October 2007 - CRUX - lists.crux.nu

binutils-2.18 texinfo-4.11 build failure
by Clemens Koller 15 Oct '07

15 Oct '07

Hi, There! The latest binutils-2.18 don't build correctly with the latest texinfo-4.11 is installed: make[4]: Leaving directory `/usr/ports/ckcore/binutils-2.18/work/src/build/bfd/doc' ./chew -f ../../../binutils-2.18/bfd/doc/doc.str <../../../binutils-2.18/bfd/doc/../elf.c >elf.tmp /bin/sh ../../../binutils-2.18/bfd/doc/../../move-if-change elf.tmp elf.texi restore=: && backupdir=".am$$" && \ rm -rf $backupdir && mkdir $backupdir && \ if (/usr/ports/ckcore/binutils-2.18/work/src/binutils-2.18/missing makeinfo --split-size=5000000 --spl it-size=5000000 --version) >/dev/null 2>&1; then \ for f in bfd.info bfd.info-[0-9] bfd.info-[0-9][0-9] bfd.i[0-9] bfd.i[0-9][0-9]; do \ if test -f $f; then mv $f $backupdir; restore=mv; else :; fi; \ done; \ else :; fi && \ if /usr/ports/ckcore/binutils-2.18/work/src/binutils-2.18/missing makeinfo --split-size=5000000 --spli t-size=5000000 -I ../../../binutils-2.18/bfd/doc \ -o bfd.info `test -f 'bfd.texinfo' || echo '../../../binutils-2.18/bfd/doc/'`bfd.texinfo; \ then \ rc=0; \ else \ rc=$?; \ $restore $backupdir/* `echo "./bfd.info" | sed 's|[^/]*$||'`; \ fi; \ rm -rf $backupdir; exit $rc WARNING: `makeinfo' is missing on your system. You should only need it if you modified a `.texi' or `.texinfo' file, or any other file indirectly affecting the aspect of the manual. The spurious call might also be the consequence of using a buggy `make' (AIX, DU, IRIX). You might want to install the `Texinfo' package or the `GNU make' package. Grab either from any GNU archive site. make[3]: *** [bfd.info] Error 1 make[3]: Leaving directory `/usr/ports/ckcore/binutils-2.18/work/src/build/bfd/doc' ... ...because binutils it doesn't properly check for the two digit 4.xx version number of makeinfo (which is part of texinfo). For more information and a little patch see: http://sourceware.org/ml/binutils/2007-09/msg00240.html Regards, -- Clemens Koller __________________________________ R&D Imaging Devices Anagramm GmbH Rupert-Mayer-Straße 45/1 Linhof Werksgelände D-81379 München Tel.089-741518-50 Fax 089-741518-19 http://www.anagramm-technology.com

1 1

[PATCH]: Make rc sh-compatible.
by Brett Goulder 15 Oct '07

15 Oct '07

I know it was brought up for 2.4 and reading over the logs for the devel meeting, I saw that the conses was "wait until someone else does it", more or less. Well, I actually wound up doing it last night, attached is a patch against rc with the discussed and approved changes to move syslog handling, making rc sh-compatible. -- ~predatorfreak GnuPG Public key: http://pred.dcaf-security.org/dcafsec-pub-gpgkey.asc

5 8

Ron Paul THE man for our time
by Mike VanRoy 11 Oct '07

11 Oct '07

This is probably the best video I've seen as an introduction for Ron Paul. I am sending it to my entire address book, so if you get it and you consider it spam, I apologize, just delete it. Hopefully you will be able to see it and if you think it important, send it to everyone you can. http://www.youtube.com/watch?v=FG2PUZoukfA

3 2

die happy CRUX
by Matthias-Christian Ott 08 Oct '07

08 Oct '07

Hi, I started using CRUX GNU/Linux in October 2006. I was fascinated by its simplicity and decided to continue using it. I especially liked pkgutils and the ports system. I am exacting regarding package management, because I think it is the main aspect that makes a distribution unique (all distribution provide roughly the same software, but have a different package manager and design philosophy). My first contribution to CRUX was the libarchive support for pkgutils (FS#121). I took a month to get this feature into the git repository. There were some trivial problems with libarchive, but it became apparent to me that CRUX had maintenance problems. I was not really happy about this fact, but I pretended myself that this was not a real problem. At the same time I started maintaining my own ports collection which consists (after a cleanup) over 30 ports. I tried to merge some patches for ports in the opt repository and sent them to the port maintainers, but I never got a reply. Therefore I maintain them now in my own repository. But all these incidents never discouraged me from using and liking CRUX. I was not happy about the situation, but I neither wanted to fork yet another distribution nor I wanted to switch to another. In May 2007 tried to integrate libtre in pkgutils without any success. This was not a matter of great importance to me, but I had real doubts about the organisation of CRUX from that on. I tried to get a developer account and proper e-mail address on the CRUX server in order to be able to participate in development, maintenance and organisation, but nobody replied, my e-mails were rejected. I contacted Per and told him about my plans, but he could not really help me, because he was not a CRUX developer anymore. That was all in the past. Today I think CRUX has reached its zenith. It will die a slow and silent death. Perhaps this will take months or years; it is just a matter of time. CRUX lost its importance, its fans and community. It is hierarchically structured and slowly developing. When I recognised that the C++ version of pkgutils was going to be replaced by a C version, I knew that this would have far reaching consequences for the design and philosophy of CRUX. I think it is not longer the great design philosophy of Per Lidén; it is not longer the thing I liked about CRUX. But generally speaking we (the community) bear the guilt for its death. We did not stop the death, we agreed with the decisions and decided to support this development. Nevertheless it is not to late to stop this process and revitalise CRUX. Everything depends on us! I thought about the future of CRUX and conceived some ideas and demands: * restructuring of the development process (patch queues, better issue tracker, more transparent development and release process, public discussions, development teams, ...) * open ports system (easier updating, submission and maintenance, open to anyone) * entirely public wiki * (perhaps) merge with CRUX-PPC * automatic version, standards and integration tests for Pkgfiles * more precise and stricter packaging standards * no more footprint mismatches (isolated builds, USE flags like system) * complete localisation (no --disable-nls, ...) * (simple) Pkgfile standard library (common mirrors, functions) * multiple architectures * improvement of pkgutils (attribute, hooks/events, pkgutils library) * redesign of prt-get * git repository cleanups * ... Let us (the community) take over the development of CRUX! We are the people, we can change our distribution! The future of CRUX is up to you! You can decide on your own! -- Matthias-Christian Ott

11 39

ports/core (2.4): [notify] openssl: fix for CVE-2007-5135 See http://www.securityfocus.com/bid/25831
by crux＠crux.nu 08 Oct '07

08 Oct '07

commit 9a46286a22116b36846ab8afaef0f31ae7bb03b1 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Oct 8 11:15:39 2007 +0200 [notify] openssl: fix for CVE-2007-5135 See http://www.securityfocus.com/bid/25831 diff --git a/openssl/.md5sum b/openssl/.md5sum index a9a40d3..cc999da 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,4 +1,5 @@ 30ad2995a2668db16ae3083c11a42307 CVE-2007-3108.patch +21119cb0b942c835395d7f57530ba14a CVE-2007-5135.patch 9d0df57845af8acd1027a7df5c18d017 mksslcert.sh 58daa890c3bc19bd6ce3451b2e5e335c openssl-0.9.8b-parallel-build.patch 3a7ff24f6ea5cd711984722ad654b927 openssl-0.9.8e.tar.gz diff --git a/openssl/CVE-2007-5135.patch b/openssl/CVE-2007-5135.patch new file mode 100644 index 0000000..ed3b0fd --- /dev/null +++ b/openssl/CVE-2007-5135.patch @@ -0,0 +1,46 @@ +openssl/ssl/ssl_lib.c 1.133.2.9 -> 1.133.2.10 + +--- ssl_lib.c 2007/08/12 18:59:02 1.133.2.9 ++++ ssl_lib.c 2007/09/19 12:16:21 1.133.2.10 +@@ -1210,7 +1210,6 @@ + char *SSL_get_shared_ciphers(const SSL *s,char *buf,int len) + { + char *p; +- const char *cp; + STACK_OF(SSL_CIPHER) *sk; + SSL_CIPHER *c; + int i; +@@ -1223,20 +1222,21 @@ + sk=s->session->ciphers; + for (i=0; i<sk_SSL_CIPHER_num(sk); i++) + { +- /* Decrement for either the ':' or a '\0' */ +- len--; ++ int n; ++ + c=sk_SSL_CIPHER_value(sk,i); +- for (cp=c->name; *cp; ) ++ n=strlen(c->name); ++ if (n+1 > len) + { +- if (len-- <= 0) +- { +- *p='\0'; +- return(buf); +- } +- else +- *(p++)= *(cp++); ++ if (p != buf) ++ --p; ++ *p='\0'; ++ return buf; + } ++ strcpy(p,c->name); ++ p+=n; + *(p++)=':'; ++ len-=n+1; + } + p[-1]='\0'; + return(buf); + + diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 10c23da..64a90dd 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -4,14 +4,15 @@ name=openssl version=0.9.8e -release=2 +release=3 source=(http://www.openssl.org/source/$name-$version.tar.gz \ mksslcert.sh openssl-0.9.8b-parallel-build.patch \ - CVE-2007-3108.patch) + CVE-2007-3108.patch CVE-2007-5135.patch) build() { cd $name-$version patch -p1 -i $SRC/CVE-2007-3108.patch + patch -p0 -d ssl -i $SRC/CVE-2007-5135.patch patch -p1 -i $SRC/openssl-0.9.8b-parallel-build.patch ./config --prefix=/usr --openssldir=/etc/ssl shared make

1 0

ports/core (2.3): [notify] openssl: fix for CVE-2007-5135 See http://www.securityfocus.com/bid/25831
by crux＠crux.nu 08 Oct '07

08 Oct '07

commit 9a46286a22116b36846ab8afaef0f31ae7bb03b1 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Oct 8 11:15:39 2007 +0200 [notify] openssl: fix for CVE-2007-5135 See http://www.securityfocus.com/bid/25831 diff --git a/openssl/.md5sum b/openssl/.md5sum index a9a40d3..cc999da 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,4 +1,5 @@ 30ad2995a2668db16ae3083c11a42307 CVE-2007-3108.patch +21119cb0b942c835395d7f57530ba14a CVE-2007-5135.patch 9d0df57845af8acd1027a7df5c18d017 mksslcert.sh 58daa890c3bc19bd6ce3451b2e5e335c openssl-0.9.8b-parallel-build.patch 3a7ff24f6ea5cd711984722ad654b927 openssl-0.9.8e.tar.gz diff --git a/openssl/CVE-2007-5135.patch b/openssl/CVE-2007-5135.patch new file mode 100644 index 0000000..ed3b0fd --- /dev/null +++ b/openssl/CVE-2007-5135.patch @@ -0,0 +1,46 @@ +openssl/ssl/ssl_lib.c 1.133.2.9 -> 1.133.2.10 + +--- ssl_lib.c 2007/08/12 18:59:02 1.133.2.9 ++++ ssl_lib.c 2007/09/19 12:16:21 1.133.2.10 +@@ -1210,7 +1210,6 @@ + char *SSL_get_shared_ciphers(const SSL *s,char *buf,int len) + { + char *p; +- const char *cp; + STACK_OF(SSL_CIPHER) *sk; + SSL_CIPHER *c; + int i; +@@ -1223,20 +1222,21 @@ + sk=s->session->ciphers; + for (i=0; i<sk_SSL_CIPHER_num(sk); i++) + { +- /* Decrement for either the ':' or a '\0' */ +- len--; ++ int n; ++ + c=sk_SSL_CIPHER_value(sk,i); +- for (cp=c->name; *cp; ) ++ n=strlen(c->name); ++ if (n+1 > len) + { +- if (len-- <= 0) +- { +- *p='\0'; +- return(buf); +- } +- else +- *(p++)= *(cp++); ++ if (p != buf) ++ --p; ++ *p='\0'; ++ return buf; + } ++ strcpy(p,c->name); ++ p+=n; + *(p++)=':'; ++ len-=n+1; + } + p[-1]='\0'; + return(buf); + + diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 10c23da..64a90dd 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -4,14 +4,15 @@ name=openssl version=0.9.8e -release=2 +release=3 source=(http://www.openssl.org/source/$name-$version.tar.gz \ mksslcert.sh openssl-0.9.8b-parallel-build.patch \ - CVE-2007-3108.patch) + CVE-2007-3108.patch CVE-2007-5135.patch) build() { cd $name-$version patch -p1 -i $SRC/CVE-2007-3108.patch + patch -p0 -d ssl -i $SRC/CVE-2007-5135.patch patch -p1 -i $SRC/openssl-0.9.8b-parallel-build.patch ./config --prefix=/usr --openssldir=/etc/ssl shared make

1 0