November 2017 - CRUX - lists.crux.nu

ports/opt (3.3): [notify] samba: update to 4.7.2
by crux＠crux.nu 15 Nov '17

15 Nov '17

commit db0305f06ed8a92a59af922c292b6c8000d2d4cd Author: Juergen Daubert <jue(a)jue.li> Date: Wed Nov 15 11:08:42 2017 +0100 [notify] samba: update to 4.7.2 bugfix release to address a possible data corruption issue See https://www.samba.org/samba/history/samba-4.7.2.html diff --git a/samba/.md5sum b/samba/.md5sum index f12ef1baa..34dd65fb1 100644 --- a/samba/.md5sum +++ b/samba/.md5sum @@ -1,2 +1,2 @@ 1869ebd29f3e277b405e3e4cd9423ccf samba -b351ab3bddb767a3930d9e186139f95f samba-4.7.1.tar.gz +9044650a5ff173b9464fd3f6602f976a samba-4.7.2.tar.gz diff --git a/samba/.signature b/samba/.signature index 02dabbed0..e865b668f 100644 --- a/samba/.signature +++ b/samba/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/cOT/3Ub7ZK7/jjNsypEr0yVWKiMl/E8Sy1m6kzbWyXJcKaIf6uNmrwsUV+p8KkRfSfGwfsunxW6qDxoU4LSWAs= -SHA256 (Pkgfile) = 157a43478e6a0486cf791f35d6895925b6b8b16d422faccaedb2b4be668d44d6 +RWSE3ohX2g5d/T2iTPwXDrsa88ZNTt7q1ojZOHj7f3/2WCFegvdFm7VHKdS/hSKAKbG3yF2BN54A4A8XIJBSTU69qi+BE544mQk= +SHA256 (Pkgfile) = 299a0f6de56e3868ee4cf16d48951aad944897abe1e8b22513e70d91a87fe858 SHA256 (.footprint) = 84edbc95dd9f518680c3fcb409338459d9c8783d9660d280b9297423c9e07bab -SHA256 (samba-4.7.1.tar.gz) = 7ba932523c821ebfa4c31ebd183f7aa20d663059f9761563fcdec85cd1e9be1a +SHA256 (samba-4.7.2.tar.gz) = fd32512289dfb276be2218377c6136b2e12a05826f8bee9d0dac4ad626decf92 SHA256 (samba) = 75bccea892422b5aebe8d2f9ce9b9c42ddc3cbdeccfd16f3161c07c1eb3feff0 diff --git a/samba/Pkgfile b/samba/Pkgfile index 8e07f4c1d..4bf71187b 100644 --- a/samba/Pkgfile +++ b/samba/Pkgfile @@ -4,8 +4,8 @@ # Depends on: e2fsprogs libarchive tdb tevent libcap libaio popt name=samba -version=4.7.1 -release=2 +version=4.7.2 +release=1 source=(https://www.samba.org/samba/ftp/stable/$name-$version.tar.gz \ samba)

1 0

ports/opt (3.3): [notify] firefox: updated to 52.5esr. Fixes several security vulnerabilities
by crux＠crux.nu 14 Nov '17

14 Nov '17

commit f536582e4cb53f9d76a64e6aa89cefb06b3d89ad Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Nov 14 20:17:46 2017 +0100 [notify] firefox: updated to 52.5esr. Fixes several security vulnerabilities Advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2017-25/ diff --git a/firefox/.footprint b/firefox/.footprint index f01192cc5..15f49f779 100644 --- a/firefox/.footprint +++ b/firefox/.footprint @@ -3993,6 +3993,7 @@ drwxr-xr-x root/root usr/include/firefox/nestegg/ -rw-r--r-- root/root usr/include/firefox/nsIQuotaCallbacks.h -rw-r--r-- root/root usr/include/firefox/nsIQuotaManagerService.h -rw-r--r-- root/root usr/include/firefox/nsIQuotaRequests.h +-rw-r--r-- root/root usr/include/firefox/nsIQuotaResults.h -rw-r--r-- root/root usr/include/firefox/nsIRDFCompositeDataSource.h -rw-r--r-- root/root usr/include/firefox/nsIRDFContainer.h -rw-r--r-- root/root usr/include/firefox/nsIRDFContainerUtils.h @@ -5739,6 +5740,7 @@ drwxr-xr-x root/root usr/share/idl/firefox/ -rw-r--r-- root/root usr/share/idl/firefox/nsIQuotaCallbacks.idl -rw-r--r-- root/root usr/share/idl/firefox/nsIQuotaManagerService.idl -rw-r--r-- root/root usr/share/idl/firefox/nsIQuotaRequests.idl +-rw-r--r-- root/root usr/share/idl/firefox/nsIQuotaResults.idl -rw-r--r-- root/root usr/share/idl/firefox/nsIRDFCompositeDataSource.idl -rw-r--r-- root/root usr/share/idl/firefox/nsIRDFContainer.idl -rw-r--r-- root/root usr/share/idl/firefox/nsIRDFContainerUtils.idl diff --git a/firefox/.md5sum b/firefox/.md5sum index aa4bb257f..4764150f5 100644 --- a/firefox/.md5sum +++ b/firefox/.md5sum @@ -1,3 +1,3 @@ -5a192e26a22325e26f15e2aed4d5b17c firefox-52.4.0esr.source.tar.xz +105d1b491387645505c0411d8a908923 firefox-52.5.0esr.source.tar.xz afe61c7760e835bd12d5dfd40af4ec84 firefox-install-dir.patch cf6971669f70b440cb6ff8df8b2722ae firefox.desktop diff --git a/firefox/.signature b/firefox/.signature index bb89e7a36..34b789060 100644 --- a/firefox/.signature +++ b/firefox/.signature @@ -1,7 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/e/2DrIdLeVgERL/ZVZqpFzcp0YsmPOAR4kG6OKwwR8ahrTwVqLU9YGKsFkYFMyy7fTFB+CoJwW2/XdL3ZVzTQ4= -SHA256 (Pkgfile) = 0912f84805e27a291f6629ff74cbdf0433a617db327dd9b12d98c8761c067281 -SHA256 (.footprint) = a90c295349f670e7fc3164cc5ae8a8517731bc9b9e6a434df31c32c30738ee1c -SHA256 (firefox-52.4.0esr.source.tar.xz) = 58ae7cb6c2fb81d22762ab3c60e46cadbe7c5b687f24c2823d9533ec998a21ee +RWSE3ohX2g5d/XYCbpMZdDfikJetQMxkZDvVk70A3dybW86ZBL3TVfQnO4c1vL069aS4k/hSXiyXO6vq7bBVjtyJpE1EF86acQ4= +SHA256 (Pkgfile) = aa6e1ba16e07c5dae005427e708566379a364cb3e3e75b78dd7db60ccc17f25e +SHA256 (.footprint) = 26e76f616728d1a3c25afd69d24ccf6a467b310ba11b00f050a67858b3add59e +SHA256 (firefox-52.5.0esr.source.tar.xz) = 0e583576f6bbdc9d863656c43b8c97a60f276725bca20459b7511e2afacac85f SHA256 (firefox-install-dir.patch) = 32c0102521b7296627ba457575c742746400680c3aecd18be8b1b382dccdc0ce SHA256 (firefox.desktop) = 8ba3439f3dfc5cab883641969c93d8d15f8f20d7188d9568346b2edad52d6f91 diff --git a/firefox/Pkgfile b/firefox/Pkgfile index 963d8f75d..19e682c8d 100644 --- a/firefox/Pkgfile +++ b/firefox/Pkgfile @@ -4,7 +4,7 @@ # Depends on: nss, autoconf-2.13, unzip, zip, libidl, gtk, gtk3, alsa-lib, xorg-libxt, yasm name=firefox -version=52.4.0esr +version=52.5.0esr release=1 source=(https://ftp.mozilla.org/pub/firefox/releases/$version/source/firefo… firefox-install-dir.patch firefox.desktop)

1 0

SSL connection problem in Steam
by Wawrzek Niewodniczanski 12 Nov '17

12 Nov '17

Hello, I installed steam, but now I cannot connect. I tried to google error message I see starting steam from console, but haven't found any obvious suggestions. Not sure if that actual problem, but that doesn't look good: opensslconnection.cpp (1412) : Assertion Failed: unable to load trusted SSL root certificates Assert( Assertion Failed: unable to load trusted SSL root certificates ):opensslconnection.cpp:1412 After providing username and password i see "Steam - Warning" window reading: "Steam is having problem connecting to the Steam server" Internet works fine. Wawrzek PS. In case I missed something else, the whole stdout/stderr of steam: Running Steam on Linux 4.9.6 64-bit STEAM_RUNTIME is enabled automatically Pins up-to-date! Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) (process:1724): Gtk-WARNING **: Locale not supported by C library. Using the fallback 'C' locale. Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) opensslconnection.cpp (1412) : Assertion Failed: unable to load trusted SSL root certificates Assert( Assertion Failed: unable to load trusted SSL root certificates ):opensslconnection.cpp:1412 Installing breakpad exception handler for appid(steam)/version(1509425745) assert_20171111095225_11.dmp[1767]: Uploading dump (out-of-process) /tmp/dumps/assert_20171111095225_11.dmp Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) Installing breakpad exception handler for appid(steam)/version(1509425745) PulseAudio connect failed (used only for Mic Volume Control) with error: Access denied Installing breakpad exception handler for appid(steam)/version(1509425745) Generating new string page texture 7: 128x256, total string texture memory is 131.07 KB Generating new string page texture 8: 48x256, total string texture memory is 180.22 KB Generating new string page texture 9: 256x256, total string texture memory is 442.37 KB Generating new string page texture 10: 64x256, total string texture memory is 507.90 KB assert_20171111095225_11.dmp[1767]: Finished uploading minidump (out-of-process): success = yes assert_20171111095225_11.dmp[1767]: response: CrashID=bp-b9c48611-e4da-423a-a6f1-6ac7c2171111 assert_20171111095225_11.dmp[1767]: file ''/tmp/dumps/assert_20171111095225_11.dmp'', upload yes: ''CrashID=bp-b9c48611-e4da-423a-a6f1-6ac7c2171111'' [1111/095227.131715:ERROR:web_plugin_impl.cc(38)] Widevine registration is not supported after context initialization [1111/095228.134345:ERROR:web_plugin_impl.cc(38)] Widevine registration is not supported after context initialization [1111/095229.135604:ERROR:web_plugin_impl.cc(38)] Widevine registration is not supported after context initialization [1111/095230.138313:ERROR:web_plugin_impl.cc(38)] Widevine registration is not supported after context initialization Setting breakpad minidump AppID = 769 Steam_SetMinidumpSteamID: Caching Steam ID: 76561197960265728 [API loaded no] Installing breakpad exception handler for appid(steam)/version(1509425745) [1111/095231.141981:ERROR:web_plugin_impl.cc(38)] Widevine registration is not supported after context initialization Installing breakpad exception handler for appid(steam)/version(1509425745) ^[[FInstalling breakpad exception handler for appid(steam)/version(1509425745) Generating new string page texture 11: 16x256, total string texture memory is 524.29 KB Generating new string page texture 12: 24x256, total string texture memory is 548.86 KB Generating new string page texture 13: 32x256, total string texture memory is 581.63 KB cminterface.cpp (2659) : Assertion Failed: m_VecNetAdrNetFilterCMs.Count() > 0 Assert( Assertion Failed: m_VecNetAdrNetFilterCMs.Count() > 0 ):cminterface.cpp:2659 Installing breakpad exception handler for appid(steam)/version(1509425745) assert_20171111095812_22.dmp[1837]: Uploading dump (out-of-process) /tmp/dumps/assert_20171111095812_22.dmp Generating new string page texture 15: 384x256, total string texture memory is 974.85 KB assert_20171111095812_22.dmp[1837]: Finished uploading minidump (out-of-process): success = yes assert_20171111095812_22.dmp[1837]: response: CrashID=bp-97bb1487-0c2e-4325-b19c-b10102171111 assert_20171111095812_22.dmp[1837]: file ''/tmp/dumps/assert_20171111095812_22.dmp'', upload yes: ''CrashID=bp-97bb1487-0c2e-4325-b19c-b10102171111'' cminterface.cpp (2659) : Assertion Failed: m_VecNetAdrNetFilterCMs.Count() > 0 cminterface.cpp (2659) : Assertion Failed: m_VecNetAdrNetFilterCMs.Count() > 0 cminterface.cpp (2659) : Assertion Failed: m_VecNetAdrNetFilterCMs.Count() > 0 -- Dr Wawrzyniec Niewodniczański or Wawrzek for short PhD in Quantum Chemistry & MSc in Molecular Engineering WWW: http://wawrzek.name E-MAIL: jobs(a)wawrzek.name Linux User #177124

1 1

ports/contrib (3.3): [notify] chardet -> python-chardet
by crux＠crux.nu 12 Nov '17

12 Nov '17

commit 28e9176d771b9943f18fb1392662d7ed2c4ef0b7 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Nov 12 16:14:03 2017 +1100 [notify] chardet -> python-chardet diff --git a/chardet/.signature b/chardet/.signature deleted file mode 100644 index 3c86cbdd..00000000 --- a/chardet/.signature +++ /dev/null @@ -1,5 +0,0 @@ -untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF3/ur7p6/vZV0JakhOhpYqvbF9ypaBXFMKYgGsm6OjRmPdzDcLS9oqJwqubvNt0hCGbMWWG/dgtoYYPbOC1lS4w4= -SHA256 (Pkgfile) = 245fb63fa944b0dab0f66237c6ff56243f8b4c4af7a3dd49fdacae7b5404e27e -SHA256 (.footprint) = 719c5e97d0d228d9384254f80096e9500057ad9ec1cc48ba124f2e16312f58d3 -SHA256 (chardet-2.3.0.tar.gz) = e53e38b3a4afe6d1132de62b7400a4ac363452dc5dfcf8d88e8e0cce663c68aa diff --git a/chardet/.footprint b/python-chardet/.footprint similarity index 69% rename from chardet/.footprint rename to python-chardet/.footprint index 4f72dbf2..4814fa49 100644 --- a/chardet/.footprint +++ b/python-chardet/.footprint @@ -13,77 +13,115 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/chardet-2.3.0-py2.7.egg-inf drwxr-xr-x root/root usr/lib/python2.7/site-packages/chardet/ -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/__init__.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/__init__.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/__init__.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/big5freq.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/big5freq.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/big5freq.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/big5prober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/big5prober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/big5prober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/chardetect.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/chardetect.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/chardetect.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/chardistribution.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/chardistribution.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/chardistribution.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/charsetgroupprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/charsetgroupprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/charsetgroupprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/charsetprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/charsetprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/charsetprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/codingstatemachine.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/codingstatemachine.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/codingstatemachine.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/compat.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/compat.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/compat.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/constants.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/constants.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/constants.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/cp949prober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/cp949prober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/cp949prober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/escprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/escprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/escprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/escsm.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/escsm.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/escsm.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/eucjpprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/eucjpprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/eucjpprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euckrfreq.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euckrfreq.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euckrfreq.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euckrprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euckrprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euckrprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euctwfreq.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euctwfreq.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euctwfreq.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euctwprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euctwprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/euctwprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/gb2312freq.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/gb2312freq.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/gb2312freq.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/gb2312prober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/gb2312prober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/gb2312prober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/hebrewprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/hebrewprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/hebrewprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/jisfreq.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/jisfreq.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/jisfreq.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/jpcntx.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/jpcntx.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/jpcntx.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langbulgarianmodel.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langbulgarianmodel.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langbulgarianmodel.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langcyrillicmodel.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langcyrillicmodel.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langcyrillicmodel.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langgreekmodel.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langgreekmodel.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langgreekmodel.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langhebrewmodel.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langhebrewmodel.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langhebrewmodel.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langhungarianmodel.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langhungarianmodel.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langhungarianmodel.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langthaimodel.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langthaimodel.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/langthaimodel.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/latin1prober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/latin1prober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/latin1prober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/mbcharsetprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/mbcharsetprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/mbcharsetprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/mbcsgroupprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/mbcsgroupprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/mbcsgroupprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/mbcssm.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/mbcssm.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/mbcssm.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/sbcharsetprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/sbcharsetprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/sbcharsetprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/sbcsgroupprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/sbcsgroupprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/sbcsgroupprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/sjisprober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/sjisprober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/sjisprober.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/universaldetector.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/universaldetector.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/universaldetector.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/utf8prober.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/utf8prober.pyc +-rw-r--r-- root/root usr/lib/python2.7/site-packages/chardet/utf8prober.pyo diff --git a/chardet/.md5sum b/python-chardet/.md5sum similarity index 100% rename from chardet/.md5sum rename to python-chardet/.md5sum diff --git a/python-chardet/.signature b/python-chardet/.signature new file mode 100644 index 00000000..af4b2719 --- /dev/null +++ b/python-chardet/.signature @@ -0,0 +1,5 @@ +untrusted comment: verify with /etc/ports/contrib.pub +RWSagIOpLGJF3wFygLSxCoVwWqocM+DOiF3MXvEI1jwrSRZTeEGMSRF6zH6z5KUvzViU2TNdfgj09os8jnYFu4gXXt6Ez/Fu0wA= +SHA256 (Pkgfile) = d960036654a202b507fa1d23928fde3a0c59b542b4f28f06e86a7df2bd4fbb27 +SHA256 (.footprint) = b50d2f108b52ff88bc668c12929ce5417958ba140506ac801c991d3c96f70a21 +SHA256 (chardet-2.3.0.tar.gz) = e53e38b3a4afe6d1132de62b7400a4ac363452dc5dfcf8d88e8e0cce663c68aa diff --git a/chardet/Pkgfile b/python-chardet/Pkgfile similarity index 54% rename from chardet/Pkgfile rename to python-chardet/Pkgfile index 65fb4784..e4e64b25 100644 --- a/chardet/Pkgfile +++ b/python-chardet/Pkgfile @@ -1,16 +1,15 @@ # Description: Python module for character encoding auto-detection. # URL: https://github.com/erikrose/chardet # Maintainer: Danny Rawlins, crux at romster dot me -# Packager: Marcin Karpezo, sirmacik at crux dot org dot pl # Depends on: python-setuptools -name=chardet +name=python-chardet version=2.3.0 release=1 -source=(https://pypi.python.org/packages/source/c/$name/$name-$version.tar.gz) +source=(https://files.pythonhosted.org/packages/source/${name:7:1}/${name#*-}/${name#*-}-$version.tar.gz) build() { - cd $name-$version + cd ${name#*-}-$version /usr/bin/python setup.py build - /usr/bin/python setup.py install --root=$PKG + /usr/bin/python setup.py install --prefix=/usr --root=$PKG --optimize=1 }

1 0

ports/contrib (3.3): [notify] pyasn1 -> python-pyasn1
by crux＠crux.nu 12 Nov '17

12 Nov '17

commit d794bba537141b8e93c529ce9ea824735a9e7bd9 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Nov 12 15:59:47 2017 +1100 [notify] pyasn1 -> python-pyasn1 diff --git a/pyasn1/Pkgfile b/pyasn1/Pkgfile deleted file mode 100644 index 59548662..00000000 --- a/pyasn1/Pkgfile +++ /dev/null @@ -1,15 +0,0 @@ -# Description: ASN.1 types and codecs. -# URL: http://pypi.python.org/pypi/pyasn1 -# Maintainer: Danny Rawlins, crux at romster dot me -# Packager: Danny Rawlins, crux at romster dot me -# Depends on: python-setuptools - -name=pyasn1 -version=0.1.9 -release=1 -source=(http://pypi.python.org/packages/source/p/$name/$name-$version.tar.gz) - -build() { - cd $name-$version - /usr/bin/python setup.py install --root=$PKG --optimize=1 -} diff --git a/pyasn1/.footprint b/python-pyasn1/.footprint similarity index 100% rename from pyasn1/.footprint rename to python-pyasn1/.footprint diff --git a/pyasn1/.md5sum b/python-pyasn1/.md5sum similarity index 100% rename from pyasn1/.md5sum rename to python-pyasn1/.md5sum diff --git a/pyasn1/.signature b/python-pyasn1/.signature similarity index 56% rename from pyasn1/.signature rename to python-pyasn1/.signature index 00673488..96d17613 100644 --- a/pyasn1/.signature +++ b/python-pyasn1/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF3x4L8KJhSo7CYOnlGlZQoLUavjHcKyIdtmvvlVQtU2h4qu5wWooIYsiYDzqxEN6b75PZC+qunU5eZme8QuBYpwo= -SHA256 (Pkgfile) = 08157d98ab32b7a2bb84fa08d08fe8be7a16eba7b994524f3c4f2fedfdebbc49 +RWSagIOpLGJF3+8luTkYcH11Bs9g8gxHOdLaiIni1B+zIUihpdtp//a09YH5KRAj+DsanLfNnEi0Bs2TGUoUvALUppDnkSKQOgA= +SHA256 (Pkgfile) = 4b54d73d71eeb6b4b4a2a415d9e43ccf712c6da8684ebc574bc2303480accdd7 SHA256 (.footprint) = bbf87c9a4f0ca89ce0f4535f7ec4db019889958ae8e31805a1a35a5dccc3d0d9 SHA256 (pyasn1-0.1.9.tar.gz) = 853cacd96d1f701ddd67aa03ecc05f51890135b7262e922710112f12a2ed2a7f diff --git a/python-pyasn1/Pkgfile b/python-pyasn1/Pkgfile new file mode 100644 index 00000000..a765b8a7 --- /dev/null +++ b/python-pyasn1/Pkgfile @@ -0,0 +1,15 @@ +# Description: ASN.1 types and codecs. +# URL: http://pypi.python.org/pypi/pyasn1 +# Maintainer: Danny Rawlins, crux at romster dot me +# Depends on: python-setuptools + +name=python-pyasn1 +version=0.1.9 +release=1 +source=(https://files.pythonhosted.org/packages/source/${name:7:1}/${name#*-}/${name#*-}-$version.tar.gz) + +build() { + cd ${name#*-}-$version + /usr/bin/python setup.py build + /usr/bin/python setup.py install --prefix=/usr --root=$PKG --optimize=1 +}

1 0

ports/contrib (3.3): [notify] cryptography -> python-cryptography
by crux＠crux.nu 12 Nov '17

12 Nov '17

commit 8f96452b57480d2290df39d0e91f836855067fc7 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Nov 12 15:40:09 2017 +1100 [notify] cryptography -> python-cryptography diff --git a/cryptography/Pkgfile b/cryptography/Pkgfile deleted file mode 100644 index 241dab8b..00000000 --- a/cryptography/Pkgfile +++ /dev/null @@ -1,17 +0,0 @@ -# Description: A package designed to expose cryptographic recipes and primitives to Python developers. -# URL: http://pypi.python.org/pypi/cryptography -# Maintainer: Danny Rawlins, crux at romster dot me -# Packager: Danny Rawlins, crux at romster dot me -# Depends on: six cffi enum34 pyasn1 - -name=cryptography -version=1.6 -release=1 -source=(https://pypi.python.org/packages/d7/a2/b90736c37fd720db425c5e48d69da75a6eff6609b22d2123762f1ae8c5f5/$name-$version.tar.gz) - -build() { - cd $name-$version - - /usr/bin/python setup.py build - /usr/bin/python setup.py install --root=$PKG --optimize=1 -} diff --git a/cryptography/.footprint b/python-cryptography/.footprint similarity index 100% rename from cryptography/.footprint rename to python-cryptography/.footprint diff --git a/cryptography/.md5sum b/python-cryptography/.md5sum similarity index 100% rename from cryptography/.md5sum rename to python-cryptography/.md5sum diff --git a/cryptography/.signature b/python-cryptography/.signature similarity index 56% rename from cryptography/.signature rename to python-cryptography/.signature index 333918d6..0f8c806c 100644 --- a/cryptography/.signature +++ b/python-cryptography/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF31fNuPmTUTqJR+eJWiSrYlSSwljvhdGIjd0E48/Kl31sGQo8j3kMdnwsy9vk2EtvuHZ5BD8TGORBLtjpiJR0sQk= -SHA256 (Pkgfile) = 4d29837dff1242b41ebd9cd99625f7fc314a05f256c7b06a04dff7e437781491 +RWSagIOpLGJF3zfodtyYVtumbsiyIuu8UDDRB+HDceyEXtiqJ7a2W/VUxYNNkQWfev6ThRomGfMhf3dOdLHmjXpXd3UiEYCbFgI= +SHA256 (Pkgfile) = 0bfb13421e5966091fb307b15e2c8bf6e7cd678a441cb38fd67fd47c1365984d SHA256 (.footprint) = e71ae1df35a2af2ac2880c07952cda2a64c972ed98a3dc7e0a207bf72110ef54 SHA256 (cryptography-1.6.tar.gz) = 4d0d86d2c8d3fc89133c3fa0d164a688a458b6663ab6fa965c80d6c2cdaf9b3f diff --git a/python-cryptography/Pkgfile b/python-cryptography/Pkgfile new file mode 100644 index 00000000..0a794e11 --- /dev/null +++ b/python-cryptography/Pkgfile @@ -0,0 +1,15 @@ +# Description: A package designed to expose cryptographic recipes and primitives to Python developers. +# URL: http://pypi.python.org/pypi/cryptography +# Maintainer: Danny Rawlins, crux at romster dot me +# Depends on: enum34 pyasn1 python-cffi + +name=python-cryptography +version=1.6 +release=1 +source=(https://files.pythonhosted.org/packages/source/${name:7:1}/${name#*-}/${name#*-}-$version.tar.gz) + +build() { + cd ${name#*-}-$version + /usr/bin/python setup.py build + /usr/bin/python setup.py install --prefix=/usr --root=$PKG --optimize=1 +}

1 0

ports/contrib (3.3): [notify] cffi -> python-cffi
by crux＠crux.nu 12 Nov '17

12 Nov '17

commit 9dab55e12ae6ddfa09ccc18c79645d5e78055f86 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Nov 12 15:31:12 2017 +1100 [notify] cffi -> python-cffi diff --git a/cffi/Pkgfile b/cffi/Pkgfile deleted file mode 100644 index 633a4ee0..00000000 --- a/cffi/Pkgfile +++ /dev/null @@ -1,17 +0,0 @@ -# Description: Foreign Function Interface for Python calling C code. -# URL: http://cffi.readthedocs.org/ -# Maintainer: Danny Rawlins, crux at romster dot me -# Packager: Danny Rawlins, crux at romster dot me -# Depends on: libffi pycparser - -name=cffi -version=1.9.1 -release=1 -source=(https://pypi.python.org/packages/a1/32/e3d6c3a8b5461b903651dd6ce958ed03c093d2e00128e3f33ea69f1d7965/$name-$version.tar.gz) - -build() { - cd $name-$version - - /usr/bin/python setup.py build - /usr/bin/python setup.py install --root=$PKG --optimize=1 -} diff --git a/cffi/.footprint b/python-cffi/.footprint similarity index 100% rename from cffi/.footprint rename to python-cffi/.footprint diff --git a/cffi/.md5sum b/python-cffi/.md5sum similarity index 100% rename from cffi/.md5sum rename to python-cffi/.md5sum diff --git a/cffi/.signature b/python-cffi/.signature similarity index 55% rename from cffi/.signature rename to python-cffi/.signature index ff54283c..01ac0ee6 100644 --- a/cffi/.signature +++ b/python-cffi/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF3ylZlvhkqPMSIpNUVZPlUO0K6+3JpX1mTn0gBJP8DvgWw23KoNqNijxZGh8znGZcRbGGyvKO692w9XAGT3nnpQk= -SHA256 (Pkgfile) = 9b3331a58fd8831cfeca98e1e23fa0edad6e885a403eb2a828fe58ecc874ab85 +RWSagIOpLGJF3/2SoLeCTgR6jULQsvif9klM8YFmWZJSOoL6O8Odo2UK+wbEDDFVvuHtn8Mjd/Cg2EacYRWiHqP6+EhLZonAiA4= +SHA256 (Pkgfile) = 8fbf70442ffa6ef166caeb2348cb4a7239bc57718e66dd2a782bc3d633c1adb3 SHA256 (.footprint) = 753aba935dd2b0ffe647d117676415500b5c162808cc7145715520735c322879 SHA256 (cffi-1.9.1.tar.gz) = 563e0bd53fda03c151573217b3a49b3abad8813de9dd0632e10090f6190fdaf8 diff --git a/python-cffi/Pkgfile b/python-cffi/Pkgfile new file mode 100644 index 00000000..0f58df37 --- /dev/null +++ b/python-cffi/Pkgfile @@ -0,0 +1,15 @@ +# Description: Foreign Function Interface for Python calling C code. +# URL: http://cffi.readthedocs.org/ +# Maintainer: Danny Rawlins, crux at romster dot me +# Depends on: libffi pycparser python-setuptools + +name=python-cffi +version=1.9.1 +release=1 +source=(https://files.pythonhosted.org/packages/source/${name:7:1}/${name#*-}/${name#*-}-$version.tar.gz) + +build() { + cd ${name#*-}-$version + /usr/bin/python setup.py build + /usr/bin/python setup.py install --prefix=/usr --root=$PKG --optimize=1 +}

1 0

Firefox doesn't work out of box (multiprocessing)
by Wawrzek Niewodniczanski 11 Nov '17

11 Nov '17

Hi, I have fresh Crux installation with Firefox and fresh profiles, but I have disable multiprocessing to make it work. Any idea why? Wawrzek -- Dr Wawrzyniec Niewodniczański or Wawrzek for short PhD in Quantum Chemistry & MSc in Molecular Engineering WWW: http://wawrzek.name E-MAIL: jobs(a)wawrzek.name Linux User #177124

2 3

ports/opt (3.3): [notify] security fixes for CVE-2017-{14685, 14686, 14687, 15587}
by crux＠crux.nu 07 Nov '17

07 Nov '17

commit 19c238d66e7631a695f717c2afb0b43a9b3d2dee Author: Juergen Daubert <jue(a)jue.li> Date: Tue Nov 7 18:52:12 2017 +0100 [notify] security fixes for CVE-2017-{14685,14686,14687,15587} see http://www.cvedetails.com/vulnerability-list/vendor_id-10846/product_id-208… diff --git a/mupdf/.md5sum b/mupdf/.md5sum index 4c796f0b8..d61b1b520 100644 --- a/mupdf/.md5sum +++ b/mupdf/.md5sum @@ -1 +1,5 @@ +ae097201b362bc58fd75b51d7c6fe42b CVE-2017-14685.patch +998048b4fe608696a272cb2a14952976 CVE-2017-14686.patch +cafedbc55e43c18bb637dde7d65ea0c8 CVE-2017-14687.patch +56290af93197efb585ceb67eb778b706 CVE-2017-15587.patch ab9a6629f572225e803c4cf426bdb09c mupdf-1.11-source.tar.gz diff --git a/mupdf/.signature b/mupdf/.signature index b884c4a5c..050789138 100644 --- a/mupdf/.signature +++ b/mupdf/.signature @@ -1,5 +1,9 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/TjHZSlyXiGNKATgLUJf2J5WDdkYtouMMWjI/cpT7ZMk2zgGRXBKftZUU0NlZQG0jeG+qtNjcN4dQ9EolwHbowk= -SHA256 (Pkgfile) = 74b8f807c16ebcb0e5b136874551078a34304ea5e8c7a5125c3d297d5d33f2b5 +RWSE3ohX2g5d/fpadTpCZzmMLuXrlc1l6RJ6rPSVI8LXGJ0LqM/G6+PYnyeSQ76f6UtW7Hb7guZwDpEyjQqjfU8MbI8erLtGuQM= +SHA256 (Pkgfile) = 98ba17357685d3ba8bab3dc1994e5774717ea19769035bdc7ee30c6bd0c30da2 SHA256 (.footprint) = be0289826affec677e3cf44cd775c3f2a18c27bbe38d50d439460234b4f3da24 SHA256 (mupdf-1.11-source.tar.gz) = 209474a80c56a035ce3f4958a63373a96fad75c927c7b1acdc553fc85855f00a +SHA256 (CVE-2017-14685.patch) = 86f48971516962a7ff454f9a4354145b560966bf5e0c35ec18c32920f9551d88 +SHA256 (CVE-2017-14686.patch) = 2c143f3d7b40a9db575038332118dd7f954130e195c04c54f4da56885d3d765e +SHA256 (CVE-2017-14687.patch) = 4d423d717ddca66061bfe6feadeaa819db49e613b329e6c498e3db96390b6407 +SHA256 (CVE-2017-15587.patch) = c90e900cfa19855bf784d10443f08b31ce328572843c7186795f71e00fe76e12 diff --git a/mupdf/CVE-2017-14685.patch b/mupdf/CVE-2017-14685.patch new file mode 100644 index 000000000..a93652625 --- /dev/null +++ b/mupdf/CVE-2017-14685.patch @@ -0,0 +1,26 @@ +From ab1a420613dec93c686acbee2c165274e922f82a Mon Sep 17 00:00:00 2001 +From: Tor Andersson <tor.andersson(a)artifex.com> +Date: Tue, 19 Sep 2017 15:23:04 +0200 +Subject: [PATCH] Fix 698539: Don't use xps font if it could not be loaded. + +xps_load_links_in_glyphs did not cope with font loading failures. +--- + source/xps/xps-link.c | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/source/xps/xps-link.c b/source/xps/xps-link.c +index c07e0d7..c26a8d9 100644 +--- a/source/xps/xps-link.c ++++ b/source/xps/xps-link.c +@@ -91,6 +91,8 @@ xps_load_links_in_glyphs(fz_context *ctx, xps_document *doc, const fz_matrix *ct + bidi_level = atoi(bidi_level_att); + + font = xps_lookup_font(ctx, doc, base_uri, font_uri_att, style_att); ++ if (!font) ++ return; + text = xps_parse_glyphs_imp(ctx, doc, &local_ctm, font, fz_atof(font_size_att), + fz_atof(origin_x_att), fz_atof(origin_y_att), + is_sideways, bidi_level, indices_att, unicode_att); +-- +2.9.1 + diff --git a/mupdf/CVE-2017-14686.patch b/mupdf/CVE-2017-14686.patch new file mode 100644 index 000000000..f0e7a6bad --- /dev/null +++ b/mupdf/CVE-2017-14686.patch @@ -0,0 +1,26 @@ +From 0f0fbc07d9be31f5e83ec5328d7311fdfd8328b1 Mon Sep 17 00:00:00 2001 +From: Tor Andersson <tor.andersson(a)artifex.com> +Date: Tue, 19 Sep 2017 16:33:38 +0200 +Subject: [PATCH] Fix 698540: Check name, comment and meta size field signs. + +--- + source/fitz/unzip.c | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/source/fitz/unzip.c b/source/fitz/unzip.c +index f2d4f32..0bcce0f 100644 +--- a/source/fitz/unzip.c ++++ b/source/fitz/unzip.c +@@ -141,6 +141,9 @@ static void read_zip_dir_imp(fz_context *ctx, fz_zip_archive *zip, int start_off + (void) fz_read_int32_le(ctx, file); /* ext file atts */ + offset = fz_read_int32_le(ctx, file); + ++ if (namesize < 0 || metasize < 0 || commentsize < 0) ++ fz_throw(ctx, FZ_ERROR_GENERIC, "invalid size in zip entry"); ++ + name = fz_malloc(ctx, namesize + 1); + n = fz_read(ctx, file, (unsigned char*)name, namesize); + if (n < (size_t)namesize) +-- +2.9.1 + diff --git a/mupdf/CVE-2017-14687.patch b/mupdf/CVE-2017-14687.patch new file mode 100644 index 000000000..d08d895d8 --- /dev/null +++ b/mupdf/CVE-2017-14687.patch @@ -0,0 +1,122 @@ +From 2b16dbd8f73269cb15ca61ece75cf8d2d196ed28 Mon Sep 17 00:00:00 2001 +From: Tor Andersson <tor.andersson(a)artifex.com> +Date: Tue, 19 Sep 2017 17:17:12 +0200 +Subject: [PATCH] Fix 698558: Handle non-tags in tag name comparisons. + +Use fz_xml_is_tag instead of fz_xml_tag && !strcmp idiom. +--- + source/html/css-apply.c | 2 +- + source/svg/svg-run.c | 2 +- + source/xps/xps-common.c | 6 +++--- + source/xps/xps-glyphs.c | 2 +- + source/xps/xps-path.c | 4 ++-- + source/xps/xps-resource.c | 2 +- + 6 files changed, 9 insertions(+), 9 deletions(-) + +diff --git a/source/html/css-apply.c b/source/html/css-apply.c +index de55490..6a91df0 100644 +--- a/source/html/css-apply.c ++++ b/source/html/css-apply.c +@@ -328,7 +328,7 @@ match_selector(fz_css_selector *sel, fz_xml *node) + + if (sel->name) + { +- if (strcmp(sel->name, fz_xml_tag(node))) ++ if (!fz_xml_is_tag(node, sel->name)) + return 0; + } + +diff --git a/source/svg/svg-run.c b/source/svg/svg-run.c +index f974c67..5302c64 100644 +--- a/source/svg/svg-run.c ++++ b/source/svg/svg-run.c +@@ -1044,7 +1044,7 @@ svg_run_use(fz_context *ctx, fz_device *dev, svg_document *doc, fz_xml *root, co + fz_xml *linked = fz_tree_lookup(ctx, doc->idmap, xlink_href_att + 1); + if (linked) + { +- if (!strcmp(fz_xml_tag(linked), "symbol")) ++ if (fz_xml_is_tag(linked, "symbol")) + svg_run_use_symbol(ctx, dev, doc, root, linked, &local_state); + else + svg_run_element(ctx, dev, doc, linked, &local_state); +diff --git a/source/xps/xps-common.c b/source/xps/xps-common.c +index cc7fed9..f2f9b93 100644 +--- a/source/xps/xps-common.c ++++ b/source/xps/xps-common.c +@@ -47,7 +47,7 @@ xps_parse_brush(fz_context *ctx, xps_document *doc, const fz_matrix *ctm, const + else if (fz_xml_is_tag(node, "RadialGradientBrush")) + xps_parse_radial_gradient_brush(ctx, doc, ctm, area, base_uri, dict, node); + else +- fz_warn(ctx, "unknown brush tag: %s", fz_xml_tag(node)); ++ fz_warn(ctx, "unknown brush tag"); + } + + void +@@ -85,7 +85,7 @@ xps_begin_opacity(fz_context *ctx, xps_document *doc, const fz_matrix *ctm, cons + if (opacity_att) + opacity = fz_atof(opacity_att); + +- if (opacity_mask_tag && !strcmp(fz_xml_tag(opacity_mask_tag), "SolidColorBrush")) ++ if (fz_xml_is_tag(opacity_mask_tag, "SolidColorBrush")) + { + char *scb_opacity_att = fz_xml_att(opacity_mask_tag, "Opacity"); + char *scb_color_att = fz_xml_att(opacity_mask_tag, "Color"); +@@ -129,7 +129,7 @@ xps_end_opacity(fz_context *ctx, xps_document *doc, char *base_uri, xps_resource + + if (opacity_mask_tag) + { +- if (strcmp(fz_xml_tag(opacity_mask_tag), "SolidColorBrush")) ++ if (!fz_xml_is_tag(opacity_mask_tag, "SolidColorBrush")) + fz_pop_clip(ctx, dev); + } + } +diff --git a/source/xps/xps-glyphs.c b/source/xps/xps-glyphs.c +index 29dc5b3..5b26d78 100644 +--- a/source/xps/xps-glyphs.c ++++ b/source/xps/xps-glyphs.c +@@ -592,7 +592,7 @@ xps_parse_glyphs(fz_context *ctx, xps_document *doc, const fz_matrix *ctm, + + /* If it's a solid color brush fill/stroke do a simple fill */ + +- if (fill_tag && !strcmp(fz_xml_tag(fill_tag), "SolidColorBrush")) ++ if (fz_xml_is_tag(fill_tag, "SolidColorBrush")) + { + fill_opacity_att = fz_xml_att(fill_tag, "Opacity"); + fill_att = fz_xml_att(fill_tag, "Color"); +diff --git a/source/xps/xps-path.c b/source/xps/xps-path.c +index 6faeb0c..021d202 100644 +--- a/source/xps/xps-path.c ++++ b/source/xps/xps-path.c +@@ -879,14 +879,14 @@ xps_parse_path(fz_context *ctx, xps_document *doc, const fz_matrix *ctm, char *b + if (!data_att && !data_tag) + return; + +- if (fill_tag && !strcmp(fz_xml_tag(fill_tag), "SolidColorBrush")) ++ if (fz_xml_is_tag(fill_tag, "SolidColorBrush")) + { + fill_opacity_att = fz_xml_att(fill_tag, "Opacity"); + fill_att = fz_xml_att(fill_tag, "Color"); + fill_tag = NULL; + } + +- if (stroke_tag && !strcmp(fz_xml_tag(stroke_tag), "SolidColorBrush")) ++ if (fz_xml_is_tag(stroke_tag, "SolidColorBrush")) + { + stroke_opacity_att = fz_xml_att(stroke_tag, "Opacity"); + stroke_att = fz_xml_att(stroke_tag, "Color"); +diff --git a/source/xps/xps-resource.c b/source/xps/xps-resource.c +index c2292e6..8e81ab8 100644 +--- a/source/xps/xps-resource.c ++++ b/source/xps/xps-resource.c +@@ -84,7 +84,7 @@ xps_parse_remote_resource_dictionary(fz_context *ctx, xps_document *doc, char *b + if (!xml) + return NULL; + +- if (strcmp(fz_xml_tag(xml), "ResourceDictionary")) ++ if (!fz_xml_is_tag(xml, "ResourceDictionary")) + { + fz_drop_xml(ctx, xml); + fz_throw(ctx, FZ_ERROR_GENERIC, "expected ResourceDictionary element"); +-- +2.9.1 + diff --git a/mupdf/CVE-2017-15587.patch b/mupdf/CVE-2017-15587.patch new file mode 100644 index 000000000..06409794f --- /dev/null +++ b/mupdf/CVE-2017-15587.patch @@ -0,0 +1,26 @@ +From 82df2631d7d0446b206ea6b434ea609b6c28b0e8 Mon Sep 17 00:00:00 2001 +From: Tor Andersson <tor.andersson(a)artifex.com> +Date: Mon, 16 Oct 2017 13:14:25 +0200 +Subject: [PATCH] Check for integer overflow when validating new style xref + Index. + +--- + source/pdf/pdf-xref.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/source/pdf/pdf-xref.c b/source/pdf/pdf-xref.c +index 66bd0ed..6292793 100644 +--- a/source/pdf/pdf-xref.c ++++ b/source/pdf/pdf-xref.c +@@ -924,7 +924,7 @@ pdf_read_new_xref_section(fz_context *ctx, pdf_document *doc, fz_stream *stm, fz + pdf_xref_entry *table; + int i, n; + +- if (i0 < 0 || i1 < 0) ++ if (i0 < 0 || i1 < 0 || (i0+i1) < 0) + fz_throw(ctx, FZ_ERROR_GENERIC, "negative xref stream entry index"); + //if (i0 + i1 > pdf_xref_len(ctx, doc)) + // fz_throw(ctx, FZ_ERROR_GENERIC, "xref stream has too many entries"); +-- +2.9.1 + diff --git a/mupdf/Pkgfile b/mupdf/Pkgfile index 70e2d30fe..1db8346ef 100644 --- a/mupdf/Pkgfile +++ b/mupdf/Pkgfile @@ -5,12 +5,18 @@ name=mupdf version=1.11 -release=1 -source=(http://mupdf.com/downloads/$name-$version-source.tar.gz) +release=2 +source=(http://mupdf.com/downloads/$name-$version-source.tar.gz + CVE-2017-{14685,14686,14687,15587}.patch) build() { cd $name-$version-source + patch -p1 -i $SRC/CVE-2017-14685.patch + patch -p1 -i $SRC/CVE-2017-14686.patch + patch -p1 -i $SRC/CVE-2017-14687.patch + patch -p1 -i $SRC/CVE-2017-15587.patch + rm -r thirdparty/{freetype,libjpeg,zlib,curl,harfbuzz} make XCFLAGS="-fpic" build=release

1 0

ports/opt (3.3): [notify] lcms2: update to 2.9
by crux＠crux.nu 07 Nov '17

07 Nov '17

commit 84641437a210031e82ef1926738355a16f7c833b Author: Juergen Daubert <jue(a)jue.li> Date: Tue Nov 7 16:22:15 2017 +0100 [notify] lcms2: update to 2.9 security update, see https://github.com/mm2/Little-CMS/blob/master/ChangeLog diff --git a/lcms2/.md5sum b/lcms2/.md5sum index 3fbfc127b..8a2c46ef4 100644 --- a/lcms2/.md5sum +++ b/lcms2/.md5sum @@ -1 +1 @@ -87a5913f1a52464190bb655ad230539c lcms2-2.8.tar.gz +758fd9a381ee1b6f058742f6f33c965b lcms2-2.9.tar.gz diff --git a/lcms2/.signature b/lcms2/.signature index e123bfeec..c13b97158 100644 --- a/lcms2/.signature +++ b/lcms2/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/Y2t/d8tgxrqsvObPiPfoGbIP6fMs81JXXV4AycdeyoVML7bnjoFgcrFxqeSUeny7WuryYe2dtdrVird78Z6dg4= -SHA256 (Pkgfile) = 8feffbbcfb41b7914ea0feac9b0eb2cbc347cc1148045cda5f97d357cde04a1a +RWSE3ohX2g5d/buFfG4nwojeWwGM/J6urG4qa1TvrmCN+cAHginEtZP08hScF689zEDDqv9r9Ovbr+Gq9mgscKM164C0RdVtEgk= +SHA256 (Pkgfile) = 7cedfb85a79f11d4262932f7ad12e4a68a40874244e1ce2993da782af33559bf SHA256 (.footprint) = df0d489a4ab3a2d70d7da3376a5b2e9e41b2ac2609b343482835d62362a0f587 -SHA256 (lcms2-2.8.tar.gz) = 66d02b229d2ea9474e62c2b6cd6720fde946155cd1d0d2bffdab829790a0fb22 +SHA256 (lcms2-2.9.tar.gz) = 00756bed09ce059a68289f10de56b00267667647393ddc30400cb87c0d9037d5 diff --git a/lcms2/Pkgfile b/lcms2/Pkgfile index 9fe76d596..735a9fc8d 100644 --- a/lcms2/Pkgfile +++ b/lcms2/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xz, libtiff name=lcms2 -version=2.8 +version=2.9 release=1 source=(http://downloads.sourceforge.net/project/lcms/lcms/$version/$name-$…

1 0