June 2014 - CRUX - lists.crux.nu

ports/opt (3.0): [notify] dbus: updated to 1.6.20.
by crux＠crux.nu 10 Jun '14

10 Jun '14

commit a67b88c7407db99888ae0b174ba43ccc13fafaaf Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Jun 10 22:37:36 2014 +0200 [notify] dbus: updated to 1.6.20. CVE-2014-3477: deliver activation errors correctly, fixing Denial of Service. Advisory: http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.8&id=24c590703ca47eb… diff --git a/dbus/.footprint b/dbus/.footprint index 531d875..b863adc 100644 --- a/dbus/.footprint +++ b/dbus/.footprint @@ -46,9 +46,9 @@ drwxr-xr-x root/root usr/lib/dbus-1.0/include/dbus/ drwxr-xr-x root/root usr/lib/dbus/ -rwsr-x--- root/messagebus usr/lib/dbus/dbus-daemon-launch-helper -rwxr-xr-x root/root usr/lib/libdbus-1.la -lrwxrwxrwx root/root usr/lib/libdbus-1.so -> libdbus-1.so.3.7.6 -lrwxrwxrwx root/root usr/lib/libdbus-1.so.3 -> libdbus-1.so.3.7.6 --rwxr-xr-x root/root usr/lib/libdbus-1.so.3.7.6 +lrwxrwxrwx root/root usr/lib/libdbus-1.so -> libdbus-1.so.3.7.7 +lrwxrwxrwx root/root usr/lib/libdbus-1.so.3 -> libdbus-1.so.3.7.7 +-rwxr-xr-x root/root usr/lib/libdbus-1.so.3.7.7 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/dbus-1.pc drwxr-xr-x root/root usr/man/ diff --git a/dbus/.md5sum b/dbus/.md5sum index 8b5a61a..6da7504 100644 --- a/dbus/.md5sum +++ b/dbus/.md5sum @@ -1,3 +1,3 @@ 23bc5ff22fe4f9a208d65fbbfd489ad9 30-dbus.launch -b02e9c95027a416987b81f9893831061 dbus-1.6.18.tar.gz +16aacf0addca0b4ff8ed0dd3d36dc6f5 dbus-1.6.20.tar.gz dd882e45b9397a5dbf8650057ee9a340 rc.dbus diff --git a/dbus/Pkgfile b/dbus/Pkgfile index 217ddc5..d9e7aff 100644 --- a/dbus/Pkgfile +++ b/dbus/Pkgfile @@ -5,7 +5,7 @@ # Depends on: expat name=dbus -version=1.6.18 +version=1.6.20 release=1 source=(http://dbus.freedesktop.org/releases/dbus/$name-$version.tar.gz \ rc.dbus 30-dbus.launch)

1 0

thunderbird: updated to 24.6.0, firefox: updated to 30.0
by Fredrik Rinnestam 10 Jun '14

10 Jun '14

Hi Due to a botched commit message, our security notification system wont send out a mail to this list. So here is a "manual" notification. contrib/thunderbird was updated to 24.6.0. opt/firefox was updated to 30.0. Mozillas advisory pages for thunderbird and firefox are located here: http://www.mozilla.org/security/known-vulnerabilities/thunderbird.html http://www.mozilla.org/security/known-vulnerabilities/firefox.html Sorry for the mess. -- Fredrik Rinnestam

1 0

ports/core (3.0): [notify] openssl: security update to 1.0.1h
by crux＠crux.nu 05 Jun '14

05 Jun '14

commit 5da0530f55930315b11210265a009dfb3249a458 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Jun 5 15:26:31 2014 +0200 [notify] openssl: security update to 1.0.1h see http://www.openssl.org/news/secadv_20140605.txt diff --git a/openssl/.md5sum b/openssl/.md5sum index 8439902..c9f9837 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,2 +1,2 @@ 768686b50408da41c4cf7d7038c9b615 mksslcert.sh -de62b43dfcd858e66a74bee1c834e959 openssl-1.0.1g.tar.gz +8d6d684a9430d5cc98a62a5d8fbda8cf openssl-1.0.1h.tar.gz diff --git a/openssl/Pkgfile b/openssl/Pkgfile index a77d26e..a0f8ee2 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=openssl -version=1.0.1g +version=1.0.1h release=1 source=(http://www.openssl.org/source/$name-$version.tar.gz \ mksslcert.sh)

1 0

ports/opt (3.0): [notify] samba: update to 4.1.8
by crux＠crux.nu 05 Jun '14

05 Jun '14

commit 0ddac87630f13335ee7519909b5723e662201052 Author: Juergen Daubert <jue(a)jue.li> Date: Wed Jun 4 21:36:00 2014 +0200 [notify] samba: update to 4.1.8 this bug fix release also addresses two minor security issues without being a dedicated security release, see https://www.samba.org/samba/history/samba-4.1.8.html diff --git a/samba/.footprint b/samba/.footprint index f5e50e7..118b31e 100644 --- a/samba/.footprint +++ b/samba/.footprint @@ -281,8 +281,6 @@ drwxr-xr-x root/root usr/lib/perl5/site_perl/5.16/Parse/Pidl/Samba4/NDR/ drwxr-xr-x root/root usr/lib/perl5/site_perl/5.16/Parse/Pidl/Wireshark/ -rw-r--r-- root/root usr/lib/perl5/site_perl/5.16/Parse/Pidl/Wireshark/Conformance.pm -rw-r--r-- root/root usr/lib/perl5/site_perl/5.16/Parse/Pidl/Wireshark/NDR.pm -drwxr-xr-x root/root usr/lib/perl5/site_perl/5.16/Parse/Yapp/ --rw-r--r-- root/root usr/lib/perl5/site_perl/5.16/Parse/Yapp/Driver.pm drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/dcerpc.pc -rw-r--r-- root/root usr/lib/pkgconfig/dcerpc_atsvc.pc diff --git a/samba/.md5sum b/samba/.md5sum index 5dd17cf..ebc577d 100644 --- a/samba/.md5sum +++ b/samba/.md5sum @@ -1,2 +1,2 @@ 448caca4745aef1a842f4fdb1aa62e1e samba -bc44b0a245468c3574ef07644206ede3 samba-4.1.7.tar.gz +212b7568d44e7668a7dc8a45c5558764 samba-4.1.8.tar.gz diff --git a/samba/Pkgfile b/samba/Pkgfile index 28a1b8e..a2afb90 100644 --- a/samba/Pkgfile +++ b/samba/Pkgfile @@ -4,7 +4,7 @@ # Depends on: ncurses openssl readline zlib tdb talloc libcap acl libaio popt name=samba -version=4.1.7 +version=4.1.8 release=1 source=(http://www.samba.org/samba/ftp/stable/$name-$version.tar.gz \ samba) @@ -15,15 +15,12 @@ build () { local JOBS=$(awk 'BEGIN{RS="-j|--jobs="} NR==2 {print $1}' <<< $MAKEFLAGS) test -n "$JOBS" && export JOBS="$JOBS" - eval $(perl -V:sitelib) - ./configure --enable-fhs \ --prefix=/usr \ --localstatedir=/var \ --mandir=/usr/man \ --sysconfdir=/etc \ - --with-privatedir=/etc/samba/private \ - --with-perl-vendor{arch,lib}="$sitelib" + --with-privatedir=/etc/samba/private make make DESTDIR=$PKG install

1 0

ports/opt (3.0): [notify] gnutls: updated to 3.2.15
by crux＠crux.nu 03 Jun '14

03 Jun '14

commit 158ee8fa29d0f5e45a9cc3a74361d2ec619e8d71 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Jun 3 23:42:30 2014 +0200 [notify] gnutls: updated to 3.2.15 http://www.gnutls.org/security.html#GNUTLS-SA-2014-3 diff --git a/gnutls/.footprint b/gnutls/.footprint index 4e61c2e..b909d01 100644 --- a/gnutls/.footprint +++ b/gnutls/.footprint @@ -38,9 +38,9 @@ lrwxrwxrwx root/root usr/lib/libgnutls-xssl.so.0 -> libgnutls-xssl.so.0.0.0 -rwxr-xr-x root/root usr/lib/libgnutls-xssl.so.0.0.0 -rw-r--r-- root/root usr/lib/libgnutls.a -rwxr-xr-x root/root usr/lib/libgnutls.la -lrwxrwxrwx root/root usr/lib/libgnutls.so -> libgnutls.so.28.30.3 -lrwxrwxrwx root/root usr/lib/libgnutls.so.28 -> libgnutls.so.28.30.3 --rwxr-xr-x root/root usr/lib/libgnutls.so.28.30.3 +lrwxrwxrwx root/root usr/lib/libgnutls.so -> libgnutls.so.28.30.6 +lrwxrwxrwx root/root usr/lib/libgnutls.so.28 -> libgnutls.so.28.30.6 +-rwxr-xr-x root/root usr/lib/libgnutls.so.28.30.6 -rw-r--r-- root/root usr/lib/libgnutlsxx.a -rwxr-xr-x root/root usr/lib/libgnutlsxx.la lrwxrwxrwx root/root usr/lib/libgnutlsxx.so -> libgnutlsxx.so.28.1.0 diff --git a/gnutls/.md5sum b/gnutls/.md5sum index 5a9253c..56a1aa9 100644 --- a/gnutls/.md5sum +++ b/gnutls/.md5sum @@ -1 +1 @@ -a795db68253d1336f1e3c2ee48c1fee4 gnutls-3.2.12.1.tar.xz +ec3b06f80e312137386c5d322183ca5a gnutls-3.2.15.tar.xz diff --git a/gnutls/Pkgfile b/gnutls/Pkgfile index 682968b..989dad5 100644 --- a/gnutls/Pkgfile +++ b/gnutls/Pkgfile @@ -5,9 +5,9 @@ # Depends on: nettle libidn name=gnutls -version=3.2.12 -release=2 -source=(ftp://ftp.gnutls.org/gcrypt/$name/v${version%.*}/$name-${version}.1.tar.xz) +version=3.2.15 +release=1 +source=(ftp://ftp.gnutls.org/gcrypt/$name/v${version%.*}/$name-${version}.tar.xz) build() { cd $name-$version

1 0