September 2014 - CRUX - lists.crux.nu

why not systemd
by Roelof Wobben 21 Nov '14

21 Nov '14

As many of you know I try to port Cinnamon to Crux. But on the road I saw that many things depend on systemd. So I wonder why Crux is one of the last distros who refuses to use it. I ask this because on Cinnamon we have two choices: - use systemd. - use polkit, consolekit and pam. and make our own sysvinit scripts for some services like colord and polkit-gnome. For the last one I ask help on the ML but no help so far. Regards, Roelof Wobben

5 12

CRUX 3.0 in the cloud (EC2)
by Chris Kruger 09 Oct '14

09 Oct '14

Hi Folks, I don't know if anybody here uses Amazon's EC2, but maybe some here will be interested. I've always wanted to run CRUX in the cloud so I built an Amazon AMI (Amazon Machine Image) to allow me to do so. If anybody else is interested let me know and I can share the AMI with you. Chris K.

5 9

Seafile ports?
by Yu D 29 Sep '14

29 Sep '14

Hi community Im searching for seafile (http://www.seafile.com/en/download/) crux ports. Any ideas?

2 2

A new better kernel for CruxEX 3.1 live system
by C A Exton 28 Sep '14

28 Sep '14

Hi, Re: ifconfig eth0 up: have you tried ifconfig eth1 up or ifconfig eth2 up? Or better change Wicd’s preferences and connect via Wicd. Press Refresh first. Best regards Arne -----Original Message----- From: Zenny [mailto:garbytrash@gmail.com] Sent: den 27 september 2014 21:28 To: C A Exton Cc: crux(a)lists.crux.nu Subject: Re: A new better kernel for CruxEX 3.1 live system Hej, With this version, §1 wired network (eth0) does not connect. Both tried wicd as well as ifconfig eth0 up. Gives "ifconfig: SIOCIFFLAGS failed: no such device" though wireless works. §2 Using root to access the internet makes me feel very insecure!! Or do you have something in mind?! MVH /z On 9/27/14, C A Exton < <mailto:info@exton.net> info(a)exton.net> wrote: > Version/build 140923 of CruxEX uses kernel 3.16.3-x86_64-exton. Today > (140926) I have compiled a new special kernel for CRUX 3.1. I call it > 3.16.3-x86_64-cruxex. The CruxEX live system now boot up faster than > ever before. > > Kernel etc > Kernel 3.16.3 is the latest available stable kernel as of 140926. > Among all > <http://cruxex.exton.net/cruxex-3.1-64bit-installed-packages-140926.tx > t> > installed and > < <http://cruxex.exton.net/cruxex-3.1-64bit-updated-packages-140926.txt> http://cruxex.exton.net/cruxex-3.1-64bit-updated-packages-140926.txt> > updated applications are Firefox 32.0.2, Gimp 2.8.14 and > < <http://wicd.sourceforge.net/> http://wicd.sourceforge.net/> Wicd 1.7.2.4-4. Furthermore compilation > tools so that you can install programs from source. > > NEWS 140926 > Install my new version of CruxEX 3.1 64bit from 140926 to a USB Pen > Drive and save your system changes - read this > < <http://cruxex.exton.net/cruxex-3.1-pen-drive> http://cruxex.exton.net/cruxex-3.1-pen-drive> INSTRUCTION. If you > later on decide you want to install CruxEX to hard drive from the USB > Pen Drive all your system changes will also be installed to the hard drive. > > < <http://cruxex.exton.net> http://cruxex.exton.net> READ MORE. > > / C A Exton 140926

1 0

A new better kernel for CruxEX 3.1 live system
by C A Exton 27 Sep '14

27 Sep '14

Version/build 140923 of CruxEX uses kernel 3.16.3-x86_64-exton. Today (140926) I have compiled a new special kernel for CRUX 3.1. I call it 3.16.3-x86_64-cruxex. The CruxEX live system now boot up faster than ever before. Kernel etc Kernel 3.16.3 is the latest available stable kernel as of 140926. Among all <http://cruxex.exton.net/cruxex-3.1-64bit-installed-packages-140926.txt> installed and <http://cruxex.exton.net/cruxex-3.1-64bit-updated-packages-140926.txt> updated applications are Firefox 32.0.2, Gimp 2.8.14 and <http://wicd.sourceforge.net/> Wicd 1.7.2.4-4. Furthermore compilation tools so that you can install programs from source. NEWS 140926 Install my new version of CruxEX 3.1 64bit from 140926 to a USB Pen Drive and save your system changes - read this <http://cruxex.exton.net/cruxex-3.1-pen-drive> INSTRUCTION. If you later on decide you want to install CruxEX to hard drive from the USB Pen Drive all your system changes will also be installed to the hard drive. <http://cruxex.exton.net> READ MORE. / C A Exton 140926 Connect With Me <http://twitter.com/linuxexton> Twitter <https://www.facebook.com/extonlinux> Facebook <http://linux.exton.net/> EXTON Linux | Live Systems <http://www.exton.net/> Exton|OS 64bit Linux Live DVD/CD > version 140910 and 140801 based on <http://ubuntu.com/> Ubuntu 14.04.1 LTS and <http://www.debian.org/releases/testing/index.en.html> Debian Jessie with Openbox 3.5.2/Mate 1.6.2 and kernel 3.16.0-7-exton/3.16.0-5-exton <http://www.extix.se/> ExTiX 14.1.2 64bit > version 140815 and 140804 based on <http://www.debian.org/index.en.html> Debian/ <http://ubuntu.com/> Ubuntu 14.04.1 with <http://razor-qt.org/> Razor-qt 0.5.2 respectively <http://gnome.org/> Gnome 3.10 and kernel 3.16.0-7-exton respectively 3.16.0-5-exton <http://lfa.exton.net/> LFA (Linux For All) 14.04.1 64bit DVD > version 140817 based on <http://ubuntu.com/> Ubuntu 14.04.1 with Unity, three (3) other Desktop Environments and kernel <http://linux.exton.net/content/kernel-3160-7-exton-kernelorg%E2%80%99s-stab le-kernel-316> 3.16.0-7-exton <http://defender.exton.net/> Exton|Defender Linux Super Rescue System > <http://defender.exton.net/> Exton|Defender Linux Super Rescue System version 140407 - 64 bit - based on <http://fedoraproject.org/> Fedora 20 with <http://cinnamon.linuxmint.com/> Cinnamon 2.0.14, version 140403 - 32bit - based on <http://www.mageia.org/en/> Mageia 4 with LXDE and version 140410 - 64bit - based on <http://www.slackware.com/> Slackware 14.1 with Xfce 4.10 <http://multibootcd.exton.net/> EXTON MultiBootCD 6-OS 32bit > version 140615 with six (6) different mini Linux Systems <http://cruxex.exton.net/> CruxEX 3.1 64bit 2014 Linux Live USB > version 140926 based on <http://crux.nu/> CRUX 3.1 with LXDE and kernel 3.16.3-x86_64-cruxex <http://slackex.exton.net/> SlackEX 14.1 64bit > version 140831 based on <http://www.extix.se/> <http://www.slackware.com/> Slackware 14.1 with KDE 4.10.5 and kernel 3.16.1-x86_64-exton <http://exlight.exton.net/> ExLight Live DVD 64bit > version 140812 based on <http://ubuntu.com/> Ubuntu 14.04.1 with Enlightenment 0.19 and kernel 3.16.0-5-exton <http://archex.exton.net/> ArchEX 2014 Dual 64bit/32bit Live DVD > version 140507 based on <https://wiki.archlinux.org/index.php/Main_Page> Arch Linux with kernel 3.14.2-1-ARCH and <http://lxde.org/> LXDE <http://exgent.exton.net/> exGENT 64bit Linux Live CD > version 140207 based on <http://www.gentoo.org/> Gentoo with LXDE and genkernel 3.13.1-gentoo-exton <http://mex.exton.net/> MeX 64bit Linux > version 140917 based on <http://ubuntu.com/> Linux Mint 17 Qiana with <http://cinnamon.linuxmint.com/> Cinnamon 2.2 and kernel 3.16.0-15-exton <http://puppex.exton.net/> PuppEX 14.1 32bit Linux Live CD > version 131212 based on <http://puppylinux.org/wikka/Puppy53> Puppy Linux Slacko 5.6 with <http://lxde.org/> LXDE and kernel 3.10.5 <http://opsus.exton.net/> EXTON OpSuS 13.1 Mini/Gnome/KDE Linux live USB > version 140119, 140117 respectively 131124 based on <http://www.opensuse.org/en/> openSUSE 13.1 with <http://fluxbox.org/> Fluxbox/ <https://help.gnome.org/misc/release-notes/3.10/> Gnome 3.10/ <http://www.kde.org/announcements/announce-4.11.3.php> KDE 4.11.3 Desktop environments <http://debex.exton.net/> DebEX Barebone/KDE 64bit Live DVD > version 140819 and 140821 based on <http://www.debian.org/releases/testing/> Debian Jessie with <http://www.xfce.org/> Xfce 4.10.1 respectively <http://kde.org/> KDE 4.13.3 and kernel 3.14.2-amd64 respectively 3.16.0-7-exton

2 1

ports/core (3.1): [notify] dhcpcd: update to 6.4.7
by crux＠crux.nu 27 Sep '14

27 Sep '14

commit 21401f48463a8e561b3f124267053da0ff6ba367 Author: Juergen Daubert <jue(a)jue.li> Date: Sat Sep 27 11:48:05 2014 +0200 [notify] dhcpcd: update to 6.4.7 includes the following addition: * Sanitise the following characters using svis(3) with VIS_CTYLE and VIS_OCTAL: | ^ & ; < > ( ) $ ` \ " ' <tab> <newline> This allows a non buggy unvis(1) to decode it 100% and stays compatible with how dhcpcd used to handle encoding on most platforms. For systems that supply svis(3) there is a code reduction, for systems that do not, a slight code increase. This change mitigates systems affected by bash CVE-2014-6271 and CVE-2014-7169. Obviously the last one is quite important as DHCP/RA is one of the attack vectors the "shellshock" bug. As dhcpcd cannot know if /bin/sh is vulnerable (and as of now, bash is *still* vulnerable), it sanitises all the important shell characters as noted in IEEE Std 1003.1, 2004 Edition, 2. Shell Command Language, 2.2 Quoting with the exception of the space character. Full change log: http://roy.marples.name/archives/dhcpcd-discuss/2014/0811.html diff --git a/dhcpcd/.md5sum b/dhcpcd/.md5sum index 829d52f..ff0e011 100644 --- a/dhcpcd/.md5sum +++ b/dhcpcd/.md5sum @@ -1 +1 @@ -4272a7de51bf0ba2b5d4f602e7fa5691 dhcpcd-6.4.5.tar.bz2 +b2289237a5b666a11178a9517c3f1240 dhcpcd-6.4.7.tar.bz2 diff --git a/dhcpcd/Pkgfile b/dhcpcd/Pkgfile index 2dc04d1..ef8a4dd 100644 --- a/dhcpcd/Pkgfile +++ b/dhcpcd/Pkgfile @@ -4,7 +4,7 @@ # Depends on: eudev name=dhcpcd -version=6.4.5 +version=6.4.7 release=1 source=(http://roy.marples.name/downloads/dhcpcd/$name-$version.tar.bz2)

1 0

ports/core (3.0): [notify] bash: added patch for CVE-2014-7169 (incomplete CVE-2014-6271 patch)
by crux＠crux.nu 26 Sep '14

26 Sep '14

commit 8e02504a678bc80478b0eb41b13514dabfda9127 Author: Thomas Penteker <tek(a)serverop.de> Date: Fri Sep 26 17:59:58 2014 +0200 [notify] bash: added patch for CVE-2014-7169 (incomplete CVE-2014-6271 patch) diff --git a/bash/.md5sum b/bash/.md5sum index 3d880ea..e4b69b9 100644 --- a/bash/.md5sum +++ b/bash/.md5sum @@ -1,3 +1,3 @@ -96863344bdbf143b33dbab39d3209671 bash-4.2.48.patch.gz +2c6869734816d9f7db64e4aed6f69bcd bash-4.2.49.patch.gz 3fb927c7c33022f1c327f14a81c0d4b0 bash-4.2.tar.gz 3fee206195d50dbd8a3560a8a77f341b profile diff --git a/bash/Pkgfile b/bash/Pkgfile index 5b2a558..126110b 100644 --- a/bash/Pkgfile +++ b/bash/Pkgfile @@ -4,7 +4,7 @@ # Depends on: ncurses readline name=bash -version=4.2.48 +version=4.2.49 release=1 source=(http://ftp.gnu.org/gnu/$name/$name-${version:0:3}.tar.gz \ $name-$version.patch.gz profile) diff --git a/bash/bash-4.2.48.patch.gz b/bash/bash-4.2.48.patch.gz deleted file mode 100644 index 501d5c6..0000000 Binary files a/bash/bash-4.2.48.patch.gz and /dev/null differ diff --git a/bash/bash-4.2.49.patch.gz b/bash/bash-4.2.49.patch.gz new file mode 100644 index 0000000..eb27589 Binary files /dev/null and b/bash/bash-4.2.49.patch.gz differ

1 0

ports/core (3.1): [notify] bash: added patch for CVE-2014-7169 (incomplete CVE-2014-6271 patch)
by crux＠crux.nu 26 Sep '14

26 Sep '14

commit b3112c50f9099f9aba764576f278ae8aa6384512 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Fri Sep 26 17:40:59 2014 +0200 [notify] bash: added patch for CVE-2014-7169 (incomplete CVE-2014-6271 patch) diff --git a/bash/.md5sum b/bash/.md5sum index 9e78cc7..cd32ccd 100644 --- a/bash/.md5sum +++ b/bash/.md5sum @@ -1,3 +1,4 @@ +ef372fa0f3a246a20f6c2b75d04eaee1 CVE-2014-7169.patch 0bb8bde611b03e32a010c6aa373fa2d4 bash-4.3.25.patch.gz 81348932d5da294953e15d4814c74dd1 bash-4.3.tar.gz be4c698ea8bb7d52eab2d6ce2c3fab8e profile diff --git a/bash/CVE-2014-7169.patch b/bash/CVE-2014-7169.patch new file mode 100644 index 0000000..e48141b --- /dev/null +++ b/bash/CVE-2014-7169.patch @@ -0,0 +1,60 @@ + BASH PATCH REPORT + ================= + +Bash-Release: 4.3 +Patch-ID: bash43-026 + +Bug-Reported-by: Tavis Ormandy <taviso () cmpxchg8b com> +Bug-Reference-ID: +Bug-Reference-URL: http://twitter.com/taviso/statuses/514887394294652929 + +Bug-Description: + +Under certain circumstances, bash can incorrectly save a lookahead character and +return it on a subsequent call, even when reading a new line. + +Patch (apply with `patch -p0'): + +*** ../bash-4.3.25/parse.y 2014-07-30 10:14:31.000000000 -0400 +--- parse.y 2014-09-25 20:20:21.000000000 -0400 +*************** +*** 2954,2957 **** +--- 2954,2959 ---- + word_desc_to_read = (WORD_DESC *)NULL; + ++ eol_ungetc_lookahead = 0; ++ + current_token = '\n'; /* XXX */ + last_read_token = '\n'; +*** ../bash-4.3.25/y.tab.c 2014-07-30 10:14:32.000000000 -0400 +--- y.tab.c 2014-09-25 20:21:48.000000000 -0400 +*************** +*** 5266,5269 **** +--- 5266,5271 ---- + word_desc_to_read = (WORD_DESC *)NULL; + ++ eol_ungetc_lookahead = 0; ++ + current_token = '\n'; /* XXX */ + last_read_token = '\n'; +*************** +*** 8540,8542 **** + } + #endif /* HANDLE_MULTIBYTE */ +- +--- 8542,8543 ---- +*** ../bash-4.3/patchlevel.h 2012-12-29 10:47:57.000000000 -0500 +--- patchlevel.h 2014-03-20 20:01:28.000000000 -0400 +*************** +*** 26,30 **** + looks for to find the patch level (for the sccs version string). */ + +! #define PATCHLEVEL 25 + + #endif /* _PATCHLEVEL_H_ */ +--- 26,30 ---- + looks for to find the patch level (for the sccs version string). */ + +! #define PATCHLEVEL 26 + + #endif /* _PATCHLEVEL_H_ */ diff --git a/bash/Pkgfile b/bash/Pkgfile index 776e459..45e8a91 100644 --- a/bash/Pkgfile +++ b/bash/Pkgfile @@ -5,15 +5,16 @@ name=bash version=4.3.25 -release=1 +release=2 source=(http://ftp.gnu.org/gnu/$name/$name-${version:0:3}.tar.gz \ - $name-$version.patch.gz profile) + $name-$version.patch.gz profile CVE-2014-7169.patch) build() { cd $name-${version:0:3} gunzip -c $SRC/$name-$version.patch.gz | patch -p0 - + patch -p0 -i $SRC/CVE-2014-7169.patch + ./configure --prefix=/usr \ --exec-prefix= \ --mandir=/usr/man \

1 0

ports/opt (3.1): [notify] nss: updated to 3.17.1. Fix for CVE-2014-1568
by crux＠crux.nu 25 Sep '14

25 Sep '14

commit 8a9e4873ce47b62e57a4a2289900fab2a0081ba8 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Sep 24 20:36:50 2014 +0200 [notify] nss: updated to 3.17.1. Fix for CVE-2014-1568 https://www.mozilla.org/security/announce/2014/mfsa2014-73.html diff --git a/nss/.footprint b/nss/.footprint index 94872b2..987a77e 100644 --- a/nss/.footprint +++ b/nss/.footprint @@ -74,6 +74,7 @@ drwxr-xr-x root/root usr/include/nss/ -rw-r--r-- root/root usr/include/nss/pkcs11u.h -rw-r--r-- root/root usr/include/nss/pkcs12.h -rw-r--r-- root/root usr/include/nss/pkcs12t.h +-rw-r--r-- root/root usr/include/nss/pkcs1sig.h -rw-r--r-- root/root usr/include/nss/pkcs7t.h -rw-r--r-- root/root usr/include/nss/portreg.h -rw-r--r-- root/root usr/include/nss/preenc.h diff --git a/nss/.md5sum b/nss/.md5sum index 81e1630..5b7d453 100644 --- a/nss/.md5sum +++ b/nss/.md5sum @@ -1,3 +1,3 @@ -081dd99afa12af589c09e2d7cb5f5c6d nss-3.17.tar.gz +4bac61d6db9312e20e70b812a17c74ea nss-3.17.1.tar.gz 17226659298a9d9bb3f323186d220f6f nss-config.in 4bb2893f773bb168271521e654861e29 nss.pc.in diff --git a/nss/Pkgfile b/nss/Pkgfile index 88b5846..8fe153e 100644 --- a/nss/Pkgfile +++ b/nss/Pkgfile @@ -4,9 +4,9 @@ # Depends on: nspr sqlite3 name=nss -version=3.17 +version=3.17.1 release=1 -source=(ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_17_RTM/src/$name-$version.tar.gz \ +source=(ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_17_1_RTM/src/$name-$version.tar.gz \ nss-config.in nss.pc.in) build() {

1 0

ports/core (3.0): [notify] bash: update to 4.2.48
by crux＠crux.nu 24 Sep '14

24 Sep '14

commit 0065e426cfe45f71f576cdcc42162b53a7299758 Author: Juergen Daubert <jue(a)jue.li> Date: Wed Sep 24 19:35:56 2014 +0200 [notify] bash: update to 4.2.48 Security fix for CVE-2014-6271, see - http://seclists.org/oss-sec/2014/q3/650 - http://article.gmane.org/gmane.comp.shells.bash.bugs/21993 diff --git a/bash/.md5sum b/bash/.md5sum index 1c95947..3d880ea 100644 --- a/bash/.md5sum +++ b/bash/.md5sum @@ -1,3 +1,3 @@ -042512159bc28fdace51c7e7111ffc38 bash-4.2.45.patch.gz +96863344bdbf143b33dbab39d3209671 bash-4.2.48.patch.gz 3fb927c7c33022f1c327f14a81c0d4b0 bash-4.2.tar.gz 3fee206195d50dbd8a3560a8a77f341b profile diff --git a/bash/Pkgfile b/bash/Pkgfile index 68342f1..5b2a558 100644 --- a/bash/Pkgfile +++ b/bash/Pkgfile @@ -4,7 +4,7 @@ # Depends on: ncurses readline name=bash -version=4.2.45 +version=4.2.48 release=1 source=(http://ftp.gnu.org/gnu/$name/$name-${version:0:3}.tar.gz \ $name-$version.patch.gz profile) diff --git a/bash/bash-4.2.45.patch.gz b/bash/bash-4.2.45.patch.gz deleted file mode 100644 index 617ce7d..0000000 Binary files a/bash/bash-4.2.45.patch.gz and /dev/null differ diff --git a/bash/bash-4.2.48.patch.gz b/bash/bash-4.2.48.patch.gz new file mode 100644 index 0000000..501d5c6 Binary files /dev/null and b/bash/bash-4.2.48.patch.gz differ

1 0