November 2017 - CRUX - lists.crux.nu

Poppler update breaks texlive
by Xavier 08 Jul '19

08 Jul '19

poppler update to 0.59.0 breaks texlive. I guess it's an upstream problem (see log extract in attachment). I had to revert to poppler 0.57.0

4 7

ports/core (3.3): [notify] exim: security update to 4.89.1
by crux＠crux.nu 29 Nov '17

29 Nov '17

commit cb985af72f8c2d0d83c554355bcbbd7fbf30587f Author: Juergen Daubert <jue(a)jue.li> Date: Wed Nov 29 18:55:33 2017 +0100 [notify] exim: security update to 4.89.1 see - https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html - https://lists.exim.org/lurker/message/20171128.215505.79ea8efa.en.html diff --git a/exim/.md5sum b/exim/.md5sum index 95a5dad1..f851e6a5 100644 --- a/exim/.md5sum +++ b/exim/.md5sum @@ -1,3 +1,3 @@ 2e73c992dc8491a33f225efbe4da9e32 exim -b569ec80c495dffc54545895e680ed61 exim-4.89.tar.xz -f1f6867cb984a61f85d42fdb4fa83677 exim-config.patch +e5d48403fc93cd1ff2d3124c15af6018 exim-4.89.1.tar.xz +fd5b5983a6b8ad29f0fd8ba10603d569 exim-config.patch diff --git a/exim/.signature b/exim/.signature index 3e35690c..398aeb20 100644 --- a/exim/.signature +++ b/exim/.signature @@ -1,7 +1,7 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqvgtMpIIkQJAlRLxq99KSRe3jxGq33jKSAylw8mu0sa1Ue0RHe6RWaRENao5Nce8qi5/D5AjLSVlYzSNvqpTbwM= -SHA256 (Pkgfile) = 798f9c95d2b1f1cb8b9b59f614cc2d0fc71687eeb7ffb13f75f6a73ad2367dd2 +RWRJc1FUaeVeqvsQjjQ0cffFQnFydrXZvBGsYcrcsnjKvkGE3KxB11Zplg4rSstyAmUJR4P5s/wRi9JxDeajqFlF42F4t3dONQk= +SHA256 (Pkgfile) = cfe7104f805a776b11b34d2fd4204bfd6195b65b3193fe4faefd9ee1f4949a5e SHA256 (.footprint) = 3e5fe8471a7a9057c0c7486c016ea2ed1dc5ebd72adc13c23f432ef468d2fc5d -SHA256 (exim-4.89.tar.xz) = 0c490a1ca97bbb22d6079d2896de19af48ac3af109ea5f307dbc6b49c66e9626 +SHA256 (exim-4.89.1.tar.xz) = 1a21322a10e2da9c0bd6a2a483b6e7ef8fa7f16efcab4c450fd73e7188f5fa94 SHA256 (exim) = 850f72cb4d069dc8d15ce138623e6b6a7fe33f5daebe37fbf93c7801fa2d6134 -SHA256 (exim-config.patch) = eef009451af3e97d8089f97db0e1a008157aaaea346703da412158443012614b +SHA256 (exim-config.patch) = 27109eceb9b5adb9a8eb870a3213f0c237b3bb2fdc47a554215ac769932cd8c8 diff --git a/exim/Pkgfile b/exim/Pkgfile index 8e56dbb3..3d73fa41 100644 --- a/exim/Pkgfile +++ b/exim/Pkgfile @@ -4,8 +4,8 @@ # Depends on: db openssl libpcre name=exim -version=4.89 -release=2 +version=4.89.1 +release=1 source=(ftp://ftp.exim.org/pub/exim/exim4/$name-$version.tar.xz \ $name $name-config.patch) @@ -18,7 +18,7 @@ build() { make -j1 make DESTDIR=$PKG install - mv $PKG/usr/sbin/{$name-$version-?,$name} + mv $PKG/usr/sbin/{$(readlink $PKG/usr/sbin/$name),$name} install -D -m 755 $SRC/exim $PKG/etc/rc.d/exim install -D -m 644 doc/exim.8 $PKG/usr/share/man/man8/exim.8 @@ -37,7 +37,4 @@ build() { touch $PKG/etc/ssl/certs/exim.crt touch $PKG/etc/ssl/keys/exim.key chmod 0600 $PKG/etc/ssl/{keys/exim.key,certs/exim.crt} - - # https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html - sed -e '44i\\nchunking_advertise_hosts =' -i $PKG/etc/exim/exim.conf } diff --git a/exim/exim-config.patch b/exim/exim-config.patch index 2de98223..5c374d6e 100644 --- a/exim/exim-config.patch +++ b/exim/exim-config.patch @@ -1,6 +1,6 @@ -diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME ---- exim-4.89.orig/src/EDITME 2017-03-08 11:08:51.225985193 +0100 -+++ exim-4.89/src/EDITME 2017-03-08 11:12:46.989840413 +0100 +diff -Nru exim-4.89.1.orig/src/EDITME exim-4.89.1/src/EDITME +--- exim-4.89.1.orig/src/EDITME 2017-11-29 18:23:53.623089271 +0100 ++++ exim-4.89.1/src/EDITME 2017-11-29 18:24:18.092218489 +0100 @@ -72,7 +72,7 @@ # this would be wanted. ############################################################################### @@ -57,7 +57,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME # LOOKUP_IBASE=yes # LOOKUP_LDAP=yes # LOOKUP_MYSQL=yes -@@ -380,7 +380,7 @@ +@@ -381,7 +381,7 @@ # files are defaulted in the OS/Makefile-Default file, but can be overridden in # local OS-specific make files. @@ -66,7 +66,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME #------------------------------------------------------------------------------ -@@ -622,7 +622,7 @@ +@@ -623,7 +623,7 @@ # included in the Exim binary. You will then need to set up the run time # configuration to make use of the mechanism(s) selected. @@ -75,7 +75,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME # AUTH_CYRUS_SASL=yes # AUTH_DOVECOT=yes # AUTH_GSASL=yes -@@ -630,7 +630,7 @@ +@@ -631,7 +631,7 @@ # AUTH_HEIMDAL_GSSAPI=yes # AUTH_HEIMDAL_GSSAPI_PC=heimdal-gssapi # AUTH_HEIMDAL_GSSAPI_PC=heimdal-gssapi heimdal-krb5 @@ -84,7 +84,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME # AUTH_SPA=yes # AUTH_TLS=yes -@@ -745,10 +745,10 @@ +@@ -746,10 +746,10 @@ # leave these settings commented out. # This setting is required for any TLS support (either OpenSSL or GnuTLS) @@ -97,7 +97,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME # TLS_LIBS=-lssl -lcrypto # Uncomment the first and either the second or the third of these if you -@@ -831,7 +831,7 @@ +@@ -832,7 +832,7 @@ # %s. This will be replaced by one of the strings "main", "panic", or "reject" # to form the final file names. Some installations may want something like this: @@ -106,7 +106,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME # which results in files with names /var/log/exim_mainlog, etc. The directory # in which the log files are placed must exist; Exim does not try to create -@@ -880,7 +880,7 @@ +@@ -881,7 +881,7 @@ # files. Both the name of the command and the suffix that it adds to files # need to be defined here. See also the EXICYCLOG_MAX configuration. @@ -115,7 +115,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME COMPRESS_SUFFIX=gz -@@ -895,7 +895,7 @@ +@@ -896,7 +896,7 @@ # ZCAT_COMMAND=zcat # # Or specify the full pathname: @@ -124,7 +124,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME #------------------------------------------------------------------------------ # Compiling in support for embedded Perl: If you want to be able to -@@ -1036,7 +1036,7 @@ +@@ -1037,7 +1037,7 @@ # # USE_TCP_WRAPPERS=yes # CFLAGS=-O -I/usr/local/include @@ -133,7 +133,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME # # but of course there may need to be other things in CFLAGS and EXTRALIBS_EXIM # as well. -@@ -1069,7 +1069,7 @@ +@@ -1070,7 +1070,7 @@ # aliases). The following setting can be changed to specify a different # location for the system alias file. @@ -142,7 +142,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME #------------------------------------------------------------------------------ -@@ -1098,7 +1098,7 @@ +@@ -1099,7 +1099,7 @@ #------------------------------------------------------------------------------ # Uncomment this setting to include IPv6 support. @@ -151,7 +151,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME ############################################################################### # THINGS YOU ALMOST NEVER NEED TO MENTION # -@@ -1119,13 +1119,13 @@ +@@ -1120,13 +1120,13 @@ # haven't got Perl, Exim will still build and run; you just won't be able to # use those utilities. @@ -172,7 +172,7 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME #------------------------------------------------------------------------------ -@@ -1327,7 +1327,7 @@ +@@ -1328,7 +1328,7 @@ # (process id) to a file so that it can easily be identified. The path of the # file can be specified here. Some installations may want something like this: @@ -181,9 +181,9 @@ diff -Nru exim-4.89.orig/src/EDITME exim-4.89/src/EDITME # If PID_FILE_PATH is not defined, Exim writes a file in its spool directory # using the name "exim-daemon.pid". -diff -Nru exim-4.89.orig/src/configure.default exim-4.89/src/configure.default ---- exim-4.89.orig/src/configure.default 2017-03-08 11:08:51.229318534 +0100 -+++ exim-4.89/src/configure.default 2017-03-08 11:09:06.722686163 +0100 +diff -Nru exim-4.89.1.orig/src/configure.default exim-4.89.1/src/configure.default +--- exim-4.89.1.orig/src/configure.default 2017-11-29 18:23:53.623089271 +0100 ++++ exim-4.89.1/src/configure.default 2017-11-29 18:24:18.092218489 +0100 @@ -55,7 +55,7 @@ # +local_domains, +relay_to_domains, and +relay_from_hosts, respectively. They # are all colon-separated lists:

1 0

ports/xorg (3.3): [notify] xorg-libxfont: updated to 1.5.4. Fix for CVE-2017-16611
by crux＠crux.nu 29 Nov '17

29 Nov '17

commit 54c21b4e2536b67c12b3817f52a39a8789e1e75d Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Nov 29 17:35:11 2017 +0100 [notify] xorg-libxfont: updated to 1.5.4. Fix for CVE-2017-16611 diff --git a/xorg-libxfont/.md5sum b/xorg-libxfont/.md5sum index c936fc3..f6a5a66 100644 --- a/xorg-libxfont/.md5sum +++ b/xorg-libxfont/.md5sum @@ -1 +1 @@ -9ba75bf38ba62a6ad52550ab716da9b3 libXfont-1.5.3.tar.bz2 +16eaf156edd79b68038b6a7c44aa9e9b libXfont-1.5.4.tar.bz2 diff --git a/xorg-libxfont/.signature b/xorg-libxfont/.signature index 2218614..6bc87e3 100644 --- a/xorg-libxfont/.signature +++ b/xorg-libxfont/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndFf9GJkvx+DkVTIg1QHSPFs8144vwZOdi6kZrYS4aBrB5SbpxxBkdOr6h1FgbfwLNdW5ZFpwZMc1Umauu1ES0g4= -SHA256 (Pkgfile) = b2a25506e337c8bf09b007da5a62db8abac95ab0b7da4a6a31bf55f683375774 +RWTSGWF5Q7TndOWJOFYQcrOEM09OlBephKVtsVG4FpyacBl+62sbNeghXi6N9/rt4DM9v/LqwVULJmrZ0ed+tRgiNCwOV09Pwwo= +SHA256 (Pkgfile) = a8ece71efa201633c4a0703a285aa034cae8311080ae2115701412e21fd9c779 SHA256 (.footprint) = 686b53b870b0d54c2aa693379b33c5ed88817527d477da80cf86b0bc3c883271 -SHA256 (libXfont-1.5.3.tar.bz2) = ab85c10fd2683481dfef672a77fe60e6a2039558cbc0e9bf56b5e1df471c93d0 +SHA256 (libXfont-1.5.4.tar.bz2) = 1a7f7490774c87f2052d146d1e0e64518d32e6848184a18654e8d0bb57883242 diff --git a/xorg-libxfont/Pkgfile b/xorg-libxfont/Pkgfile index d835e88..45267c1 100644 --- a/xorg-libxfont/Pkgfile +++ b/xorg-libxfont/Pkgfile @@ -4,7 +4,7 @@ # Depends on: freetype, xorg-xtrans, xorg-fontsproto, xorg-libfontenc name=xorg-libxfont -version=1.5.3 +version=1.5.4 release=1 source=(http://xorg.freedesktop.org/releases/individual/lib/libXfont-$versi…

1 0

ports/xorg (3.3): [notify] xorg-libxcursor: updated to 1.1.15. Fix for CVE-2017-16612.
by crux＠crux.nu 29 Nov '17

29 Nov '17

commit 4604a399e5a865f72a8715a3b45e5d2d1e9afb70 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Nov 29 17:34:03 2017 +0100 [notify] xorg-libxcursor: updated to 1.1.15. Fix for CVE-2017-16612. diff --git a/xorg-libxcursor/.md5sum b/xorg-libxcursor/.md5sum index b980a90..8280fee 100644 --- a/xorg-libxcursor/.md5sum +++ b/xorg-libxcursor/.md5sum @@ -1 +1 @@ -1e7c17afbbce83e2215917047c57d1b3 libXcursor-1.1.14.tar.bz2 +58fe3514e1e7135cf364101e714d1a14 libXcursor-1.1.15.tar.bz2 diff --git a/xorg-libxcursor/.signature b/xorg-libxcursor/.signature index ab87653..4b41d59 100644 --- a/xorg-libxcursor/.signature +++ b/xorg-libxcursor/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndIYIPjx354t9Obbg3eCZnHPVp0P4NYab42iKs5qym6Xx50Znttf6aN380rSmlNjUDIZ1xv67ODWzoJFAQ7cSUQ0= -SHA256 (Pkgfile) = 07aa59147ef3d8993af1b19bb9b3b82352169915cec6d27105e35191c60c9c48 +RWTSGWF5Q7TndE1r+jCaMwUK2jB0ttKULK+0uIJaC/TezMuVvolrKOhcZRRhZ06itPGKUv2xhfdh6l36f33Mp7zT6a8RinhUJwc= +SHA256 (Pkgfile) = 8aa5833bb006dd439a9f9d512321f23cda1defdef0cbaea09a14ed17fc37a6c9 SHA256 (.footprint) = 9074677ecf43062b9bfd8f33f02732e268226ddc18786eb648a33c931259ec1b -SHA256 (libXcursor-1.1.14.tar.bz2) = 9bc6acb21ca14da51bda5bc912c8955bc6e5e433f0ab00c5e8bef842596c33df +SHA256 (libXcursor-1.1.15.tar.bz2) = 294e670dd37cd23995e69aae626629d4a2dfe5708851bbc13d032401b7a3df6b diff --git a/xorg-libxcursor/Pkgfile b/xorg-libxcursor/Pkgfile index 3ecb2e2..ed31c3d 100644 --- a/xorg-libxcursor/Pkgfile +++ b/xorg-libxcursor/Pkgfile @@ -4,8 +4,8 @@ # Depends on: xorg-libxfixes xorg-libxrender name=xorg-libxcursor -version=1.1.14 -release=2 +version=1.1.15 +release=1 source=(http://xorg.freedesktop.org/releases/individual/lib/libXcursor-$ver… build() {

1 0

ports/xorg (3.3): [notify] xorg-libxfont2: Updated to 2.0.3. Fix for CVE-2017-16611
by crux＠crux.nu 29 Nov '17

29 Nov '17

commit b1c8695debf652358ae4a0a732546729f93c551c Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Nov 29 17:33:01 2017 +0100 [notify] xorg-libxfont2: Updated to 2.0.3. Fix for CVE-2017-16611 diff --git a/xorg-libxfont2/.md5sum b/xorg-libxfont2/.md5sum index 64589a4..ce10d27 100644 --- a/xorg-libxfont2/.md5sum +++ b/xorg-libxfont2/.md5sum @@ -1 +1 @@ -d39e6446e46f939486d1a8b856e8b67b libXfont2-2.0.2.tar.bz2 +b7ca87dfafeb5205b28a1e91ac3efe85 libXfont2-2.0.3.tar.bz2 diff --git a/xorg-libxfont2/.signature b/xorg-libxfont2/.signature index dbe798d..08a8534 100644 --- a/xorg-libxfont2/.signature +++ b/xorg-libxfont2/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndFQB5o5zKIwsOIBnzZzecH8QoRjLbCKYlrD6KNEJL0eP3oqrvy2VtdnsxdsANrlV5H8HrRhThX6Tc0pyWiWFIQU= -SHA256 (Pkgfile) = df698163b9cad495b0167cb838737f7bfefb4d1efc9ebc88979874ce8ce71b16 +RWTSGWF5Q7TndJVMYZ8BPbNeD5ZtuDdpW7RmG+xisFmPbcPntcV2sOlf0V19X2KdrwJkM2TDvpPYgUA/3OMdXn/X7wvrvRG2NwE= +SHA256 (Pkgfile) = c4d293d22d30508024bb342e5e70a9d614d93e5d8fd1879cfae59f4c1f963d23 SHA256 (.footprint) = dc140cda3b16fb7a5b446a303695090542a6625ecd69cc23fe2bf16ff2b6153a -SHA256 (libXfont2-2.0.2.tar.bz2) = 94088d3b87f7d42c7116d9adaad155859e93330c6e47f5989f2de600b9a6c111 +SHA256 (libXfont2-2.0.3.tar.bz2) = 0e8ab7fd737ccdfe87e1f02b55f221f0bd4503a1c5f28be4ed6a54586bac9c4e diff --git a/xorg-libxfont2/Pkgfile b/xorg-libxfont2/Pkgfile index 4e32b63..934ae96 100644 --- a/xorg-libxfont2/Pkgfile +++ b/xorg-libxfont2/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xorg-libfontenc, freetype, xorg-fontsproto, xorg-xtrans name=xorg-libxfont2 -version=2.0.2 +version=2.0.3 release=1 source=(http://xorg.freedesktop.org/releases/individual/lib/libXfont2-$vers…

1 0

ports/core (3.3): [notify] curl: update to 7.57.0
by crux＠crux.nu 29 Nov '17

29 Nov '17

commit 9a6c7a5ba27a9ea5cdd22ffe5a82db8aa196cb3f Author: Juergen Daubert <jue(a)jue.li> Date: Wed Nov 29 15:15:58 2017 +0100 [notify] curl: update to 7.57.0 includes security fixes for CVE-2017-{8816,8817,8818}, see https://curl.haxx.se/changes.html#7_57_0 diff --git a/curl/.md5sum b/curl/.md5sum index 1ed917f4..eb116589 100644 --- a/curl/.md5sum +++ b/curl/.md5sum @@ -1 +1 @@ -e332347fc0b80cabf9c42f310be040c5 curl-7.56.1.tar.xz +93157c8f6593691bc00ae238a4c53863 curl-7.57.0.tar.xz diff --git a/curl/.signature b/curl/.signature index 464eb8a5..373d1e6e 100644 --- a/curl/.signature +++ b/curl/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqn+pqPZwxwRObsH0A4yvIQnlsUh8u6uV9iM2WOS4DwRx6j3ivKqdZ9Rg4DCwa2kQzrKJt+EvdMLYoUwiZiaBFA0= -SHA256 (Pkgfile) = 1ba0e98e5a634b892f022428abb9bb6c23663aae28f5401aadd58cbad216b283 +RWRJc1FUaeVeqpNoN5e/97QAEF+i+lXSEHSf1K60L4jpLJSDb6TqDkCgr3ix6OZFt5bvUSTjAN12dqwSsztmd7Dl+i7kgbJCog0= +SHA256 (Pkgfile) = 8f118fae820fc48dd47e06c44b950248efae6135124e610936430899ec742df1 SHA256 (.footprint) = 6e020f23fe220c0cbfa665d5be74146b3de64d8ac2569aa6c2ca0a306fc95538 -SHA256 (curl-7.56.1.tar.xz) = 8eed282cf3a0158d567a0feaa3c4619e8e847970597b5a2c81879e8f0d1a39d1 +SHA256 (curl-7.57.0.tar.xz) = f5f6fd3c72b7b8389969f4fb671ed8532fa9b5bb7a5cae7ca89bc1cea45c7878 diff --git a/curl/Pkgfile b/curl/Pkgfile index 9c8e7b9b..9a97425f 100644 --- a/curl/Pkgfile +++ b/curl/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl, zlib name=curl -version=7.56.1 +version=7.57.0 release=1 source=(http://curl.haxx.se/download/$name-$version.tar.xz)

1 0

ports/opt (3.3): [notify] lcms2: silent archive change by upstream, remove old sources first
by crux＠crux.nu 27 Nov '17

27 Nov '17

commit 1f91e1a7720dd08f1ccea160321f3d7371b18401 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Nov 27 14:53:15 2017 +0100 [notify] lcms2: silent archive change by upstream, remove old sources first diff --git a/lcms2/.md5sum b/lcms2/.md5sum index 316922cfe..286974913 100644 --- a/lcms2/.md5sum +++ b/lcms2/.md5sum @@ -1 +1 @@ -45865f3faf3cc1a9778f89e255495331 lcms2-2.9.tar.gz +8de1b7724f578d2995c8fdfa35c3ad0e lcms2-2.9.tar.gz diff --git a/lcms2/.signature b/lcms2/.signature index cb1dc0016..179689a1d 100644 --- a/lcms2/.signature +++ b/lcms2/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/dEqu7Lr8b/TEfnoXoiT1jUaXhacMKtUuzMR89Vs2MJ83UCK7dsq3jW7KKUk3zlH/RpXSGDLvUF41mgZtJKcgQ8= -SHA256 (Pkgfile) = 8b7a51dae7431f5c8ed46ab2b2bf92ce0b08651e7976bb6aa581b2884917b6b9 +RWSE3ohX2g5d/ReY815CS28/e0ApwDl4Efqjqko9UAAxFpwhbahHU/ZaAxJhHUiDn7TVnPXzjRDr8ZehV+hUDsDDzmeJa+HpLgk= +SHA256 (Pkgfile) = f9803cf9234310b9c708c28bbf36d6e457fa58334a521ddd14d5e0c4ed83db4a SHA256 (.footprint) = df0d489a4ab3a2d70d7da3376a5b2e9e41b2ac2609b343482835d62362a0f587 -SHA256 (lcms2-2.9.tar.gz) = d4ad6f8718f7f9dc8b2a3276c9f237aa3f5eccdcf98b86dedc4262d8a1e7f009 +SHA256 (lcms2-2.9.tar.gz) = 48c6fdf98396fa245ed86e622028caf49b96fa22f3e5734f853f806fbc8e7d20 diff --git a/lcms2/Pkgfile b/lcms2/Pkgfile index f164a8b42..14034f967 100644 --- a/lcms2/Pkgfile +++ b/lcms2/Pkgfile @@ -5,7 +5,7 @@ name=lcms2 version=2.9 -release=2 +release=3 source=(http://downloads.sourceforge.net/project/lcms/lcms/$version/$name-$… build() {

1 0

ports/contrib (3.3): [notify] midori: changed dependency: webkit-gtk2 -> webkitgtk, new dependencies: gst-libav, gst-plugins-good
by crux＠crux.nu 26 Nov '17

26 Nov '17

commit 035242a50f2fcb212cdf5de81ce8d35c651acd7a Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Nov 26 22:17:56 2017 +1100 [notify] midori: changed dependency: webkit-gtk2 -> webkitgtk, new dependencies: gst-libav,gst-plugins-good diff --git a/midori/.footprint b/midori/.footprint index deb7023a..1379f4d2 100644 --- a/midori/.footprint +++ b/midori/.footprint @@ -15,24 +15,18 @@ lrwxrwxrwx root/root usr/lib/libmidori-core.so.1 -> libmidori-core.so.0.0.0 drwxr-xr-x root/root usr/lib/midori/ -rwxr-xr-x root/root usr/lib/midori/libabout.so -rwxr-xr-x root/root usr/lib/midori/libadblock.so --rwxr-xr-x root/root usr/lib/midori/libaddons.so -rwxr-xr-x root/root usr/lib/midori/libapps.so -rwxr-xr-x root/root usr/lib/midori/libcolorful-tabs.so -rwxr-xr-x root/root usr/lib/midori/libcookie-manager.so --rwxr-xr-x root/root usr/lib/midori/libcookie-permissions.so -rwxr-xr-x root/root usr/lib/midori/libcopy-tabs.so -rwxr-xr-x root/root usr/lib/midori/libdelayed-load.so -rwxr-xr-x root/root usr/lib/midori/libdevpet.so -rwxr-xr-x root/root usr/lib/midori/libdomain-keys.so --rwxr-xr-x root/root usr/lib/midori/libexternal-download-manager.so -rwxr-xr-x root/root usr/lib/midori/libfeed-panel.so -rwxr-xr-x root/root usr/lib/midori/libflummi.so --rwxr-xr-x root/root usr/lib/midori/libformhistory.so -rwxr-xr-x root/root usr/lib/midori/libhistory-list.so -rwxr-xr-x root/root usr/lib/midori/libmouse-gestures.so --rwxr-xr-x root/root usr/lib/midori/libnojs.so -rwxr-xr-x root/root usr/lib/midori/libnotes.so --rwxr-xr-x root/root usr/lib/midori/libnsplugin-manager.so -rwxr-xr-x root/root usr/lib/midori/libopen-with.so -rwxr-xr-x root/root usr/lib/midori/libshortcuts.so -rwxr-xr-x root/root usr/lib/midori/libstatus-clock.so diff --git a/midori/.signature b/midori/.signature index 3e9364a7..f6ae0e02 100644 --- a/midori/.signature +++ b/midori/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF3425jaU2+3lIJnrlhOTsSD/ZlMB7Vnd+5yGIEIe2mpK2wLeCjWlnhsiaUDFXLr0pDx6Hppf0NB2ht7HnO4FkDAc= -SHA256 (Pkgfile) = 807055be4451e4d6caf1411770933c699190d44b43ae6ace3c51324232906723 -SHA256 (.footprint) = 03002245462183c8412dade31d264575eb37684340004dded8d7eae02d889cc2 +RWSagIOpLGJF3/f0WYFD1bgorppNlQYAeljhKaI3jOcO2WLIItfYGXW1sqAflwuRWXBV6T71VE53f7UI7u65qaILMsqmwJKldwg= +SHA256 (Pkgfile) = 17b0a2f074473e7cf6559aa753e4e532ca2abb835beb435f8498d2aa31f6b734 +SHA256 (.footprint) = f4df9398cdfaede75189efab5b8e05f96457c15be40c089b6fe13fd54c5a4ce0 SHA256 (midori_0.5.11_all_.tar.bz2) = 96191a96be71144ae848a409fae5a1d6d52a00e583f33122081f47ead9c49c3d diff --git a/midori/Pkgfile b/midori/Pkgfile index e2bd4e9e..1a5395fa 100644 --- a/midori/Pkgfile +++ b/midori/Pkgfile @@ -2,27 +2,36 @@ # URL: http://www.midori-browser.org/ # Maintainer: Danny Rawlins, crux at romster dot me # Packager: Brett Goulder, predatorfreak at dcaf-security dot org -# Depends on: aria2 desktop-file-utils gcr libnotify librsvg ninja webkit-gtk2 xorg-libxscrnsaver +# Depends on: aria2 desktop-file-utils gcr gst-libav gst-plugins-good libnotify webkitgtk xorg-libxscrnsaver name=midori version=0.5.11 -release=1 +release=2 source=(http://midori-browser.org/downloads/${name}_${version}_all_.tar.bz2) build() { cd $name-$version + # The latest release of vala is a bit stricter than the previous one + sed 's/protected Tally/public Tally/g' -i midori/midori-notebook.vala + sed 's/%d other files/%u other files/g' -i extensions/transfers.vala + for f in transfers adblock/widgets apps history-list notes; do + sed 's/.remove (iter/.remove (ref iter/g' -i "extensions/$f.vala" + done + install -d build cd build cmake .. \ -DCMAKE_INSTALL_PREFIX=/usr \ -DCMAKE_INSTALL_LIBDIR=lib \ + -DHALF_BRO_INCOM_WEBKIT2=ON \ -DCMAKE_BUILD_TYPE=Release \ + -DCMAKE_C_FLAGS="$CFLAGS -w" \ -DUSE_ZEITGEIST=OFF \ -G Ninja - ninja + ninja -j ${JOBS-1} DESTDIR=$PKG ninja install rm -r $PKG/usr/share/{doc,locale}

1 0

ports/contrib (3.3): [notify] webkitgtk: 2.16.5 -> 2.18.3 new dependencies: gst-plugins-bad hyphen libtasn1 ninja
by crux＠crux.nu 26 Nov '17

26 Nov '17

commit 9bfec4cff2bc4f4db4a5ec4a4deb87dfa9aa7631 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Nov 26 22:11:10 2017 +1100 [notify] webkitgtk: 2.16.5 -> 2.18.3 new dependencies: gst-plugins-bad hyphen libtasn1 ninja diff --git a/webkitgtk/.footprint b/webkitgtk/.footprint index e6393822..fbc7430a 100644 --- a/webkitgtk/.footprint +++ b/webkitgtk/.footprint @@ -1,4 +1,6 @@ drwxr-xr-x root/root usr/ +drwxr-xr-x root/root usr/bin/ +-rwxr-xr-x root/root usr/bin/WebKitWebDriver drwxr-xr-x root/root usr/include/ drwxr-xr-x root/root usr/include/webkitgtk-4.0/ drwxr-xr-x root/root usr/include/webkitgtk-4.0/JavaScriptCore/ @@ -11,8 +13,10 @@ drwxr-xr-x root/root usr/include/webkitgtk-4.0/JavaScriptCore/ -rw-r--r-- root/root usr/include/webkitgtk-4.0/JavaScriptCore/JavaScript.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/JavaScriptCore/WebKitAvailability.h drwxr-xr-x root/root usr/include/webkitgtk-4.0/webkit2/ +-rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitApplicationInfo.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitAuthenticationRequest.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitAutocleanups.h +-rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitAutomationSession.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitBackForwardList.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitBackForwardListItem.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitColorChooserRequest.h @@ -44,6 +48,8 @@ drwxr-xr-x root/root usr/include/webkitgtk-4.0/webkit2/ -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitNetworkProxySettings.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitNotification.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitNotificationPermissionRequest.h +-rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitOptionMenu.h +-rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitOptionMenuItem.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitPermissionRequest.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitPlugin.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkit2/WebKitPolicyDecision.h @@ -88,6 +94,8 @@ drwxr-xr-x root/root usr/include/webkitgtk-4.0/webkitdom/ -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkitdom/WebKitDOMCSSStyleSheet.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkitdom/WebKitDOMCSSValue.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkitdom/WebKitDOMCharacterData.h +-rw-r--r-- root/root usr/include/webkitgtk-4.0/webkitdom/WebKitDOMClientRect.h +-rw-r--r-- root/root usr/include/webkitgtk-4.0/webkitdom/WebKitDOMClientRectList.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkitdom/WebKitDOMComment.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkitdom/WebKitDOMCustom.h -rw-r--r-- root/root usr/include/webkitgtk-4.0/webkitdom/WebKitDOMCustomUnstable.h @@ -196,21 +204,21 @@ drwxr-xr-x root/root usr/lib/girepository-1.0/ -rw-r--r-- root/root usr/lib/girepository-1.0/WebKit2-4.0.typelib -rw-r--r-- root/root usr/lib/girepository-1.0/WebKit2WebExtension-4.0.typelib lrwxrwxrwx root/root usr/lib/libjavascriptcoregtk-4.0.so -> libjavascriptcoregtk-4.0.so.18 -lrwxrwxrwx root/root usr/lib/libjavascriptcoregtk-4.0.so.18 -> libjavascriptcoregtk-4.0.so.18.5.12 --rwxr-xr-x root/root usr/lib/libjavascriptcoregtk-4.0.so.18.5.12 +lrwxrwxrwx root/root usr/lib/libjavascriptcoregtk-4.0.so.18 -> libjavascriptcoregtk-4.0.so.18.6.12 +-rwxr-xr-x root/root usr/lib/libjavascriptcoregtk-4.0.so.18.6.12 lrwxrwxrwx root/root usr/lib/libwebkit2gtk-4.0.so -> libwebkit2gtk-4.0.so.37 -lrwxrwxrwx root/root usr/lib/libwebkit2gtk-4.0.so.37 -> libwebkit2gtk-4.0.so.37.19.8 --rwxr-xr-x root/root usr/lib/libwebkit2gtk-4.0.so.37.19.8 +lrwxrwxrwx root/root usr/lib/libwebkit2gtk-4.0.so.37 -> libwebkit2gtk-4.0.so.37.24.6 +-rwxr-xr-x root/root usr/lib/libwebkit2gtk-4.0.so.37.24.6 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/javascriptcoregtk-4.0.pc -rw-r--r-- root/root usr/lib/pkgconfig/webkit2gtk-4.0.pc -rw-r--r-- root/root usr/lib/pkgconfig/webkit2gtk-web-extension-4.0.pc drwxr-xr-x root/root usr/lib/webkit2gtk-4.0/ -rwxr-xr-x root/root usr/lib/webkit2gtk-4.0/MiniBrowser --rwxr-xr-x root/root usr/lib/webkit2gtk-4.0/WebKitDatabaseProcess -rwxr-xr-x root/root usr/lib/webkit2gtk-4.0/WebKitNetworkProcess -rwxr-xr-x root/root usr/lib/webkit2gtk-4.0/WebKitPluginProcess -rwxr-xr-x root/root usr/lib/webkit2gtk-4.0/WebKitPluginProcess2 +-rwxr-xr-x root/root usr/lib/webkit2gtk-4.0/WebKitStorageProcess -rwxr-xr-x root/root usr/lib/webkit2gtk-4.0/WebKitWebProcess drwxr-xr-x root/root usr/lib/webkit2gtk-4.0/injected-bundle/ -rwxr-xr-x root/root usr/lib/webkit2gtk-4.0/injected-bundle/libwebkit2gtkinjectedbundle.so diff --git a/webkitgtk/.md5sum b/webkitgtk/.md5sum index cfe30179..d73b304d 100644 --- a/webkitgtk/.md5sum +++ b/webkitgtk/.md5sum @@ -1 +1 @@ -fce72dc89cd310a663d9eb97133861fe webkitgtk-2.16.5.tar.xz +264a22d7467deae606e42b6eb5dd65af webkitgtk-2.18.3.tar.xz diff --git a/webkitgtk/.signature b/webkitgtk/.signature index 848bd358..699f7101 100644 --- a/webkitgtk/.signature +++ b/webkitgtk/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF38NkXfBiKHqqMnktW4m26Xjt+3DmBFC2l9Dmx26daFzePHASvZVfevRrK4PhzLEHYZzjRTmoYq7JIcwuMeCmFAc= -SHA256 (Pkgfile) = ea97a92243ca474de642be44f78c52dcd687b5e1f2f3feb17f8ba50a73dfb25d -SHA256 (.footprint) = 9d0e180f15b1a4f848a1a16b64a19afb35cfcccac40849e326cc9ad7d5eaf8e8 -SHA256 (webkitgtk-2.16.5.tar.xz) = 8e0396f3428e757898c5856e642eed4fcd5a20ae03d96d3eaa03b76634be7dd4 +RWSagIOpLGJF3zQ0EmxBH6cOMmbsyANEmJLxGNW8pHuXhxtU3kb86YTTKtfkZ2fHJm70NFVD7t3OTDx9IJUaq9lAs5k5hhoPaAs= +SHA256 (Pkgfile) = c763192232df6c0ae2dfa07dd389718a771d39f23fa10f6971fe00b5a6fd6808 +SHA256 (.footprint) = 022247d08094bfe88c2a4d77acfda0f6dddb87e6f8d3e462c57db7025778ecea +SHA256 (webkitgtk-2.18.3.tar.xz) = e15420e1616a6f70f321541d467af5ca285bff66b1e0fa68a01df3ccf1b18f9e diff --git a/webkitgtk/Pkgfile b/webkitgtk/Pkgfile index d9e27176..c10c2573 100644 --- a/webkitgtk/Pkgfile +++ b/webkitgtk/Pkgfile @@ -1,15 +1,16 @@ # Description: Small, efficient and fast rendering engine for Web Browsers. # URL: https://www.webkitgtk.org/ # Maintainer: Danny Rawlins, crux at romster dot me -# Depends on: gst-plugins-base gtk gtk3 harfbuzz-icu libgudev libsecret libsoup libwebp ruby xorg-libxt -# Optional: enchant libnotify +# Depends on: gst-plugins-bad gtk harfbuzz-icu hyphen libgudev libsecret libsoup libtasn1 ninja ruby xorg-libxt +# Optional: enchant libnotify geoclue name=webkitgtk -version=2.16.5 +version=2.18.3 release=1 source=(https://webkitgtk.org/releases/$name-$version.tar.xz) build() { + mkdir build cd $name-$version # setting CC and CXX breaks compilation @@ -32,22 +33,29 @@ build() { NOTIFY='-DUSE_LIBNOTIFY=OFF' fi - install -d build - cd build + local GEOLOCATION + if [ "$(pkginfo -i | grep '^geoclue ')" ]; then + GEOLOCATION='-DENABLE_GEOLOCATION=ON' + else + GEOLOCATION='-DENABLE_GEOLOCATION=OFF' + fi - cmake .. \ + cd ../build + + cmake ../$name-$version \ + -G Ninja \ -DCMAKE_BUILD_TYPE=Release \ -DCMAKE_INSTALL_PREFIX:PATH=/usr \ -DCMAKE_INSTALL_LIBDIR:PATH=/usr/lib \ -DCMAKE_INSTALL_LIBEXECDIR:PATH=/usr/lib \ -DCMAKE_SKIP_RPATH:BOOL=ON \ -DPORT=GTK \ - -DUSE_LIBHYPHEN=OFF \ -DENABLE_MINIBROWSER=ON \ - -Wno-dev \ - -DENABLE_GEOLOCATION=OFF $SPELLCHECK $NOTIFY - make - make DESTDIR=$PKG install + -DUSE_SYSTEM_MALLOC=ON \ + -Wno-dev $GEOLOCATION $SPELLCHECK $NOTIFY + + ninja -j ${JOBS-1} + DESTDIR=$PKG ninja install rm -r $PKG/usr/share/locale }

1 0

ports/core (3.3): [notify] exim: temporary fix for a critical security vulnerability
by crux＠crux.nu 25 Nov '17

25 Nov '17

commit 1e2136ea835737030293e3ca38b1e4c29a266cff Author: Juergen Daubert <jue(a)jue.li> Date: Sat Nov 25 11:51:32 2017 +0100 [notify] exim: temporary fix for a critical security vulnerability See https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html NOTE: ----- don't reject the appropirate change to /etc/exim/exim.conf ! diff --git a/exim/.signature b/exim/.signature index 1cdd70cb..3e35690c 100644 --- a/exim/.signature +++ b/exim/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqhIJ9mHT05pb8v8Ph3tyPQEEYeyKJsFmPASZ+cgglIWEtfC4VucLMyE1f/kWHmW2Ax25gRtj3whtsQZr9CAcogU= -SHA256 (Pkgfile) = 3fe635ae525bee4d14f83eca7f9ccbaafb4c8ffc9a9dc6d6d11a72c0b1af29a5 +RWRJc1FUaeVeqvgtMpIIkQJAlRLxq99KSRe3jxGq33jKSAylw8mu0sa1Ue0RHe6RWaRENao5Nce8qi5/D5AjLSVlYzSNvqpTbwM= +SHA256 (Pkgfile) = 798f9c95d2b1f1cb8b9b59f614cc2d0fc71687eeb7ffb13f75f6a73ad2367dd2 SHA256 (.footprint) = 3e5fe8471a7a9057c0c7486c016ea2ed1dc5ebd72adc13c23f432ef468d2fc5d SHA256 (exim-4.89.tar.xz) = 0c490a1ca97bbb22d6079d2896de19af48ac3af109ea5f307dbc6b49c66e9626 SHA256 (exim) = 850f72cb4d069dc8d15ce138623e6b6a7fe33f5daebe37fbf93c7801fa2d6134 diff --git a/exim/Pkgfile b/exim/Pkgfile index 208e07d2..8e56dbb3 100644 --- a/exim/Pkgfile +++ b/exim/Pkgfile @@ -5,7 +5,7 @@ name=exim version=4.89 -release=1 +release=2 source=(ftp://ftp.exim.org/pub/exim/exim4/$name-$version.tar.xz \ $name $name-config.patch) @@ -37,4 +37,7 @@ build() { touch $PKG/etc/ssl/certs/exim.crt touch $PKG/etc/ssl/keys/exim.key chmod 0600 $PKG/etc/ssl/{keys/exim.key,certs/exim.crt} + + # https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html + sed -e '44i\\nchunking_advertise_hosts =' -i $PKG/etc/exim/exim.conf }

2 1