 +-rwxr-xr-x root/root usr/lib/libxml2.so.2.12.5 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libxml-2.0.pc drwxr-xr-x root/root usr/lib/python3.10/ diff --git a/libxml2/.signature b/libxml2/.signature index 5c106a5cd..d37345058 100644 --- a/libxml2/.signature +++ b/libxml2/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/UqsonmJBCoLM6wj7o/GH2qUKOxr5RTm3ePd73NxZFBqSjDzY1xb5lWPkFAES8LMwF7z+zw/716kVtjy1qr81g0= -SHA256 (Pkgfile) = 336b45d7f919ab52c832315f07a0265638a1a1fdea4c9beb34f4e5f249824ea6 -SHA256 (.footprint) = 5c539008e876f0a025077e0080d1b803dccc4b6d36879ae926f3b29590582f5d -SHA256 (libxml2-2.12.4.tar.xz) = 497360e423cf0bd99eacdb7c6215dea92e6d6e89ee940393c2bae0e77cb9b7d0 +RWSE3ohX2g5d/T/s/1D/Zs3x/eY4A26aor+hYID2NBFupzEWIyoM9BCvjU9oE/weDmFnCr3bHOUL6uSrtdUBaDkimGEjRLZOyQI= +SHA256 (Pkgfile) = d1404ce02908ed3e5596cf9ee81011d46e11e7c411b1d225eb3cc099bd0bb3c8 +SHA256 (.footprint) = 10c73f16d3428d4a71c5165d3d8a350fa37f371824d6e7cb429c4fa53510e2f2 +SHA256 (libxml2-2.12.5.tar.xz) = a972796696afd38073e0f59c283c3a2f5a560b5268b4babc391b286166526b21 diff --git a/libxml2/Pkgfile b/libxml2/Pkgfile index a0abcc055..6d26149c9 100644 --- a/libxml2/Pkgfile +++ b/libxml2/Pkgfile @@ -4,7 +4,7 @@ # Depends on: zlib xz name=libxml2 -version=2.12.4 +version=2.12.5 release=1 source=(https://download.gnome.org/sources/libxml2/${version:0:4}/$name-$ve…

1 0

ports/opt (3.7): stunnel: updated to version 5.72
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit 1557e72a3d40f5c640b2d9769e798e31f88fc922 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 5 10:56:05 2024 +0100 stunnel: updated to version 5.72 diff --git a/stunnel/.signature b/stunnel/.signature index 35553e07b..9bfac941f 100644 --- a/stunnel/.signature +++ b/stunnel/.signature @@ -1,7 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/f99iaBsaSL+Njl5GpA5azqc9ud+iHOakc4GWgkpGgh/vCQrO40VskS2sdTjrfJ0gJ8CefRRCdvkrqMxLecTeAM= -SHA256 (Pkgfile) = 8eee15af3cf89b75c77a9d5289331c5650164ece769f5ca9401f3c3510ae9386 +RWSE3ohX2g5d/cv6HCXeR8DTSCkow73x/1goS4croZH0iuTqFcjgT1J0GxsWs6OfSHKKkM8ZJdlHQhd0BnYu7ZjB6KXf8ZlYHQM= +SHA256 (Pkgfile) = d6aef4e582a69672ed459695113c97f455fb8e4dc923300dc87d30ef09681588 SHA256 (.footprint) = fe22a3875f4d80b825fe529a35681487eec9e0d63efac00d19fe7b51399499f0 -SHA256 (stunnel-5.71.tar.gz) = f023aae837c2d32deb920831a5ee1081e11c78a5d57340f8e6f0829f031017f5 +SHA256 (stunnel-5.72.tar.gz) = 3d532941281ae353319735144e4adb9ae489a10b7e309c58a48157f08f42e949 SHA256 (stunnel.conf) = f8b29dc508583669fe6e853bf004c9aec50bb07cb94672d99effdb592f17e4ab SHA256 (stunnel) = e8867c4eeca0cd3cb48227851ba38c60972440b4171cc6f0a2173638b31626c7 diff --git a/stunnel/Pkgfile b/stunnel/Pkgfile index 1232be399..acc4e364d 100644 --- a/stunnel/Pkgfile +++ b/stunnel/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl zlib name=stunnel -version=5.71 +version=5.72 release=1 source=(https://www.stunnel.org/downloads/$name-$version.tar.gz \ $name.conf $name)

1 0

ports/opt (3.7): squid: updated to version 6.7
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit c129ebb21699269560ea18e53f08072225205d79 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 5 10:52:27 2024 +0100 squid: updated to version 6.7 diff --git a/squid/.signature b/squid/.signature index b18ea0116..c08053eb5 100644 --- a/squid/.signature +++ b/squid/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/U364iXnO5eooxaTDEd+QonLDkSIVkTTmJ46QzygcCFvNRTukrmUf7bxp1cw1ordGZV6BxijuxJQWPWpU6xTAA8= -SHA256 (Pkgfile) = 718b61feca214010246be39cd8c364e498463031e39c8bbc01583628a5230e46 +RWSE3ohX2g5d/bXRNk1oHeZz1yFRJmzD9h+M7nt5c+VSrwB1PXpxoH7gz6HHVkoIi1JrV2/z5q7a4omVN9slhTflslOVipaoVgQ= +SHA256 (Pkgfile) = 5b5b1c494d8102fc4ed326f5587b054e30eec73835815984c57aa4f0def8b097 SHA256 (.footprint) = 86ef6433e602fb7ce136697b81c5c3b04185d777ab56d06011fc72e4aa9dd653 -SHA256 (squid-6.6.tar.xz) = 55bd7f9f4898153161ea1228998acb551bf840832b9e5b90fc8ecd2942420318 +SHA256 (squid-6.7.tar.xz) = 0f701e1369bffab9ca348075fbb96eeba2f0e778382b0331e5c8f6541db6a42d SHA256 (squid) = c807a9373705537b648c38ed456ab016cc2fd7d40e6d47c20611931437588d96 diff --git a/squid/Pkgfile b/squid/Pkgfile index a449b8124..2960096da 100644 --- a/squid/Pkgfile +++ b/squid/Pkgfile @@ -5,7 +5,7 @@ # Optional: brotli gnutls krb5 libunistr libidn2 nettle tdb name=squid -version=6.6 +version=6.7 release=1 source=(http://www.squid-cache.org/Versions/v6/$name-$version.tar.xz squid)

1 0

ports/xorg (3.7): xorg-makedepend: updated to version 1.0.9
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit a6be880bcec2695d9b848efb01c4894fef1e3aaf Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 5 11:02:15 2024 +0100 xorg-makedepend: updated to version 1.0.9 diff --git a/xorg-makedepend/.signature b/xorg-makedepend/.signature index 0d2c3809..101735ec 100644 --- a/xorg-makedepend/.signature +++ b/xorg-makedepend/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndOIGxNXCtR2TaqwudIswDY1jT7JDjNMdoBASBEKkokSoKDlBIwpiHWS6YcZg7qkW9MgJQu0jNTrp7gamyaIXmwU= -SHA256 (Pkgfile) = 92ae6f3a84291dc834e006e7c4e113cf12d49d856c68804f6045246752182c6d +RWTSGWF5Q7TndHljJzCHo0YCv5cv2KUwhmolgkDj9UjheZRlK2jsU0mRFUsnFC7cva/AEJp7Im4QXO/EhvzjupLkEBbCmpyFNQM= +SHA256 (Pkgfile) = 50a0290f46a7798cecd9dc77146426f45c26952029ee7a623b6a930e1146a344 SHA256 (.footprint) = 2097c1a2badda167640613d21ca522a71557cdf6df7496cdb1355db3aa1526ea -SHA256 (makedepend-1.0.8.tar.xz) = bfb26f8025189b2a01286ce6daacc2af8fe647440b40bb741dd5c397572cba5b +SHA256 (makedepend-1.0.9.tar.xz) = 92d0deb659fff6d8ddbc1d27fc4ca8ceb2b6dbe15d73f0a04edc09f1c5782dd4 diff --git a/xorg-makedepend/Pkgfile b/xorg-makedepend/Pkgfile index b4a1e358..2d1ad378 100644 --- a/xorg-makedepend/Pkgfile +++ b/xorg-makedepend/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xorg-xorgproto name=xorg-makedepend -version=1.0.8 +version=1.0.9 release=1 source=(https://www.x.org/releases/individual/util/makedepend-$version.tar.…

1 0

ports/xorg (3.7): xorg-libxext: updated to version 1.3.6
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit 5fd25e40690f4c20b6c562fde2c37a1171590e81 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 5 10:22:39 2024 +0100 xorg-libxext: updated to version 1.3.6 diff --git a/xorg-libxext/.signature b/xorg-libxext/.signature index 90aa4315..475a8490 100644 --- a/xorg-libxext/.signature +++ b/xorg-libxext/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndO9AWF6dxL/S5UoNQhVuankxCjOMCLc9NkjkSrppYgwIPnSw9KGssvr/d21pREIWMoxKl2x+XfsTTelzFVgRfgU= -SHA256 (Pkgfile) = fdf80248d6d609f5eb6027dda34888feaa1a7c6de83b42ec77b68cd4ee735004 +RWTSGWF5Q7TndCRojl5QGdTGU+BE+o+c1jpfpPLbm1P0BG3aLf/hIT7dbj25t0XBisoUZDiCLpyyqeN1/Wm7zPb/z5HJh5TWBw4= +SHA256 (Pkgfile) = e36bf0d78a7deaba1a380837e711c54eb09ad365e1f331b2f98565043e7872e7 SHA256 (.footprint) = 12f2fedaf5e030c40535876efe3e1bf9cc3fc7e80f69b90b5e096e057587f7dc -SHA256 (libXext-1.3.5.tar.xz) = db14c0c895c57ea33a8559de8cb2b93dc76c42ea4a39e294d175938a133d7bca +SHA256 (libXext-1.3.6.tar.xz) = edb59fa23994e405fdc5b400afdf5820ae6160b94f35e3dc3da4457a16e89753 diff --git a/xorg-libxext/Pkgfile b/xorg-libxext/Pkgfile index c7dbee7c..c02753d5 100644 --- a/xorg-libxext/Pkgfile +++ b/xorg-libxext/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xorg-libx11 name=xorg-libxext -version=1.3.5 +version=1.3.6 release=1 source=(https://www.x.org/releases/individual/lib/libXext-$version.tar.xz)

1 0

ports/xorg (3.7): xorg-libxvmc: updated to version 1.0.14
by crux＠crux.nu 05 Feb '24

05 Feb '24

commit a7b3100e6223c342d3823eaf33a4032fc0bd5c8c Author: Juergen Daubert <jue(a)jue.li> Date: Mon Feb 5 10:37:20 2024 +0100 xorg-libxvmc: updated to version 1.0.14 diff --git a/xorg-libxvmc/.signature b/xorg-libxvmc/.signature index 1af2044e..fe4512ca 100644 --- a/xorg-libxvmc/.signature +++ b/xorg-libxvmc/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndKbBRYx1sgbM1wrIGFBoKOJhx0xvQQ090OIuMDqnKi3z+t5Q20a7GCOnrg2+i2zlNJH2LRHO+Oa6hjoGG8b4KAE= -SHA256 (Pkgfile) = bc86c91421506c336bf19ac0425601ac322dbe401080412dceb229ca541a6c40 +RWTSGWF5Q7TndIu9JpgC/U1WMp3Zn1nE6VH/JFdgPNahnY4uTmkNWFflr5bSlOQyamwwF58obt53Zh1yv+idbnJlDY+w/xnCLQ0= +SHA256 (Pkgfile) = d941e79646ac67d10a1e11c1689276746d3d0abf6c2573a219d46308933fc47c SHA256 (.footprint) = 79223968225eb145500793faed2c1e9b7b3862c47ad9934ef30b34f607b68d06 -SHA256 (libXvMC-1.0.13.tar.xz) = 0a9ebe6dea7888a747e5aca1b891d53cd7d3a5f141a9645f77d9b6a12cee657c +SHA256 (libXvMC-1.0.14.tar.xz) = e4be9eb6b6bafdbbf81f47f7163047215376e45e2dc786d0ea6181c930725ed9 diff --git a/xorg-libxvmc/Pkgfile b/xorg-libxvmc/Pkgfile index d28f8ef8..8b11e4dd 100644 --- a/xorg-libxvmc/Pkgfile +++ b/xorg-libxvmc/Pkgfile @@ -4,8 +4,8 @@ # Depends on: meson ninja xorg-libxv name=xorg-libxvmc -version=1.0.13 -release=2 +version=1.0.14 +release=1 source=(https://www.x.org/releases/individual/lib/libXvMC-$version.tar.xz) build() {

1 0