February 2013 - CRUX - lists.crux.nu

ports/opt (2.8): [notify] flash-player-plugin: updated to 11.2.202.270
by crux＠crux.nu 14 Feb '13

14 Feb '13

commit b8b5e341259f8bb154c58a0c58a84918b8866212 Author: Jose V Beneyto <sepen(a)crux.nu> Date: Thu Feb 14 12:22:14 2013 +0100 [notify] flash-player-plugin: updated to 11.2.202.270 Security update: http://www.adobe.com/support/security/bulletins/apsb13-05.html diff --git a/flash-player-plugin/.md5sum b/flash-player-plugin/.md5sum index dad66d8..79c3534 100644 --- a/flash-player-plugin/.md5sum +++ b/flash-player-plugin/.md5sum @@ -1 +1 @@ -5d321f0c28b39e327191e07383608ef7 flash-plugin-11.2.202.262-release.i386.rpm +6cff193d090766f3926fafdb7868b345 flash-plugin-11.2.202.270-release.i386.rpm diff --git a/flash-player-plugin/Pkgfile b/flash-player-plugin/Pkgfile index 421adbf..50e2e6a 100644 --- a/flash-player-plugin/Pkgfile +++ b/flash-player-plugin/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=flash-player-plugin -version=11.2.202.262 +version=11.2.202.270 release=1 source=(http://fpdownload.macromedia.com/get/flashplayer/pdc/$version/flash…

1 0

ports/opt (3.0): [notify] flash-player-plugin: updated to 11.2.202.270
by crux＠crux.nu 14 Feb '13

14 Feb '13

commit a1c132ce09a60934c7711ab9f603fc004f7f7ea1 Author: Jose V Beneyto <sepen(a)crux.nu> Date: Thu Feb 14 12:12:14 2013 +0100 [notify] flash-player-plugin: updated to 11.2.202.270 Security update: http://www.adobe.com/support/security/bulletins/apsb13-05.html diff --git a/flash-player-plugin/.md5sum b/flash-player-plugin/.md5sum index e6a59a7..d6fd443 100644 --- a/flash-player-plugin/.md5sum +++ b/flash-player-plugin/.md5sum @@ -1 +1 @@ -13a8bba37ae95cbacb2b8ae15f0a5309 install_flash_player_11_linux.x86_64.tar.gz +a95a8d4049bde90e5dc8e2e394275c42 install_flash_player_11_linux.x86_64.tar.gz diff --git a/flash-player-plugin/Pkgfile b/flash-player-plugin/Pkgfile index e7864e0..ef6e31b 100644 --- a/flash-player-plugin/Pkgfile +++ b/flash-player-plugin/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=flash-player-plugin -version=11.2.202.262 +version=11.2.202.270 release=1 source=(http://fpdownload.macromedia.com/get/flashplayer/pdc/$version/insta…

1 0

help for porting Cinnamon to Crux
by Roelof Wobben 13 Feb '13

13 Feb '13

Hello, I try for several weeks to port the Cinnamon desktop to crux.But im very stuck and the Cinnamon people cannot help me. So is there some experienced Crux developer who can help me to solve this puzzle : https://github.com/linuxmint/muffin/issues/67Otherwise it's impossible to port this one. Roelof

1 0

make file adaptions problem
by Roelof Wobben 13 Feb '13

13 Feb '13

Hello, I want to make Muffin work on Crux linux but now I don't have a clue how to solve this errors: main : scanfiles() called to early to check prototype at /usr/bin/aclocal line 643 src/Makefile.am : 203 : HAVE_INTROSPECTION does not appear in AM-CONDITIONAL src/Makefile.am: 228 filter %.c.$(libmuffin_la_sources) : non POSIX variable name src/Makefile.am: 228 propaly gnu make extension autoreconf : automake failed with exit status 1 What I did was let prt-get download en install the packages and keep the working directory.Then I goto the src/muffin directory and did autoreconf automake And get into these errors. Can and is someone willing me to solve this one ? Regards, Roelof

1 0

ports/core (2.8): [notify] glibc: security fix for CVE-2013-0242
by crux＠crux.nu 13 Feb '13

13 Feb '13

commit 389154c5a832666c2593cd099e63156311174241 Author: Juergen Daubert <jue(a)jue.li> Date: Wed Feb 13 10:01:13 2013 +0100 [notify] glibc: security fix for CVE-2013-0242 See - http://sourceware.org/bugzilla/show_bug.cgi?id=15078 - http://www.security-database.com/detail.php?alert=CVE-2013-0242 Note: To avoid an unclean unmount of "/" on next shutdown, reload the init process after the glibc update. Either run the included post-install script or use the following command: /sbin/telinit U diff --git a/glibc/.md5sum b/glibc/.md5sum index aab4760..6621b5b 100644 --- a/glibc/.md5sum +++ b/glibc/.md5sum @@ -1,4 +1,5 @@ 80b181b02ab249524ec92822c0174cf7 glibc-2.16.0.tar.xz +d4a2a19efe1e9b59b86fd15a968f7e10 glibc-regexp_buffer_overrun.patch 7e6a5a13c37f93213db9803d9790b7de glibc-resolv_assert.patch 99ed7b88221475d51a073f00d7ee9c42 glibc-segfault_in_strncasecmp.patch 8be5a4516a896a4cd589134ccf113575 glibc-strtod_integer_overflow.patch diff --git a/glibc/Pkgfile b/glibc/Pkgfile index 6510c0a..d6c9493 100644 --- a/glibc/Pkgfile +++ b/glibc/Pkgfile @@ -4,13 +4,14 @@ name=glibc version=2.16.0 -release=2 +release=3 source=(http://ftp.gnu.org/gnu/glibc/glibc-$version.tar.xz \ http://crux.nu/files/distfiles/kernel-headers-3.4.11.tar.xz \ hosts resolv.conf nsswitch.conf host.conf ld.so.conf \ $name-resolv_assert.patch \ $name-segfault_in_strncasecmp.patch \ - $name-strtod_integer_overflow.patch) + $name-strtod_integer_overflow.patch \ + $name-regexp_buffer_overrun.patch) build() { # install kernel headers @@ -21,6 +22,7 @@ build() { patch -p1 -d $name-$version -i $SRC/$name-resolv_assert.patch patch -p1 -d $name-$version -i $SRC/$name-segfault_in_strncasecmp.patch patch -p1 -d $name-$version -i $SRC/$name-strtod_integer_overflow.patch + patch -p1 -d $name-$version -i $SRC/$name-regexp_buffer_overrun.patch mkdir build cd build diff --git a/glibc/glibc-regexp_buffer_overrun.patch b/glibc/glibc-regexp_buffer_overrun.patch new file mode 100644 index 0000000..a786961 --- /dev/null +++ b/glibc/glibc-regexp_buffer_overrun.patch @@ -0,0 +1,72 @@ +# http://sourceware.org/bugzilla/show_bug.cgi?id=15078 +# CVE-2013-0242 +# ChangeLog, NEWS and new test removed to apply clean + +commit a445af0bc722d620afed7683cd320c0e4c7c6059 +Author: Andreas Schwab <schwab(a)suse.de> +Date: Tue Jan 29 14:45:15 2013 +0100 + + Fix buffer overrun in regexp matcher + +diff --git a/posix/regexec.c b/posix/regexec.c +index 7f2de85..5ca2bf6 100644 +--- a/posix/regexec.c ++++ b/posix/regexec.c +@@ -197,7 +197,7 @@ static int group_nodes_into_DFAstates (const re_dfa_t *dfa, + static int check_node_accept (const re_match_context_t *mctx, + const re_token_t *node, int idx) + internal_function; +-static reg_errcode_t extend_buffers (re_match_context_t *mctx) ++static reg_errcode_t extend_buffers (re_match_context_t *mctx, int min_len) + internal_function; + + /* Entry point for POSIX code. */ +@@ -1160,7 +1160,7 @@ check_matching (re_match_context_t *mctx, int fl_longest_match, + || (BE (next_char_idx >= mctx->input.valid_len, 0) + && mctx->input.valid_len < mctx->input.len)) + { +- err = extend_buffers (mctx); ++ err = extend_buffers (mctx, next_char_idx + 1); + if (BE (err != REG_NOERROR, 0)) + { + assert (err == REG_ESPACE); +@@ -1738,7 +1738,7 @@ clean_state_log_if_needed (re_match_context_t *mctx, int next_state_log_idx) + && mctx->input.valid_len < mctx->input.len)) + { + reg_errcode_t err; +- err = extend_buffers (mctx); ++ err = extend_buffers (mctx, next_state_log_idx + 1); + if (BE (err != REG_NOERROR, 0)) + return err; + } +@@ -2792,7 +2792,7 @@ get_subexp (re_match_context_t *mctx, int bkref_node, int bkref_str_idx) + if (bkref_str_off >= mctx->input.len) + break; + +- err = extend_buffers (mctx); ++ err = extend_buffers (mctx, bkref_str_off + 1); + if (BE (err != REG_NOERROR, 0)) + return err; + +@@ -4102,7 +4102,7 @@ check_node_accept (const re_match_context_t *mctx, const re_token_t *node, + + static reg_errcode_t + internal_function __attribute_warn_unused_result__ +-extend_buffers (re_match_context_t *mctx) ++extend_buffers (re_match_context_t *mctx, int min_len) + { + reg_errcode_t ret; + re_string_t *pstr = &mctx->input; +@@ -4111,8 +4111,10 @@ extend_buffers (re_match_context_t *mctx) + if (BE (INT_MAX / 2 / sizeof (re_dfastate_t *) <= pstr->bufs_len, 0)) + return REG_ESPACE; + +- /* Double the lengthes of the buffers. */ +- ret = re_string_realloc_buffers (pstr, MIN (pstr->len, pstr->bufs_len * 2)); ++ /* Double the lengthes of the buffers, but allocate at least MIN_LEN. */ ++ ret = re_string_realloc_buffers (pstr, ++ MAX (min_len, ++ MIN (pstr->len, pstr->bufs_len * 2))); + if (BE (ret != REG_NOERROR, 0)) + return ret; +

1 0

ports/core (3.0): [notify] glibc: security fix for CVE-2013-0242
by crux＠crux.nu 12 Feb '13

12 Feb '13

commit be5eaa216f7c1a15340463725dc4591b89d2f267 Author: Juergen Daubert <jue(a)jue.li> Date: Tue Feb 12 23:33:02 2013 +0100 [notify] glibc: security fix for CVE-2013-0242 See - http://sourceware.org/bugzilla/show_bug.cgi?id=15078 - http://www.security-database.com/detail.php?alert=CVE-2013-0242 Note: To avoid an unclean unmount of "/" on next shutdown, reload the init process after the glibc update. Either run the included post-install script or use the following command: /sbin/telinit U diff --git a/glibc/.md5sum b/glibc/.md5sum index c827dcd..e1889ee 100644 --- a/glibc/.md5sum +++ b/glibc/.md5sum @@ -1,5 +1,6 @@ 3402b18f924954aa68d1d59ed378545f glibc-2.16.0-multilib-dirs.patch 80b181b02ab249524ec92822c0174cf7 glibc-2.16.0.tar.xz +d4a2a19efe1e9b59b86fd15a968f7e10 glibc-regexp_buffer_overrun.patch 7e6a5a13c37f93213db9803d9790b7de glibc-resolv_assert.patch 99ed7b88221475d51a073f00d7ee9c42 glibc-segfault_in_strncasecmp.patch 8be5a4516a896a4cd589134ccf113575 glibc-strtod_integer_overflow.patch diff --git a/glibc/Pkgfile b/glibc/Pkgfile index f94fe9f..0b8f65d 100644 --- a/glibc/Pkgfile +++ b/glibc/Pkgfile @@ -4,14 +4,15 @@ name=glibc version=2.16.0 -release=3 +release=4 source=(http://ftp.gnu.org/gnu/glibc/glibc-$version.tar.xz \ http://crux.nu/files/distfiles/kernel-headers-3.4.11.tar.xz \ $name-$version-multilib-dirs.patch \ hosts resolv.conf nsswitch.conf host.conf ld.so.conf \ $name-resolv_assert.patch \ $name-segfault_in_strncasecmp.patch \ - $name-strtod_integer_overflow.patch) + $name-strtod_integer_overflow.patch \ + $name-regexp_buffer_overrun.patch) build() { # install kernel headers @@ -22,6 +23,7 @@ build() { patch -p1 -d $name-$version -i $SRC/$name-resolv_assert.patch patch -p1 -d $name-$version -i $SRC/$name-segfault_in_strncasecmp.patch patch -p1 -d $name-$version -i $SRC/$name-strtod_integer_overflow.patch + patch -p1 -d $name-$version -i $SRC/$name-regexp_buffer_overrun.patch patch -p1 -d $name-$version -i $SRC/$name-$version-multilib-dirs.patch mkdir build diff --git a/glibc/glibc-regexp_buffer_overrun.patch b/glibc/glibc-regexp_buffer_overrun.patch new file mode 100644 index 0000000..a786961 --- /dev/null +++ b/glibc/glibc-regexp_buffer_overrun.patch @@ -0,0 +1,72 @@ +# http://sourceware.org/bugzilla/show_bug.cgi?id=15078 +# CVE-2013-0242 +# ChangeLog, NEWS and new test removed to apply clean + +commit a445af0bc722d620afed7683cd320c0e4c7c6059 +Author: Andreas Schwab <schwab(a)suse.de> +Date: Tue Jan 29 14:45:15 2013 +0100 + + Fix buffer overrun in regexp matcher + +diff --git a/posix/regexec.c b/posix/regexec.c +index 7f2de85..5ca2bf6 100644 +--- a/posix/regexec.c ++++ b/posix/regexec.c +@@ -197,7 +197,7 @@ static int group_nodes_into_DFAstates (const re_dfa_t *dfa, + static int check_node_accept (const re_match_context_t *mctx, + const re_token_t *node, int idx) + internal_function; +-static reg_errcode_t extend_buffers (re_match_context_t *mctx) ++static reg_errcode_t extend_buffers (re_match_context_t *mctx, int min_len) + internal_function; + + /* Entry point for POSIX code. */ +@@ -1160,7 +1160,7 @@ check_matching (re_match_context_t *mctx, int fl_longest_match, + || (BE (next_char_idx >= mctx->input.valid_len, 0) + && mctx->input.valid_len < mctx->input.len)) + { +- err = extend_buffers (mctx); ++ err = extend_buffers (mctx, next_char_idx + 1); + if (BE (err != REG_NOERROR, 0)) + { + assert (err == REG_ESPACE); +@@ -1738,7 +1738,7 @@ clean_state_log_if_needed (re_match_context_t *mctx, int next_state_log_idx) + && mctx->input.valid_len < mctx->input.len)) + { + reg_errcode_t err; +- err = extend_buffers (mctx); ++ err = extend_buffers (mctx, next_state_log_idx + 1); + if (BE (err != REG_NOERROR, 0)) + return err; + } +@@ -2792,7 +2792,7 @@ get_subexp (re_match_context_t *mctx, int bkref_node, int bkref_str_idx) + if (bkref_str_off >= mctx->input.len) + break; + +- err = extend_buffers (mctx); ++ err = extend_buffers (mctx, bkref_str_off + 1); + if (BE (err != REG_NOERROR, 0)) + return err; + +@@ -4102,7 +4102,7 @@ check_node_accept (const re_match_context_t *mctx, const re_token_t *node, + + static reg_errcode_t + internal_function __attribute_warn_unused_result__ +-extend_buffers (re_match_context_t *mctx) ++extend_buffers (re_match_context_t *mctx, int min_len) + { + reg_errcode_t ret; + re_string_t *pstr = &mctx->input; +@@ -4111,8 +4111,10 @@ extend_buffers (re_match_context_t *mctx) + if (BE (INT_MAX / 2 / sizeof (re_dfastate_t *) <= pstr->bufs_len, 0)) + return REG_ESPACE; + +- /* Double the lengthes of the buffers. */ +- ret = re_string_realloc_buffers (pstr, MIN (pstr->len, pstr->bufs_len * 2)); ++ /* Double the lengthes of the buffers, but allocate at least MIN_LEN. */ ++ ret = re_string_realloc_buffers (pstr, ++ MAX (min_len, ++ MIN (pstr->len, pstr->bufs_len * 2))); + if (BE (ret != REG_NOERROR, 0)) + return ret; +

1 0

automake 1.11
by Roelof Wobben 12 Feb '13

12 Feb '13

Hello, I have a problem with porting Muffin to Crux.Now I have learned that Fedora uses automake 1.11 where as Crux uses 1.13. Can I without problem temporarily downgrade automake to 1.11 so I can verify that 1.13 is the problem. And if so, is this the rigth way. - uninstall automake - change the Pkgfile - build and install the downgraded version. Regards, Roelof

2 1

ports/core (2.8): [notify] openssl: update to 1.0.1e
by crux＠crux.nu 12 Feb '13

12 Feb '13

commit 5442ef2b2e64fdf56b65b66c9214b684ff2468e2 Author: Juergen Daubert <jue(a)jue.li> Date: Tue Feb 12 18:25:59 2013 +0100 [notify] openssl: update to 1.0.1e Corrected fix for CVE-2013-0169 (cherry picked from commit 9e551702eb276e33dcf22ed03e116ed800fd146e) diff --git a/openssl/.md5sum b/openssl/.md5sum index cfc4e66..c54f165 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,2 +1,2 @@ 9d0df57845af8acd1027a7df5c18d017 mksslcert.sh -b92fc634f0f1f31a67ed4175adc5ba33 openssl-1.0.1d.tar.gz +66bf6f10f060d561929de96f9dfe5b8c openssl-1.0.1e.tar.gz diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 3ee9ec6..6885780 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=openssl -version=1.0.1d +version=1.0.1e release=1 source=(http://www.openssl.org/source/$name-$version.tar.gz \ mksslcert.sh)

1 0

ports/core (3.0): [notify] openssl: update to 1.0.1e
by crux＠crux.nu 12 Feb '13

12 Feb '13

commit 9e551702eb276e33dcf22ed03e116ed800fd146e Author: Juergen Daubert <jue(a)jue.li> Date: Tue Feb 12 18:25:59 2013 +0100 [notify] openssl: update to 1.0.1e Corrected fix for CVE-2013-0169 diff --git a/openssl/.md5sum b/openssl/.md5sum index cfc4e66..c54f165 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,2 +1,2 @@ 9d0df57845af8acd1027a7df5c18d017 mksslcert.sh -b92fc634f0f1f31a67ed4175adc5ba33 openssl-1.0.1d.tar.gz +66bf6f10f060d561929de96f9dfe5b8c openssl-1.0.1e.tar.gz diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 3ee9ec6..6885780 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=openssl -version=1.0.1d +version=1.0.1e release=1 source=(http://www.openssl.org/source/$name-$version.tar.gz \ mksslcert.sh)

1 0

out of date handbrake port
by chris 10 Feb '13

10 Feb '13

The handbrake-0.9.3 port is out of date since the 0.9.3 source is no longer available. I am trying to make a handbrake-0.9.8 port, but have not been able to update the macro declaration as called for in the output: http://pastebin.com/3vXHCYkE. I think the problem that I am having boils down to: /usr/ports/handbrake/work/src/HandBrake-0.9.8/build/contrib/a52dec/a52dec/configure.in doesn't exit until after ./configure is run and a52dec is downloaded from handbrake.fr, so I really don't know where to put sed 's/AM_CONFIG_HEADER/AC_CONFIG_HEADERS/' in configure.in in the Pkgfile. I probably lack the experience to even undertake this task, but I like handbrake and would like to use it on my crux installation. Should I just open a bug ticket instead? Chris Farrell -- Using Opera's mail client: http://www.opera.com/mail/

2 1