August 2015 - CRUX - lists.crux.nu

ports/opt (3.1): [notify] maradns: update to 2.0.12
by crux＠crux.nu 22 Aug '15

22 Aug '15

commit e1a363aef0dd131a83fb668f33c46cdb9b32fb29 Author: Juergen Daubert <jue(a)jue.li> Date: Sat Aug 22 11:44:35 2015 +0200 [notify] maradns: update to 2.0.12 Security fix, see http://samiam.org/blog/2015-08-19.html diff --git a/maradns/.md5sum b/maradns/.md5sum index ac1b392..f7a2171 100644 --- a/maradns/.md5sum +++ b/maradns/.md5sum @@ -1,4 +1,4 @@ 6e2f5cfb258b8955fa345a2070b6c4b0 db.localhost 0dce90ec6ee5c8a368ec692ec9d5ccc5 maradns -829334629f591e84fb4c5dd126b80ec2 maradns-2.0.11.tar.bz2 +5d5a8176fc78a6d2e456974c9cf2de6b maradns-2.0.12.tar.bz2 8205d9a6cdeba454d173847fd44168a3 mararc diff --git a/maradns/Pkgfile b/maradns/Pkgfile index ac51391..1795966 100644 --- a/maradns/Pkgfile +++ b/maradns/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Juergen Daubert, jue at crux dot nu name=maradns -version=2.0.11 +version=2.0.12 release=1 source=(http://maradns.samiam.org/download/2.0/$version/$name-$version.tar.… \ mararc maradns db.localhost)

1 0

ports/opt (3.1): [notify] ruby: update to 2.1.7
by crux＠crux.nu 22 Aug '15

22 Aug '15

commit 42073e1c9b09d74cc1593fa666d1fbbe6f509e71 Author: Juergen Daubert <jue(a)jue.li> Date: Fri Aug 21 17:54:22 2015 +0200 [notify] ruby: update to 2.1.7 update includes a security fix, see http://blog.rubygems.org/2015/05/14/CVE-2015-3900.html diff --git a/ruby/.footprint b/ruby/.footprint index a9cc0bb..f7e1e28 100644 --- a/ruby/.footprint +++ b/ruby/.footprint @@ -1045,9 +1045,9 @@ drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/rdoc-4.1.0/ drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/rdoc-4.1.0/bin/ -rwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/rdoc-4.1.0/bin/rdoc -rwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/rdoc-4.1.0/bin/ri -drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.6.0/ -drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.6.0/bin/ --rwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.6.0/bin/testrb +drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.7.0/ +drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.7.0/bin/ +-rwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.7.0/bin/testrb drwxr-xr-x root/root usr/lib/ruby/gems/2.1/specifications/ drwxr-xr-x root/root usr/lib/ruby/gems/2.1/specifications/default/ -rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/bigdecimal-1.2.4.gemspec @@ -1057,7 +1057,7 @@ drwxr-xr-x root/root usr/lib/ruby/gems/2.1/specifications/default/ -rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/psych-2.0.5.gemspec -rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/rake-10.1.0.gemspec -rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/rdoc-4.1.0.gemspec --rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/test-unit-2.1.6.0.gemspec +-rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/test-unit-2.1.7.0.gemspec drwxr-xr-x root/root usr/lib/ruby/site_ruby/ drwxr-xr-x root/root usr/lib/ruby/site_ruby/2.1/ drwxr-xr-x root/root usr/lib/ruby/site_ruby/2.1/x86_64-linux/ diff --git a/ruby/.md5sum b/ruby/.md5sum index c1288c8..6dd5ecc 100644 --- a/ruby/.md5sum +++ b/ruby/.md5sum @@ -1 +1 @@ -ec6f10ca331ce947802ede86259513a8 ruby-2.1.6.tar.xz +2e43a1d32cc16975a6b5d3ffce399199 ruby-2.1.7.tar.xz diff --git a/ruby/Pkgfile b/ruby/Pkgfile index a6fdb5d..71f3bc2 100644 --- a/ruby/Pkgfile +++ b/ruby/Pkgfile @@ -4,7 +4,7 @@ # Depends on: gdbm libgmp openssl readline zlib libffi libyaml name=ruby -version=2.1.6 +version=2.1.7 release=1 source=(http://cache.ruby-lang.org/pub/$name/2.1/$name-$version.tar.xz)

1 0

ports/opt (3.1): [notify] maradns: update to 2.0.12
by crux＠crux.nu 22 Aug '15

22 Aug '15

commit e1a363aef0dd131a83fb668f33c46cdb9b32fb29 Author: Juergen Daubert <jue(a)jue.li> Date: Sat Aug 22 11:44:35 2015 +0200 [notify] maradns: update to 2.0.12 Security fix, see http://samiam.org/blog/2015-08-19.html diff --git a/maradns/.md5sum b/maradns/.md5sum index ac1b392..f7a2171 100644 --- a/maradns/.md5sum +++ b/maradns/.md5sum @@ -1,4 +1,4 @@ 6e2f5cfb258b8955fa345a2070b6c4b0 db.localhost 0dce90ec6ee5c8a368ec692ec9d5ccc5 maradns -829334629f591e84fb4c5dd126b80ec2 maradns-2.0.11.tar.bz2 +5d5a8176fc78a6d2e456974c9cf2de6b maradns-2.0.12.tar.bz2 8205d9a6cdeba454d173847fd44168a3 mararc diff --git a/maradns/Pkgfile b/maradns/Pkgfile index ac51391..1795966 100644 --- a/maradns/Pkgfile +++ b/maradns/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Juergen Daubert, jue at crux dot nu name=maradns -version=2.0.11 +version=2.0.12 release=1 source=(http://maradns.samiam.org/download/2.0/$version/$name-$version.tar.… \ mararc maradns db.localhost)

1 0

ports/opt (3.1): [notify] ruby: update to 2.1.7
by crux＠crux.nu 22 Aug '15

22 Aug '15

commit 42073e1c9b09d74cc1593fa666d1fbbe6f509e71 Author: Juergen Daubert <jue(a)jue.li> Date: Fri Aug 21 17:54:22 2015 +0200 [notify] ruby: update to 2.1.7 update includes a security fix, see http://blog.rubygems.org/2015/05/14/CVE-2015-3900.html diff --git a/ruby/.footprint b/ruby/.footprint index a9cc0bb..f7e1e28 100644 --- a/ruby/.footprint +++ b/ruby/.footprint @@ -1045,9 +1045,9 @@ drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/rdoc-4.1.0/ drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/rdoc-4.1.0/bin/ -rwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/rdoc-4.1.0/bin/rdoc -rwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/rdoc-4.1.0/bin/ri -drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.6.0/ -drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.6.0/bin/ --rwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.6.0/bin/testrb +drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.7.0/ +drwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.7.0/bin/ +-rwxr-xr-x root/root usr/lib/ruby/gems/2.1/gems/test-unit-2.1.7.0/bin/testrb drwxr-xr-x root/root usr/lib/ruby/gems/2.1/specifications/ drwxr-xr-x root/root usr/lib/ruby/gems/2.1/specifications/default/ -rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/bigdecimal-1.2.4.gemspec @@ -1057,7 +1057,7 @@ drwxr-xr-x root/root usr/lib/ruby/gems/2.1/specifications/default/ -rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/psych-2.0.5.gemspec -rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/rake-10.1.0.gemspec -rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/rdoc-4.1.0.gemspec --rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/test-unit-2.1.6.0.gemspec +-rw-r--r-- root/root usr/lib/ruby/gems/2.1/specifications/default/test-unit-2.1.7.0.gemspec drwxr-xr-x root/root usr/lib/ruby/site_ruby/ drwxr-xr-x root/root usr/lib/ruby/site_ruby/2.1/ drwxr-xr-x root/root usr/lib/ruby/site_ruby/2.1/x86_64-linux/ diff --git a/ruby/.md5sum b/ruby/.md5sum index c1288c8..6dd5ecc 100644 --- a/ruby/.md5sum +++ b/ruby/.md5sum @@ -1 +1 @@ -ec6f10ca331ce947802ede86259513a8 ruby-2.1.6.tar.xz +2e43a1d32cc16975a6b5d3ffce399199 ruby-2.1.7.tar.xz diff --git a/ruby/Pkgfile b/ruby/Pkgfile index a6fdb5d..71f3bc2 100644 --- a/ruby/Pkgfile +++ b/ruby/Pkgfile @@ -4,7 +4,7 @@ # Depends on: gdbm libgmp openssl readline zlib libffi libyaml name=ruby -version=2.1.6 +version=2.1.7 release=1 source=(http://cache.ruby-lang.org/pub/$name/2.1/$name-$version.tar.xz)

1 0

ports/opt (3.2): [notify] thunderbird. updated to 38.2.0. Shares much code with firefox ESR 38.2
by crux＠crux.nu 20 Aug '15

20 Aug '15

commit ab6497b124fa6e5186501a5e7becbe3e825d6d14 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Aug 20 22:17:32 2015 +0200 [notify] thunderbird. updated to 38.2.0. Shares much code with firefox ESR 38.2 Advisory: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#f… diff --git a/thunderbird/.footprint b/thunderbird/.footprint index 0906610..7b7bbe5 100644 --- a/thunderbird/.footprint +++ b/thunderbird/.footprint @@ -30,7 +30,7 @@ drwxr-xr-x root/root usr/lib/thunderbird/dictionaries/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/ --rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/application.ini +-rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/app.ini drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/ -rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/calAlarm.js -rwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/calAlarmMonitor.js diff --git a/thunderbird/.md5sum b/thunderbird/.md5sum index 0c2b3be..b7accd1 100644 --- a/thunderbird/.md5sum +++ b/thunderbird/.md5sum @@ -1,3 +1,3 @@ -dd161196c6bd444643d2de54d1222d31 thunderbird-38.1.0.source.tar.bz2 +df97af48b670cdaa5196a90360c952f7 thunderbird-38.2.0.source.tar.bz2 efd54ad6179d3327aa85602560a4a964 thunderbird-install-dir.patch 87f8666f06ba8c3668e39068050bb77a thunderbird.desktop diff --git a/thunderbird/Pkgfile b/thunderbird/Pkgfile index 901e09c..bf446eb 100644 --- a/thunderbird/Pkgfile +++ b/thunderbird/Pkgfile @@ -4,8 +4,8 @@ # Depends on: python,gtk,alsa-lib,xorg-libxt,libidl,nss,yasm,mesa3d,libjpeg-turbo name=thunderbird -version=38.1.0 -release=2 +version=38.2.0 +release=1 source=(http://ftp.mozilla.org/pub/thunderbird/releases/$version/source/$na… $name.desktop thunderbird-install-dir.patch)

1 0

ports/opt (3.2): [notify] thunderbird. updated to 38.2.0. Shares much code with firefox ESR 38.2
by crux＠crux.nu 20 Aug '15

20 Aug '15

commit ab6497b124fa6e5186501a5e7becbe3e825d6d14 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Aug 20 22:17:32 2015 +0200 [notify] thunderbird. updated to 38.2.0. Shares much code with firefox ESR 38.2 Advisory: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#f… diff --git a/thunderbird/.footprint b/thunderbird/.footprint index 0906610..7b7bbe5 100644 --- a/thunderbird/.footprint +++ b/thunderbird/.footprint @@ -30,7 +30,7 @@ drwxr-xr-x root/root usr/lib/thunderbird/dictionaries/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/ --rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/application.ini +-rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/app.ini drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/ -rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/calAlarm.js -rwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/calAlarmMonitor.js diff --git a/thunderbird/.md5sum b/thunderbird/.md5sum index 0c2b3be..b7accd1 100644 --- a/thunderbird/.md5sum +++ b/thunderbird/.md5sum @@ -1,3 +1,3 @@ -dd161196c6bd444643d2de54d1222d31 thunderbird-38.1.0.source.tar.bz2 +df97af48b670cdaa5196a90360c952f7 thunderbird-38.2.0.source.tar.bz2 efd54ad6179d3327aa85602560a4a964 thunderbird-install-dir.patch 87f8666f06ba8c3668e39068050bb77a thunderbird.desktop diff --git a/thunderbird/Pkgfile b/thunderbird/Pkgfile index 901e09c..bf446eb 100644 --- a/thunderbird/Pkgfile +++ b/thunderbird/Pkgfile @@ -4,8 +4,8 @@ # Depends on: python,gtk,alsa-lib,xorg-libxt,libidl,nss,yasm,mesa3d,libjpeg-turbo name=thunderbird -version=38.1.0 -release=2 +version=38.2.0 +release=1 source=(http://ftp.mozilla.org/pub/thunderbird/releases/$version/source/$na… $name.desktop thunderbird-install-dir.patch)

1 0

ports/opt (3.1): [notify] thunderbird. updated to 38.2.0. Shares much code with firefox ESR 38.2
by crux＠crux.nu 20 Aug '15

20 Aug '15

commit ab6497b124fa6e5186501a5e7becbe3e825d6d14 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Aug 20 22:17:32 2015 +0200 [notify] thunderbird. updated to 38.2.0. Shares much code with firefox ESR 38.2 Advisory: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#f… diff --git a/thunderbird/.footprint b/thunderbird/.footprint index 0906610..7b7bbe5 100644 --- a/thunderbird/.footprint +++ b/thunderbird/.footprint @@ -30,7 +30,7 @@ drwxr-xr-x root/root usr/lib/thunderbird/dictionaries/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/ --rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/application.ini +-rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/app.ini drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/ -rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/calAlarm.js -rwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/calAlarmMonitor.js diff --git a/thunderbird/.md5sum b/thunderbird/.md5sum index 0c2b3be..b7accd1 100644 --- a/thunderbird/.md5sum +++ b/thunderbird/.md5sum @@ -1,3 +1,3 @@ -dd161196c6bd444643d2de54d1222d31 thunderbird-38.1.0.source.tar.bz2 +df97af48b670cdaa5196a90360c952f7 thunderbird-38.2.0.source.tar.bz2 efd54ad6179d3327aa85602560a4a964 thunderbird-install-dir.patch 87f8666f06ba8c3668e39068050bb77a thunderbird.desktop diff --git a/thunderbird/Pkgfile b/thunderbird/Pkgfile index 901e09c..bf446eb 100644 --- a/thunderbird/Pkgfile +++ b/thunderbird/Pkgfile @@ -4,8 +4,8 @@ # Depends on: python,gtk,alsa-lib,xorg-libxt,libidl,nss,yasm,mesa3d,libjpeg-turbo name=thunderbird -version=38.1.0 -release=2 +version=38.2.0 +release=1 source=(http://ftp.mozilla.org/pub/thunderbird/releases/$version/source/$na… $name.desktop thunderbird-install-dir.patch)

1 0

ports/opt (3.1): [notify] thunderbird. updated to 38.2.0. Shares much code with firefox ESR 38.2
by crux＠crux.nu 20 Aug '15

20 Aug '15

commit ab6497b124fa6e5186501a5e7becbe3e825d6d14 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Aug 20 22:17:32 2015 +0200 [notify] thunderbird. updated to 38.2.0. Shares much code with firefox ESR 38.2 Advisory: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#f… diff --git a/thunderbird/.footprint b/thunderbird/.footprint index 0906610..7b7bbe5 100644 --- a/thunderbird/.footprint +++ b/thunderbird/.footprint @@ -30,7 +30,7 @@ drwxr-xr-x root/root usr/lib/thunderbird/dictionaries/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/ drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/ --rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/application.ini +-rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/app.ini drwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/ -rw-r--r-- root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/calAlarm.js -rwxr-xr-x root/root usr/lib/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/calendar-js/calAlarmMonitor.js diff --git a/thunderbird/.md5sum b/thunderbird/.md5sum index 0c2b3be..b7accd1 100644 --- a/thunderbird/.md5sum +++ b/thunderbird/.md5sum @@ -1,3 +1,3 @@ -dd161196c6bd444643d2de54d1222d31 thunderbird-38.1.0.source.tar.bz2 +df97af48b670cdaa5196a90360c952f7 thunderbird-38.2.0.source.tar.bz2 efd54ad6179d3327aa85602560a4a964 thunderbird-install-dir.patch 87f8666f06ba8c3668e39068050bb77a thunderbird.desktop diff --git a/thunderbird/Pkgfile b/thunderbird/Pkgfile index 901e09c..bf446eb 100644 --- a/thunderbird/Pkgfile +++ b/thunderbird/Pkgfile @@ -4,8 +4,8 @@ # Depends on: python,gtk,alsa-lib,xorg-libxt,libidl,nss,yasm,mesa3d,libjpeg-turbo name=thunderbird -version=38.1.0 -release=2 +version=38.2.0 +release=1 source=(http://ftp.mozilla.org/pub/thunderbird/releases/$version/source/$na… $name.desktop thunderbird-install-dir.patch)

1 0

ports/opt (3.2): [notify] gdk-pixbuf: added patch for CVE-2015-4491.
by crux＠crux.nu 18 Aug '15

18 Aug '15

commit 6b9a9c2f71efc481f605120587d9eca045a32388 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Aug 18 20:48:29 2015 +0200 [notify] gdk-pixbuf: added patch for CVE-2015-4491. Advisory: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491 diff --git a/gdk-pixbuf/.footprint b/gdk-pixbuf/.footprint index e6bdbb2..8862566 100644 --- a/gdk-pixbuf/.footprint +++ b/gdk-pixbuf/.footprint @@ -71,10 +71,10 @@ lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0 -> libgdk_pixbuf_xlib-2 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-2.0.pc -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-xlib-2.0.pc -drwxr-xr-x root/root usr/man/ -drwxr-xr-x root/root usr/man/man1/ --rw-r--r-- root/root usr/man/man1/gdk-pixbuf-csource.1.gz --rw-r--r-- root/root usr/man/man1/gdk-pixbuf-query-loaders.1.gz drwxr-xr-x root/root usr/share/ drwxr-xr-x root/root usr/share/gir-1.0/ -rw-r--r-- root/root usr/share/gir-1.0/GdkPixbuf-2.0.gir +drwxr-xr-x root/root usr/share/man/ +drwxr-xr-x root/root usr/share/man/man1/ +-rw-r--r-- root/root usr/share/man/man1/gdk-pixbuf-csource.1.gz +-rw-r--r-- root/root usr/share/man/man1/gdk-pixbuf-query-loaders.1.gz diff --git a/gdk-pixbuf/.md5sum b/gdk-pixbuf/.md5sum index 8118c35..1c5d7a2 100644 --- a/gdk-pixbuf/.md5sum +++ b/gdk-pixbuf/.md5sum @@ -1,3 +1,4 @@ +6c3862a6dfd70e31f8a6a1c3c65caece CVE-2015-4491.patch 4fed0d54432f1b69fc6e66e608bd5542 gdk-pixbuf-2.30.8.tar.xz d5311640870a5de1dc8aefcb4509a99d gdk-pixbuf-register.sh 94f3472231326d5352d007497db82798 gdk-pixbuf.loaders diff --git a/gdk-pixbuf/CVE-2015-4491.patch b/gdk-pixbuf/CVE-2015-4491.patch new file mode 100644 index 0000000..9b5e297 --- /dev/null +++ b/gdk-pixbuf/CVE-2015-4491.patch @@ -0,0 +1,81 @@ +From 62eab9b3d73a07f1b1821ff05eda6ccf5e2c5901 Mon Sep 17 00:00:00 2001 +From: Matthias Clasen <mclasen(a)redhat.com> +Date: Mon, 13 Jul 2015 00:33:40 -0400 +Subject: [PATCH] pixops: Be more careful about integer overflow + +Our loader code is supposed to handle out-of-memory and overflow +situations gracefully, reporting errors instead of aborting. But +if you load an image at a specific size, we also execute our +scaling code, which was not careful enough about overflow in some +places. This commit makes the scaling code silently return if +it fails to allocate filter tables. + +https://bugzilla.gnome.org/show_bug.cgi?id=752297 +--- + gdk-pixbuf/pixops/pixops.c | 22 +++++++++++++++++----- + 1 file changed, 17 insertions(+), 5 deletions(-) + +diff --git a/gdk-pixbuf/pixops/pixops.c b/gdk-pixbuf/pixops/pixops.c +index 29a1c14..226ad09 100644 +--- a/gdk-pixbuf/pixops/pixops.c ++++ b/gdk-pixbuf/pixops/pixops.c +@@ -1272,7 +1272,16 @@ make_filter_table (PixopsFilter *filter) + int i_offset, j_offset; + int n_x = filter->x.n; + int n_y = filter->y.n; +- int *weights = g_new (int, SUBSAMPLE * SUBSAMPLE * n_x * n_y); ++ gsize n_weights; ++ int *weights; ++ ++ n_weights = SUBSAMPLE * SUBSAMPLE * n_x * n_y; ++ if (n_weights / (SUBSAMPLE * SUBSAMPLE) != n_x * n_y) ++ return NULL; /* overflow, bail */ ++ ++ weights = g_new (int, n_weights); ++ if (!weights) ++ return NULL; /* overflow, bail */ + + for (i_offset=0; i_offset < SUBSAMPLE; i_offset++) + for (j_offset=0; j_offset < SUBSAMPLE; j_offset++) +@@ -1347,8 +1356,11 @@ pixops_process (guchar *dest_buf, + if (x_step == 0 || y_step == 0) + return; /* overflow, bail out */ + +- line_bufs = g_new (guchar *, filter->y.n); + filter_weights = make_filter_table (filter); ++ if (!filter_weights) ++ return; /* overflow, bail out */ ++ ++ line_bufs = g_new (guchar *, filter->y.n); + + check_shift = check_size ? get_check_shift (check_size) : 0; + +@@ -1468,7 +1480,7 @@ tile_make_weights (PixopsFilterDimension *dim, + double scale) + { + int n = ceil (1 / scale + 1); +- double *pixel_weights = g_new (double, SUBSAMPLE * n); ++ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); + int offset; + int i; + +@@ -1526,7 +1538,7 @@ bilinear_magnify_make_weights (PixopsFilterDimension *dim, + } + + dim->n = n; +- dim->weights = g_new (double, SUBSAMPLE * n); ++ dim->weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); + + pixel_weights = dim->weights; + +@@ -1617,7 +1629,7 @@ bilinear_box_make_weights (PixopsFilterDimension *dim, + double scale) + { + int n = ceil (1/scale + 3.0); +- double *pixel_weights = g_new (double, SUBSAMPLE * n); ++ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); + double w; + int offset, i; + +-- +2.4.3 diff --git a/gdk-pixbuf/Pkgfile b/gdk-pixbuf/Pkgfile index 5ba2bd3..e2bed9f 100644 --- a/gdk-pixbuf/Pkgfile +++ b/gdk-pixbuf/Pkgfile @@ -5,15 +5,18 @@ name=gdk-pixbuf version=2.30.8 -release=2 +release=3 source=(http://download.gnome.org/sources/$name/2.30/$name-$version.tar.xz \ - gdk-pixbuf.loaders gdk-pixbuf-register.sh) + gdk-pixbuf.loaders gdk-pixbuf-register.sh CVE-2015-4491.patch) build () { cd $name-$version + patch -p1 -i $SRC/CVE-2015-4491.patch - ./configure --prefix=/usr --mandir=/usr/man --disable-nls \ - --without-libjasper --with-x11 + ./configure --prefix=/usr \ + --disable-nls \ + --without-libjasper \ + --with-x11 make make DESTDIR=$PKG install

1 0

ports/opt (3.1): [notify] gdk-pixbuf: added patch for CVE-2015-4491.
by crux＠crux.nu 18 Aug '15

18 Aug '15

commit 6b9a9c2f71efc481f605120587d9eca045a32388 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Aug 18 20:48:29 2015 +0200 [notify] gdk-pixbuf: added patch for CVE-2015-4491. Advisory: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491 diff --git a/gdk-pixbuf/.footprint b/gdk-pixbuf/.footprint index e6bdbb2..8862566 100644 --- a/gdk-pixbuf/.footprint +++ b/gdk-pixbuf/.footprint @@ -71,10 +71,10 @@ lrwxrwxrwx root/root usr/lib/libgdk_pixbuf_xlib-2.0.so.0 -> libgdk_pixbuf_xlib-2 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-2.0.pc -rw-r--r-- root/root usr/lib/pkgconfig/gdk-pixbuf-xlib-2.0.pc -drwxr-xr-x root/root usr/man/ -drwxr-xr-x root/root usr/man/man1/ --rw-r--r-- root/root usr/man/man1/gdk-pixbuf-csource.1.gz --rw-r--r-- root/root usr/man/man1/gdk-pixbuf-query-loaders.1.gz drwxr-xr-x root/root usr/share/ drwxr-xr-x root/root usr/share/gir-1.0/ -rw-r--r-- root/root usr/share/gir-1.0/GdkPixbuf-2.0.gir +drwxr-xr-x root/root usr/share/man/ +drwxr-xr-x root/root usr/share/man/man1/ +-rw-r--r-- root/root usr/share/man/man1/gdk-pixbuf-csource.1.gz +-rw-r--r-- root/root usr/share/man/man1/gdk-pixbuf-query-loaders.1.gz diff --git a/gdk-pixbuf/.md5sum b/gdk-pixbuf/.md5sum index 8118c35..1c5d7a2 100644 --- a/gdk-pixbuf/.md5sum +++ b/gdk-pixbuf/.md5sum @@ -1,3 +1,4 @@ +6c3862a6dfd70e31f8a6a1c3c65caece CVE-2015-4491.patch 4fed0d54432f1b69fc6e66e608bd5542 gdk-pixbuf-2.30.8.tar.xz d5311640870a5de1dc8aefcb4509a99d gdk-pixbuf-register.sh 94f3472231326d5352d007497db82798 gdk-pixbuf.loaders diff --git a/gdk-pixbuf/CVE-2015-4491.patch b/gdk-pixbuf/CVE-2015-4491.patch new file mode 100644 index 0000000..9b5e297 --- /dev/null +++ b/gdk-pixbuf/CVE-2015-4491.patch @@ -0,0 +1,81 @@ +From 62eab9b3d73a07f1b1821ff05eda6ccf5e2c5901 Mon Sep 17 00:00:00 2001 +From: Matthias Clasen <mclasen(a)redhat.com> +Date: Mon, 13 Jul 2015 00:33:40 -0400 +Subject: [PATCH] pixops: Be more careful about integer overflow + +Our loader code is supposed to handle out-of-memory and overflow +situations gracefully, reporting errors instead of aborting. But +if you load an image at a specific size, we also execute our +scaling code, which was not careful enough about overflow in some +places. This commit makes the scaling code silently return if +it fails to allocate filter tables. + +https://bugzilla.gnome.org/show_bug.cgi?id=752297 +--- + gdk-pixbuf/pixops/pixops.c | 22 +++++++++++++++++----- + 1 file changed, 17 insertions(+), 5 deletions(-) + +diff --git a/gdk-pixbuf/pixops/pixops.c b/gdk-pixbuf/pixops/pixops.c +index 29a1c14..226ad09 100644 +--- a/gdk-pixbuf/pixops/pixops.c ++++ b/gdk-pixbuf/pixops/pixops.c +@@ -1272,7 +1272,16 @@ make_filter_table (PixopsFilter *filter) + int i_offset, j_offset; + int n_x = filter->x.n; + int n_y = filter->y.n; +- int *weights = g_new (int, SUBSAMPLE * SUBSAMPLE * n_x * n_y); ++ gsize n_weights; ++ int *weights; ++ ++ n_weights = SUBSAMPLE * SUBSAMPLE * n_x * n_y; ++ if (n_weights / (SUBSAMPLE * SUBSAMPLE) != n_x * n_y) ++ return NULL; /* overflow, bail */ ++ ++ weights = g_new (int, n_weights); ++ if (!weights) ++ return NULL; /* overflow, bail */ + + for (i_offset=0; i_offset < SUBSAMPLE; i_offset++) + for (j_offset=0; j_offset < SUBSAMPLE; j_offset++) +@@ -1347,8 +1356,11 @@ pixops_process (guchar *dest_buf, + if (x_step == 0 || y_step == 0) + return; /* overflow, bail out */ + +- line_bufs = g_new (guchar *, filter->y.n); + filter_weights = make_filter_table (filter); ++ if (!filter_weights) ++ return; /* overflow, bail out */ ++ ++ line_bufs = g_new (guchar *, filter->y.n); + + check_shift = check_size ? get_check_shift (check_size) : 0; + +@@ -1468,7 +1480,7 @@ tile_make_weights (PixopsFilterDimension *dim, + double scale) + { + int n = ceil (1 / scale + 1); +- double *pixel_weights = g_new (double, SUBSAMPLE * n); ++ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); + int offset; + int i; + +@@ -1526,7 +1538,7 @@ bilinear_magnify_make_weights (PixopsFilterDimension *dim, + } + + dim->n = n; +- dim->weights = g_new (double, SUBSAMPLE * n); ++ dim->weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); + + pixel_weights = dim->weights; + +@@ -1617,7 +1629,7 @@ bilinear_box_make_weights (PixopsFilterDimension *dim, + double scale) + { + int n = ceil (1/scale + 3.0); +- double *pixel_weights = g_new (double, SUBSAMPLE * n); ++ double *pixel_weights = g_malloc_n (sizeof (double) * SUBSAMPLE, n); + double w; + int offset, i; + +-- +2.4.3 diff --git a/gdk-pixbuf/Pkgfile b/gdk-pixbuf/Pkgfile index 5ba2bd3..e2bed9f 100644 --- a/gdk-pixbuf/Pkgfile +++ b/gdk-pixbuf/Pkgfile @@ -5,15 +5,18 @@ name=gdk-pixbuf version=2.30.8 -release=2 +release=3 source=(http://download.gnome.org/sources/$name/2.30/$name-$version.tar.xz \ - gdk-pixbuf.loaders gdk-pixbuf-register.sh) + gdk-pixbuf.loaders gdk-pixbuf-register.sh CVE-2015-4491.patch) build () { cd $name-$version + patch -p1 -i $SRC/CVE-2015-4491.patch - ./configure --prefix=/usr --mandir=/usr/man --disable-nls \ - --without-libjasper --with-x11 + ./configure --prefix=/usr \ + --disable-nls \ + --without-libjasper \ + --with-x11 make make DESTDIR=$PKG install

1 0