April 2016 - CRUX - lists.crux.nu

CruxEX (CRUX 3.2) live CD/USB with kernel 4.5.1-cruxex and Nvidia Graphics driver 361.42 pre-installed
by C A Exton 14 Apr '16

14 Apr '16

Hi, I have made yet another version of CruxEX <http://cruxex.exton.net/>. ################################################ *CruxEX 3.2 64 bit Linux Live CD/USB* is based on CRUX <http://crux.nu/> 3.2 (latest version, released 151123). CruxEX 3.2 2016 uses the LXDE <http://lxde.org/> Desktop environment. I have replaced the original CRUX kernel with “my” special kernel *4.5.1-cruxex*, with support for “extra everything”. *NEWS 160414* CruxEX 2016 is distributed both as an ISO file and a Zip file. Install my new version of CruxEX 3.2 64bit from 160414 to a USB Pen Drive and *save your system changes* – read this INSTRUCTION <http://cruxex.exton.net/cruxex-3.2-pen-drive>. If you later on decide you want to install CruxEX to hard drive from the USB Pen Drive all your system changes will also be installed to the hard drive. Or burn the ISO file to a CD and run CruxEX live the “normal” way. Mainly the ISO file is for all of you who like to run and test Linux systems in VirtualBox <https://www.virtualbox.org/> (before installing the systems to hard drive). See a screenshot of the LXDE Desktop <http://cruxex.exton.net/cruxex-desktop-160414.jpg> Study ALL installed packages <http://cruxex.exton.net/cruxex-3.2-installed-packages-160314.txt> *READ MORE... <http://cruxex.exton.net/>*################################################* <http://cruxex.exton.net/>*C A Exton* <http://cruxex.exton.net/>***Exton Linux | Live Systems* www.exton.se <http://www.exton.se> <http://cruxex.exton.net/>*

1 0

ports/opt (3.2): [notify] imlib2: updated to 1.4.8
by crux＠crux.nu 12 Apr '16

12 Apr '16

commit 1f4fa45042269d52a8782845c01451472a17c96c Author: Jose V Beneyto <sepen(a)crux.nu> Date: Tue Apr 12 11:39:29 2016 +0200 [notify] imlib2: updated to 1.4.8 Security fix: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=785369 diff --git a/imlib2/.footprint b/imlib2/.footprint index c1d8d58..9478cc1 100644 --- a/imlib2/.footprint +++ b/imlib2/.footprint @@ -27,6 +27,8 @@ drwxr-xr-x root/root usr/lib/imlib2/loaders/ -rwxr-xr-x root/root usr/lib/imlib2/loaders/bmp.so -rwxr-xr-x root/root usr/lib/imlib2/loaders/bz2.la -rwxr-xr-x root/root usr/lib/imlib2/loaders/bz2.so +-rwxr-xr-x root/root usr/lib/imlib2/loaders/ff.la +-rwxr-xr-x root/root usr/lib/imlib2/loaders/ff.so -rwxr-xr-x root/root usr/lib/imlib2/loaders/gif.la -rwxr-xr-x root/root usr/lib/imlib2/loaders/gif.so -rwxr-xr-x root/root usr/lib/imlib2/loaders/id3.la @@ -49,9 +51,9 @@ drwxr-xr-x root/root usr/lib/imlib2/loaders/ -rwxr-xr-x root/root usr/lib/imlib2/loaders/zlib.so -rw-r--r-- root/root usr/lib/libImlib2.a -rwxr-xr-x root/root usr/lib/libImlib2.la -lrwxrwxrwx root/root usr/lib/libImlib2.so -> libImlib2.so.1.4.7 -lrwxrwxrwx root/root usr/lib/libImlib2.so.1 -> libImlib2.so.1.4.7 --rwxr-xr-x root/root usr/lib/libImlib2.so.1.4.7 +lrwxrwxrwx root/root usr/lib/libImlib2.so -> libImlib2.so.1.4.8 +lrwxrwxrwx root/root usr/lib/libImlib2.so.1 -> libImlib2.so.1.4.8 +-rwxr-xr-x root/root usr/lib/libImlib2.so.1.4.8 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/imlib2.pc drwxr-xr-x root/root usr/share/ diff --git a/imlib2/.md5sum b/imlib2/.md5sum index 4968862..6b0eae4 100644 --- a/imlib2/.md5sum +++ b/imlib2/.md5sum @@ -1 +1,2 @@ -f2f1418c376da6125453f90f2d58d938 imlib2-1.4.7.tar.bz2 +80d8aeb7b04c8809ba4a3e3a0e0aad01 imlib2-1.4.8-gif-oob.patch +97cf1007b0339102974ce20c8f17c249 imlib2-1.4.8.tar.bz2 diff --git a/imlib2/Pkgfile b/imlib2/Pkgfile index 31ace21..4e7d7a1 100644 --- a/imlib2/Pkgfile +++ b/imlib2/Pkgfile @@ -5,13 +5,16 @@ # Depends on: freetype, libid3tag, libpng, libtiff, giflib, xorg-libsm, xorg-libxext name=imlib2 -version=1.4.7 +version=1.4.8 release=1 -source=(http://download.sourceforge.net/enlightenment/$name-$version.tar.bz2) +source=(http://download.sourceforge.net/enlightenment/$name-$version.tar.bz2 \ + https://gitweb.gentoo.org/repo/gentoo.git/plain/media-libs/$name/files/$nam…) build() { cd $name-$version + patch -p1 -i $SRC/$name-$version-gif-oob.patch + ./configure --prefix=/usr make diff --git a/imlib2/imlib2-1.4.8-gif-oob.patch b/imlib2/imlib2-1.4.8-gif-oob.patch new file mode 100644 index 0000000..ed29757 --- /dev/null +++ b/imlib2/imlib2-1.4.8-gif-oob.patch @@ -0,0 +1,39 @@ +From 16de244bd03d2f75da6508feb1ad9cb4e668e9dc Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Bernhard=20=C3=9Cbelacker?= <bernhardu(a)vr-web.de> +Date: Sat, 2 Apr 2016 13:05:21 -0400 +Subject: [PATCH] gif: fix oob reads w/bad colormaps + +Verify the color map is inbounds before indexing with it. + +https://bugs.debian.org/785369 +--- + src/modules/loaders/loader_gif.c | 13 ++++++++++--- + 1 file changed, 10 insertions(+), 3 deletions(-) + +diff --git a/src/modules/loaders/loader_gif.c b/src/modules/loaders/loader_gif.c +index 638df59..7bdf29c 100644 +--- a/src/modules/loaders/loader_gif.c ++++ b/src/modules/loaders/loader_gif.c +@@ -170,9 +170,16 @@ load(ImlibImage * im, ImlibProgressFunction progress, char progress_granularity, + } + else + { +- r = cmap->Colors[rows[i][j]].Red; +- g = cmap->Colors[rows[i][j]].Green; +- b = cmap->Colors[rows[i][j]].Blue; ++ if (rows[i][j] < cmap->ColorCount) ++ { ++ r = cmap->Colors[rows[i][j]].Red; ++ g = cmap->Colors[rows[i][j]].Green; ++ b = cmap->Colors[rows[i][j]].Blue; ++ } ++ else ++ { ++ r = g = b = 0; ++ } + *ptr++ = (0xff << 24) | (r << 16) | (g << 8) | b; + } + per += per_inc; +-- +2.7.4 +

1 0

ports/core (3.2): [notify] dhcpcd: update to 6.10.2
by crux＠crux.nu 09 Apr '16

09 Apr '16

commit df741eb04bed6c6e8d4b3857727870beaac08c86 Author: Juergen Daubert <jue(a)jue.li> Date: Sat Apr 9 13:57:09 2016 +0200 [notify] dhcpcd: update to 6.10.2 includes a security fix, see - http://roy.marples.name/archives/dhcpcd-discuss/2016/1244.html - http://www.cvedetails.com/cve/CVE-2014-7913/ diff --git a/dhcpcd/.md5sum b/dhcpcd/.md5sum index 9f1a8c5..b78075f 100644 --- a/dhcpcd/.md5sum +++ b/dhcpcd/.md5sum @@ -1 +1 @@ -a7b83c57f47b62f48373905d3b4f7978 dhcpcd-6.10.1.tar.xz +b8e2e9b38db95314991c1774542a8cdc dhcpcd-6.10.2.tar.xz diff --git a/dhcpcd/Pkgfile b/dhcpcd/Pkgfile index 8ba5d6e..e592e4f 100644 --- a/dhcpcd/Pkgfile +++ b/dhcpcd/Pkgfile @@ -4,7 +4,7 @@ # Depends on: eudev name=dhcpcd -version=6.10.1 +version=6.10.2 release=1 source=(http://roy.marples.name/downloads/dhcpcd/$name-$version.tar.xz)

1 0

ports/opt (3.2): [notify] flash-player-plugin: updated to 11.2.202.616
by crux＠crux.nu 08 Apr '16

08 Apr '16

commit b82ddd206f1324325cec554115b3a4927e54ad92 Author: Jose V Beneyto <sepen(a)crux.nu> Date: Fri Apr 8 16:27:57 2016 +0200 [notify] flash-player-plugin: updated to 11.2.202.616 Security update: https://helpx.adobe.com/security/products/flash-player/apsb16-10.html diff --git a/flash-player-plugin/.md5sum b/flash-player-plugin/.md5sum index f05e0ec..60cc3be 100644 --- a/flash-player-plugin/.md5sum +++ b/flash-player-plugin/.md5sum @@ -1 +1 @@ -d718cc8e286bc8b99c70bf5506fa61bb flash-plugin-11.2.202.577-release.x86_64.rpm +f8b6cdf5c0e538e4acdf5dab2571b352 flash-plugin-11.2.202.616-release.x86_64.rpm diff --git a/flash-player-plugin/Pkgfile b/flash-player-plugin/Pkgfile index 13995fe..a10c39f 100644 --- a/flash-player-plugin/Pkgfile +++ b/flash-player-plugin/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=flash-player-plugin -version=11.2.202.577 +version=11.2.202.616 release=1 source=(http://fpdownload.macromedia.com/get/flashplayer/pdc/$version/flash…

1 0

ports/core (3.2): [notify] exim: update to 4.87
by crux＠crux.nu 07 Apr '16

07 Apr '16

commit 32d711c85d4d006d2c6ddb2682d7c7623db05ada Author: Juergen Daubert <jue(a)jue.li> Date: Thu Apr 7 13:58:47 2016 +0200 [notify] exim: update to 4.87 Note the following change in behaviour: JH/18 Bug 1709: When built with TLS support, the tls_advertise_hosts option now defaults to "*" (all hosts). The variable is now available when not built with TLS, default unset, mainly to enable keeping the testuite sane. If a server certificate is not supplied (via tls_certificate) an error is logged, and clients will find TLS connections fail on startup. Presumably they will retry in-clear. Packagers of Exim are strongly encouraged to create a server certificate at installation time. To follow that advice our rc-script creates the required certificate and the two variables tls_certificate and tls_privatekey are set in the configuration file. diff --git a/exim/.footprint b/exim/.footprint index 0ed33f9..9e44520 100644 --- a/exim/.footprint +++ b/exim/.footprint @@ -6,12 +6,11 @@ drwxr-xr-x root/root etc/rc.d/ -rwxr-xr-x root/root etc/rc.d/exim drwxr-xr-x root/root usr/ drwxr-xr-x root/root usr/bin/ -lrwxrwxrwx root/root usr/bin/mailq -> ../sbin/exim-4.86.2-1 +lrwxrwxrwx root/root usr/bin/mailq -> ../sbin/exim drwxr-xr-x root/root usr/sbin/ -rwxr-xr-x root/root usr/sbin/exicyclog -rwxr-xr-x root/root usr/sbin/exigrep -lrwxrwxrwx root/root usr/sbin/exim -> exim-4.86.2-1 --rwsr-xr-x root/root usr/sbin/exim-4.86.2-1 +-rwsr-xr-x root/root usr/sbin/exim -rwxr-xr-x root/root usr/sbin/exim_checkaccess -rwxr-xr-x root/root usr/sbin/exim_dbmbuild -rwxr-xr-x root/root usr/sbin/exim_dumpdb @@ -24,7 +23,7 @@ lrwxrwxrwx root/root usr/sbin/exim -> exim-4.86.2-1 -rwxr-xr-x root/root usr/sbin/exiqgrep -rwxr-xr-x root/root usr/sbin/exiqsumm -rwxr-xr-x root/root usr/sbin/exiwhat -lrwxrwxrwx root/root usr/sbin/sendmail -> exim-4.86.2-1 +lrwxrwxrwx root/root usr/sbin/sendmail -> exim drwxr-xr-x root/root usr/share/ drwxr-xr-x root/root usr/share/man/ drwxr-xr-x root/root usr/share/man/man8/ diff --git a/exim/.md5sum b/exim/.md5sum index cbef9d0..4e2f424 100644 --- a/exim/.md5sum +++ b/exim/.md5sum @@ -1,4 +1,3 @@ -d0022b47423fae3a46168e84ee0cc3df exim -1443a4a88d6b78ad9b6a681c51437b55 exim-4.86.2.tar.bz2 -f8232b63f2abfb86b4ae77a1db3d2c79 exim-compile_number.patch -e0cb481dd114e6e7640342bacae1cbe5 exim-config.patch +2e73c992dc8491a33f225efbe4da9e32 exim +2effc2bd47ad2dc010f655c11a1b1173 exim-4.87.tar.bz2 +d007c183df359217bcfcbbebbf9d048f exim-config.patch diff --git a/exim/Pkgfile b/exim/Pkgfile index 7c59117..33b6430 100644 --- a/exim/Pkgfile +++ b/exim/Pkgfile @@ -4,23 +4,22 @@ # Depends on: db openssl libpcre name=exim -version=4.86.2 -release=2 +version=4.87 +release=1 source=(ftp://ftp.exim.org/pub/exim/exim4/$name-$version.tar.bz2 \ - $name $name-config.patch - $name-compile_number.patch) + $name $name-config.patch) build() { cd $name-$version - patch -p1 -i $SRC/$name-compile_number.patch - sed "s/#CFLAGS#/$CFLAGS/" $SRC/$name-config.patch | patch -p1 cp src/EDITME Local/Makefile make -j1 make DESTDIR=$PKG install + mv $PKG/usr/sbin/{$name-$version-?,$name} + install -D -m 755 $SRC/exim $PKG/etc/rc.d/exim install -D -m 644 doc/exim.8 $PKG/usr/share/man/man8/exim.8 @@ -31,6 +30,6 @@ build() { chown mail:mail $PKG/var/log/exim/* chmod 640 $PKG/var/log/exim/* - ln -sf $name-$version-1 $PKG/usr/sbin/sendmail - ln -sf ../sbin/$name-$version-1 $PKG/usr/bin/mailq + ln -sf $name $PKG/usr/sbin/sendmail + ln -sf ../sbin/$name $PKG/usr/bin/mailq } diff --git a/exim/exim b/exim/exim index ef9b9a4..50ee486 100644 --- a/exim/exim +++ b/exim/exim @@ -8,8 +8,15 @@ PROG=/usr/sbin/exim PID=/var/run/exim.pid OPTS="-bd -q15m" +CRT=/etc/ssl/certs/exim.crt +KEY=/etc/ssl/keys/exim.key + case $1 in start) + if [ ! -s $CRT -o ! -s $KEY ]; then + /usr/bin/mksslcert $KEY $CRT + chown mail $CRT $KEY + fi $SSD --start --pidfile $PID --exec $PROG -- $OPTS ;; stop) diff --git a/exim/exim-compile_number.patch b/exim/exim-compile_number.patch deleted file mode 100644 index 41275a0..0000000 --- a/exim/exim-compile_number.patch +++ /dev/null @@ -1,21 +0,0 @@ -diff -Nru exim-4.86.orig/OS/Makefile-Base exim-4.86/OS/Makefile-Base ---- exim-4.86.orig/OS/Makefile-Base 2015-07-27 09:39:41.642108689 +0200 -+++ exim-4.86/OS/Makefile-Base 2015-07-27 09:41:21.145237745 +0200 -@@ -481,7 +481,7 @@ - - # Update Exim's version information and build the version object. - --version.h:: -+version.h: - @../scripts/reversion - - cnumber.h: version.h -diff -Nru exim-4.86.orig/src/version.sh exim-4.86/src/version.sh ---- exim-4.86.orig/src/version.sh 2015-07-27 09:39:41.645441903 +0200 -+++ exim-4.86/src/version.sh 2015-07-27 09:41:21.145237745 +0200 -@@ -1,4 +1,4 @@ - # automatically generated file - see ../scripts/reversion - EXIM_RELEASE_VERSION=4.86 --EXIM_VARIANT_VERSION=_2 -+EXIM_VARIANT_VERSION=.2 - EXIM_COMPILE_NUMBER=0 diff --git a/exim/exim-config.patch b/exim/exim-config.patch index 3a983e7..fb28233 100644 --- a/exim/exim-config.patch +++ b/exim/exim-config.patch @@ -1,6 +1,6 @@ -diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME ---- exim-4.86.2.orig/src/EDITME 2016-03-13 12:36:10.099306370 +0100 -+++ exim-4.86.2/src/EDITME 2016-03-13 12:37:02.604031333 +0100 +diff -Nru exim-4.87.orig/src/EDITME exim-4.87/src/EDITME +--- exim-4.87.orig/src/EDITME 2016-04-07 13:13:37.489879288 +0200 ++++ exim-4.87/src/EDITME 2016-04-07 13:13:56.162537206 +0200 @@ -72,7 +72,7 @@ # this would be wanted. ############################################################################### @@ -46,7 +46,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME # SUPPORT_MAILSTORE=yes # SUPPORT_MBX=yes -@@ -296,8 +296,8 @@ +@@ -301,8 +301,8 @@ LOOKUP_LSEARCH=yes LOOKUP_DNSDB=yes @@ -57,7 +57,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME # LOOKUP_IBASE=yes # LOOKUP_LDAP=yes # LOOKUP_MYSQL=yes -@@ -373,7 +373,7 @@ +@@ -380,7 +380,7 @@ # files are defaulted in the OS/Makefile-Default file, but can be overridden in # local OS-specific make files. @@ -66,7 +66,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME #------------------------------------------------------------------------------ -@@ -628,14 +628,14 @@ +@@ -618,14 +618,14 @@ # included in the Exim binary. You will then need to set up the run time # configuration to make use of the mechanism(s) selected. @@ -83,7 +83,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME # AUTH_SPA=yes # AUTH_TLS=yes -@@ -740,10 +740,10 @@ +@@ -730,10 +730,10 @@ # leave these settings commented out. # This setting is required for any TLS support (either OpenSSL or GnuTLS) @@ -96,7 +96,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME # TLS_LIBS=-lssl -lcrypto # Uncomment the first and either the second or the third of these if you -@@ -822,7 +822,7 @@ +@@ -812,7 +812,7 @@ # %s. This will be replaced by one of the strings "main", "panic", or "reject" # to form the final file names. Some installations may want something like this: @@ -105,7 +105,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME # which results in files with names /var/log/exim_mainlog, etc. The directory # in which the log files are placed must exist; Exim does not try to create -@@ -871,7 +871,7 @@ +@@ -861,7 +861,7 @@ # files. Both the name of the command and the suffix that it adds to files # need to be defined here. See also the EXICYCLOG_MAX configuration. @@ -114,7 +114,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME COMPRESS_SUFFIX=gz -@@ -886,7 +886,7 @@ +@@ -876,7 +876,7 @@ # ZCAT_COMMAND=zcat # # Or specify the full pathname: @@ -123,7 +123,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME #------------------------------------------------------------------------------ # Compiling in support for embedded Perl: If you want to be able to -@@ -997,7 +997,7 @@ +@@ -1013,7 +1013,7 @@ # # USE_TCP_WRAPPERS=yes # CFLAGS=-O -I/usr/local/include @@ -132,7 +132,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME # # but of course there may need to be other things in CFLAGS and EXTRALIBS_EXIM # as well. -@@ -1030,7 +1030,7 @@ +@@ -1046,7 +1046,7 @@ # aliases). The following setting can be changed to specify a different # location for the system alias file. @@ -141,7 +141,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME #------------------------------------------------------------------------------ -@@ -1059,7 +1059,7 @@ +@@ -1075,7 +1075,7 @@ #------------------------------------------------------------------------------ # Uncomment this setting to include IPv6 support. @@ -150,7 +150,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME ############################################################################### # THINGS YOU ALMOST NEVER NEED TO MENTION # -@@ -1080,13 +1080,13 @@ +@@ -1096,13 +1096,13 @@ # haven't got Perl, Exim will still build and run; you just won't be able to # use those utilities. @@ -171,7 +171,7 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME #------------------------------------------------------------------------------ -@@ -1286,7 +1286,7 @@ +@@ -1304,7 +1304,7 @@ # (process id) to a file so that it can easily be identified. The path of the # file can be specified here. Some installations may want something like this: @@ -180,10 +180,10 @@ diff -Nru exim-4.86.2.orig/src/EDITME exim-4.86.2/src/EDITME # If PID_FILE_PATH is not defined, Exim writes a file in its spool directory # using the name "exim-daemon.pid". -diff -Nru exim-4.86.2.orig/src/configure.default exim-4.86.2/src/configure.default ---- exim-4.86.2.orig/src/configure.default 2016-03-13 12:36:10.099306370 +0100 -+++ exim-4.86.2/src/configure.default 2016-03-13 12:36:24.978759386 +0100 -@@ -54,7 +54,7 @@ +diff -Nru exim-4.87.orig/src/configure.default exim-4.87/src/configure.default +--- exim-4.87.orig/src/configure.default 2016-04-07 13:13:37.486546075 +0200 ++++ exim-4.87/src/configure.default 2016-04-07 13:16:39.806618024 +0200 +@@ -55,7 +55,7 @@ # +local_domains, +relay_to_domains, and +relay_from_hosts, respectively. They # are all colon-separated lists: @@ -192,3 +192,23 @@ diff -Nru exim-4.86.2.orig/src/configure.default exim-4.86.2/src/configure.defau domainlist relay_to_domains = hostlist relay_from_hosts = localhost # (We rely upon hostname resolution working for localhost, because the default +@@ -150,8 +150,8 @@ + # need the first setting, or in separate files, in which case you need both + # options. + +-# tls_certificate = /etc/ssl/exim.crt +-# tls_privatekey = /etc/ssl/exim.pem ++tls_certificate = /etc/ssl/certs/exim.crt ++tls_privatekey = /etc/ssl/keys/exim.key + + # In order to support roaming users who wish to send email from anywhere, + # you may want to make Exim listen on other ports as well as port 25, in +@@ -165,7 +165,7 @@ + # daemon_smtp_ports = 25 : 465 : 587 + # tls_on_connect_ports = 465 + +- ++asdad + # Specify the domain you want to be added to all unqualified addresses + # here. An unqualified address is one that does not contain an "@" character + # followed by a domain. For example, "caesar(a)rome.example" is a fully qualified

1 0

Background Startup Service
by Alex Matviychuk 05 Apr '16

05 Apr '16

The wlan startup script takes a while to come up so I threw it into rc.local and forced it to the background. Is there any way to background a service in rc.conf? Not a huge deal and things work well enough now, just curious. Thanks, Alex

2 2

repos providing only md5 sums
by rain1＠openmailbox.org 01 Apr '16

01 Apr '16

Hello, I noticed that crux mirrors only provide md5 hashes for verification. I recommend moving to sha256 which is a secure hash function. md5 is not a secure hash function any longer as it has several weaknesses that are not expected of a hash [1]. There are a couple instances of it being exploited in serious situations in the real world, for example [2] and [3]. Collisions can be forged on a home computer today [4]. These sort of attacks do not directly affect the way the hash is used in crux but they do demonstrate weakness in md5. I think this gives a strong case for depreciating its usage. There was a bug report about this 8 years ago which was closed <https://crux.nu/bugs/index.php?do=details&task_id=223>. If people agree in this thread then maybe that bug report could be re-opened. Thank you * [1] https://www.kb.cert.org/vuls/id/836068 * [2] https://www.win.tue.nl/hashclash/rogue-ca/ * [3] https://www.trailofbits.com/resources/flame-md5.pdf * [4] http://natmchugh.blogspot.co.uk/2014/10/how-i-created-two-images-with-same-…

9 16

ports/opt (3.2): [notify] php: security update to 5.6.20
by crux＠crux.nu 01 Apr '16

01 Apr '16

commit dbded0e0d8f3602a8ce65436a49a3869fa9523da Author: Juergen Daubert <jue(a)jue.li> Date: Fri Apr 1 14:01:41 2016 +0200 [notify] php: security update to 5.6.20 diff --git a/php/.md5sum b/php/.md5sum index b4700eb..9605124 100644 --- a/php/.md5sum +++ b/php/.md5sum @@ -1 +1 @@ -aab960cc1b2bfbeb00d030a9d42b38bd php-5.6.19.tar.xz +e81f3993997acafeac2ddd2c8bab7153 php-5.6.20.tar.xz diff --git a/php/Pkgfile b/php/Pkgfile index b706d7f..d717f6e 100644 --- a/php/Pkgfile +++ b/php/Pkgfile @@ -4,7 +4,7 @@ # Depends on: readline libpcre libxml2 curl db gdbm xz name=php -version=5.6.19 +version=5.6.20 release=1 source=(http://php.net/distributions/php-$version.tar.xz)

1 0