March 2018 - CRUX - lists.crux.nu

ports/xorg (3.4): [notify] xorg-libxcb: updated to 1.13. Now depends on libinput
by crux＠crux.nu 06 Mar '18

06 Mar '18

commit 77431630ec3cde903cdc0d732bc50be59b1dd84a Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Mar 6 00:48:29 2018 +0100 [notify] xorg-libxcb: updated to 1.13. Now depends on libinput diff --git a/xorg-libxcb/.footprint b/xorg-libxcb/.footprint index da90d6b..e67e264 100644 --- a/xorg-libxcb/.footprint +++ b/xorg-libxcb/.footprint @@ -7,6 +7,7 @@ drwxr-xr-x root/root usr/include/xcb/ -rw-r--r-- root/root usr/include/xcb/dpms.h -rw-r--r-- root/root usr/include/xcb/dri2.h -rw-r--r-- root/root usr/include/xcb/dri3.h +-rw-r--r-- root/root usr/include/xcb/ge.h -rw-r--r-- root/root usr/include/xcb/glx.h -rw-r--r-- root/root usr/include/xcb/present.h -rw-r--r-- root/root usr/include/xcb/randr.h @@ -123,6 +124,11 @@ lrwxrwxrwx root/root usr/lib/libxcb-xfixes.so.0 -> libxcb-xfixes.so.0.0.0 lrwxrwxrwx root/root usr/lib/libxcb-xinerama.so -> libxcb-xinerama.so.0.0.0 lrwxrwxrwx root/root usr/lib/libxcb-xinerama.so.0 -> libxcb-xinerama.so.0.0.0 -rwxr-xr-x root/root usr/lib/libxcb-xinerama.so.0.0.0 +-rw-r--r-- root/root usr/lib/libxcb-xinput.a +-rwxr-xr-x root/root usr/lib/libxcb-xinput.la +lrwxrwxrwx root/root usr/lib/libxcb-xinput.so -> libxcb-xinput.so.0.1.0 +lrwxrwxrwx root/root usr/lib/libxcb-xinput.so.0 -> libxcb-xinput.so.0.1.0 +-rwxr-xr-x root/root usr/lib/libxcb-xinput.so.0.1.0 -rw-r--r-- root/root usr/lib/libxcb-xkb.a -rwxr-xr-x root/root usr/lib/libxcb-xkb.la lrwxrwxrwx root/root usr/lib/libxcb-xkb.so -> libxcb-xkb.so.1.0.0 @@ -167,6 +173,7 @@ drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xf86dri.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xfixes.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xinerama.pc +-rw-r--r-- root/root usr/lib/pkgconfig/xcb-xinput.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xkb.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xtest.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xv.pc diff --git a/xorg-libxcb/.md5sum b/xorg-libxcb/.md5sum index 3030981..424e2eb 100644 --- a/xorg-libxcb/.md5sum +++ b/xorg-libxcb/.md5sum @@ -1 +1 @@ -28e552bd78bc1050b6b26ca1db0e5bb6 libxcb-1.12.tar.bz2 +c2b6cf928afa16b0047c974e7aaa783f libxcb-1.13.tar.bz2 diff --git a/xorg-libxcb/.signature b/xorg-libxcb/.signature index b21f9a8..292c517 100644 --- a/xorg-libxcb/.signature +++ b/xorg-libxcb/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndKMxzaJM2ruJO9FfWMstJOQOAvYhJ38OjsmcHsgDlYuefPbSyegSMc7fhoCTWkJJ/iGkL3+u9t/cCdYwMt5yYAo= -SHA256 (Pkgfile) = 5170ebd81244604bdbb50796b55abd2c8b4aa8dfdaa4296788380f9908f61dc0 -SHA256 (.footprint) = e0088b1f759a191fddfe416bd810a82caf34e121dba171b07802f1b658e25a96 -SHA256 (libxcb-1.12.tar.bz2) = 4adfb1b7c67e99bc9c2ccb110b2f175686576d2f792c8a71b9c8b19014057b5b +RWTSGWF5Q7TndIIuYTe5OIVVBLQCEuBykFQcIbph6rezh1ECVPyRD+H1Ht4c70g7DRoeCJV+9RvaKyfMt3dMjXJrBZ7UoCwCPA0= +SHA256 (Pkgfile) = 768921e2a84bd18da01b2e127ed494ca4292a946127a03620a4e9a40fc2b2ca7 +SHA256 (.footprint) = fce7e310c204c0112530728bd997e6cbab6d4f9219150c13e6c83aebdd2f371e +SHA256 (libxcb-1.13.tar.bz2) = 188c8752193c50ff2dbe89db4554c63df2e26a2e47b0fa415a70918b5b851daa diff --git a/xorg-libxcb/Pkgfile b/xorg-libxcb/Pkgfile index 843de48..baab732 100644 --- a/xorg-libxcb/Pkgfile +++ b/xorg-libxcb/Pkgfile @@ -1,10 +1,10 @@ # Description: X11 client-side library # URL: http://xcb.freedesktop.org # Maintainer: CRUX Xorg Team, xorg-ports at crux dot nu -# Depends on: xorg-xcb-proto xorg-libxdmcp xorg-libxau libxslt libpthread-stubs +# Depends on: xorg-xcb-proto xorg-libxdmcp xorg-libxau libxslt libpthread-stubs libinput name=xorg-libxcb -version=1.12 +version=1.13 release=1 source=(http://xcb.freedesktop.org/dist/libxcb-$version.tar.bz2)

1 0

ports/xorg (3.3): [notify] xorg-libxcb: updated to 1.13. Now depends on libinput
by crux＠crux.nu 06 Mar '18

06 Mar '18

commit 77431630ec3cde903cdc0d732bc50be59b1dd84a Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Mar 6 00:48:29 2018 +0100 [notify] xorg-libxcb: updated to 1.13. Now depends on libinput diff --git a/xorg-libxcb/.footprint b/xorg-libxcb/.footprint index da90d6b..e67e264 100644 --- a/xorg-libxcb/.footprint +++ b/xorg-libxcb/.footprint @@ -7,6 +7,7 @@ drwxr-xr-x root/root usr/include/xcb/ -rw-r--r-- root/root usr/include/xcb/dpms.h -rw-r--r-- root/root usr/include/xcb/dri2.h -rw-r--r-- root/root usr/include/xcb/dri3.h +-rw-r--r-- root/root usr/include/xcb/ge.h -rw-r--r-- root/root usr/include/xcb/glx.h -rw-r--r-- root/root usr/include/xcb/present.h -rw-r--r-- root/root usr/include/xcb/randr.h @@ -123,6 +124,11 @@ lrwxrwxrwx root/root usr/lib/libxcb-xfixes.so.0 -> libxcb-xfixes.so.0.0.0 lrwxrwxrwx root/root usr/lib/libxcb-xinerama.so -> libxcb-xinerama.so.0.0.0 lrwxrwxrwx root/root usr/lib/libxcb-xinerama.so.0 -> libxcb-xinerama.so.0.0.0 -rwxr-xr-x root/root usr/lib/libxcb-xinerama.so.0.0.0 +-rw-r--r-- root/root usr/lib/libxcb-xinput.a +-rwxr-xr-x root/root usr/lib/libxcb-xinput.la +lrwxrwxrwx root/root usr/lib/libxcb-xinput.so -> libxcb-xinput.so.0.1.0 +lrwxrwxrwx root/root usr/lib/libxcb-xinput.so.0 -> libxcb-xinput.so.0.1.0 +-rwxr-xr-x root/root usr/lib/libxcb-xinput.so.0.1.0 -rw-r--r-- root/root usr/lib/libxcb-xkb.a -rwxr-xr-x root/root usr/lib/libxcb-xkb.la lrwxrwxrwx root/root usr/lib/libxcb-xkb.so -> libxcb-xkb.so.1.0.0 @@ -167,6 +173,7 @@ drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xf86dri.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xfixes.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xinerama.pc +-rw-r--r-- root/root usr/lib/pkgconfig/xcb-xinput.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xkb.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xtest.pc -rw-r--r-- root/root usr/lib/pkgconfig/xcb-xv.pc diff --git a/xorg-libxcb/.md5sum b/xorg-libxcb/.md5sum index 3030981..424e2eb 100644 --- a/xorg-libxcb/.md5sum +++ b/xorg-libxcb/.md5sum @@ -1 +1 @@ -28e552bd78bc1050b6b26ca1db0e5bb6 libxcb-1.12.tar.bz2 +c2b6cf928afa16b0047c974e7aaa783f libxcb-1.13.tar.bz2 diff --git a/xorg-libxcb/.signature b/xorg-libxcb/.signature index b21f9a8..292c517 100644 --- a/xorg-libxcb/.signature +++ b/xorg-libxcb/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndKMxzaJM2ruJO9FfWMstJOQOAvYhJ38OjsmcHsgDlYuefPbSyegSMc7fhoCTWkJJ/iGkL3+u9t/cCdYwMt5yYAo= -SHA256 (Pkgfile) = 5170ebd81244604bdbb50796b55abd2c8b4aa8dfdaa4296788380f9908f61dc0 -SHA256 (.footprint) = e0088b1f759a191fddfe416bd810a82caf34e121dba171b07802f1b658e25a96 -SHA256 (libxcb-1.12.tar.bz2) = 4adfb1b7c67e99bc9c2ccb110b2f175686576d2f792c8a71b9c8b19014057b5b +RWTSGWF5Q7TndIIuYTe5OIVVBLQCEuBykFQcIbph6rezh1ECVPyRD+H1Ht4c70g7DRoeCJV+9RvaKyfMt3dMjXJrBZ7UoCwCPA0= +SHA256 (Pkgfile) = 768921e2a84bd18da01b2e127ed494ca4292a946127a03620a4e9a40fc2b2ca7 +SHA256 (.footprint) = fce7e310c204c0112530728bd997e6cbab6d4f9219150c13e6c83aebdd2f371e +SHA256 (libxcb-1.13.tar.bz2) = 188c8752193c50ff2dbe89db4554c63df2e26a2e47b0fa415a70918b5b851daa diff --git a/xorg-libxcb/Pkgfile b/xorg-libxcb/Pkgfile index 843de48..baab732 100644 --- a/xorg-libxcb/Pkgfile +++ b/xorg-libxcb/Pkgfile @@ -1,10 +1,10 @@ # Description: X11 client-side library # URL: http://xcb.freedesktop.org # Maintainer: CRUX Xorg Team, xorg-ports at crux dot nu -# Depends on: xorg-xcb-proto xorg-libxdmcp xorg-libxau libxslt libpthread-stubs +# Depends on: xorg-xcb-proto xorg-libxdmcp xorg-libxau libxslt libpthread-stubs libinput name=xorg-libxcb -version=1.12 +version=1.13 release=1 source=(http://xcb.freedesktop.org/dist/libxcb-$version.tar.bz2)

1 0

ports/opt (3.3): [notify] php: security update to 5.6.34
by crux＠crux.nu 05 Mar '18

05 Mar '18

commit 2dfb8df07ecccf4a47af9d884ba583dcc48ffaf1 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Mar 5 15:20:32 2018 +0100 [notify] php: security update to 5.6.34 diff --git a/mod_php/.md5sum b/mod_php/.md5sum index 8d427149c..d32c77dff 100644 --- a/mod_php/.md5sum +++ b/mod_php/.md5sum @@ -1 +1 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz diff --git a/mod_php/.signature b/mod_php/.signature index 01f050ad3..4baec7126 100644 --- a/mod_php/.signature +++ b/mod_php/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/ZPUFkc0JovTFgUyElWzXGwKi0lQElC+jkDkeBfq5WYRRAdsJVkNnVz4GM1R7Pui4h+oqZC+aidGZuIZe9HVwQ4= -SHA256 (Pkgfile) = 290189806d4473289b17c9ba0600e720e91830d9ab5f119e7785cd53143c355a +RWSE3ohX2g5d/e/7OsX72z1nsjWX/jn0SIbyQ5d6E1FCoTymxzjL29ZFlyrIxqIJCsGkG17kojtJmhnbWXBgpUCfWeOOy+Wa4QQ= +SHA256 (Pkgfile) = c9ee6da496d89e0122623614463a5d303a95b4917665c8728aa4b59a8049ce6d SHA256 (.footprint) = c964ecc21b4b699f0bd50a1ce6c2ef4dbd57291b2c11a0b2eab93ae056f2a1e4 -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 diff --git a/mod_php/Pkgfile b/mod_php/Pkgfile index a82564afc..66cba3460 100644 --- a/mod_php/Pkgfile +++ b/mod_php/Pkgfile @@ -4,7 +4,7 @@ # Depends on: apache name=mod_php -version=5.6.33 +version=5.6.34 release=1 source=(http://php.net/distributions/php-$version.tar.xz) diff --git a/php-fcgi/.md5sum b/php-fcgi/.md5sum index 4d242ae92..44c5fbbe3 100644 --- a/php-fcgi/.md5sum +++ b/php-fcgi/.md5sum @@ -1,2 +1,2 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz cdaab91680ba17cbf31b21d1b64dcd6a php-fcgi diff --git a/php-fcgi/.signature b/php-fcgi/.signature index a03707a52..feeb8b12c 100644 --- a/php-fcgi/.signature +++ b/php-fcgi/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/R0IRzv804VFk1rFNmBYrbT4tnAq6T6RUWoLfAXiY+ROZaI8DyNPqjV7R2Vd+smgY8Hm/BIftSPWq5Y76kQXlQs= -SHA256 (Pkgfile) = de17e473f3d95f79a81d64307cfd51cc2bd6b83c64f14a73cf3be5c4688ef609 +RWSE3ohX2g5d/a1ImUBSO3Dq2SfMQl+Om51jfxSp6LuR77xW9o+krfTTp4it2tN1g+4W3w5Nly2qYWp2vrdKTK5+tRWVApZWfwc= +SHA256 (Pkgfile) = 2930337d8e38f8870be446d91b204360d6feb635bfd1353c1594c85b4c02e46e SHA256 (.footprint) = 073d817f449e60b58f4c904bd4ef54ddad9bd0ab946ee178956622bf76d5501b -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 SHA256 (php-fcgi) = 058feaf2d8ad8ed61a4191512eb2151b8ed87fd92ce469ee8bab1812c0cb6471 diff --git a/php-fcgi/Pkgfile b/php-fcgi/Pkgfile index f1f9a745a..e772947f1 100644 --- a/php-fcgi/Pkgfile +++ b/php-fcgi/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libpcre libxml2 name=php-fcgi -version=5.6.33 +version=5.6.34 release=1 source=(http://php.net/distributions/php-$version.tar.xz php-fcgi) diff --git a/php-fpm/.md5sum b/php-fpm/.md5sum index 43b08f8a5..39a41dec2 100644 --- a/php-fpm/.md5sum +++ b/php-fpm/.md5sum @@ -1,2 +1,2 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz 954d95b7f645f3435815195aeeac6949 php-fpm diff --git a/php-fpm/.signature b/php-fpm/.signature index cf7d5af71..d361b919d 100644 --- a/php-fpm/.signature +++ b/php-fpm/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/a7mSyCDimIACyc3/TpySuPP4ZcnYf5+FJYL+KYwEC/WXcIDf0Kg3hJjlma2tHKzJpIjJ77q+OwVvIW/KWgY7AA= -SHA256 (Pkgfile) = 4af9db42e3a50e57ecb1bbf4b7bd8429225b78d228e5b51c12d0690894d45b28 +RWSE3ohX2g5d/ZjUw5lG0Z7cRPMegDdAIyE3Lnzuv8OcgOAyQsYCKN/AlNzPapMyY7XdsRr4xHF0A9PhIMYU4z7elpH0lQnq2A4= +SHA256 (Pkgfile) = 8166eee043ac3a8a3be435d791a9e0fcaaafb71c082f5e63aa8a6e2eedac8f0e SHA256 (.footprint) = 5b8ceed2150bdbf3d6cc01b0ef712a5c917367f58dd3181377af29ad11283be4 -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 SHA256 (php-fpm) = a1fde2295e819a33d492cfdeca8d4e0e8de08b8d051c95c4758ba01da38354b7 diff --git a/php-fpm/Pkgfile b/php-fpm/Pkgfile index 2a2851402..3c4783dfa 100644 --- a/php-fpm/Pkgfile +++ b/php-fpm/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libpcre libxml2 name=php-fpm -version=5.6.33 +version=5.6.34 release=1 source=(http://php.net/distributions/php-$version.tar.xz php-fpm) diff --git a/php-ftp/.md5sum b/php-ftp/.md5sum index 8d427149c..d32c77dff 100644 --- a/php-ftp/.md5sum +++ b/php-ftp/.md5sum @@ -1 +1 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz diff --git a/php-ftp/.signature b/php-ftp/.signature index a56eea8d0..a31705858 100644 --- a/php-ftp/.signature +++ b/php-ftp/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/TDgMU/aRJVxgJGZqz0ldntgI+i7u7r2UezhKtbNPcDYXsy4NbmVAOiqKiV2KdoyI3sXtNOT9rZ0rf+WXhkcOQ8= -SHA256 (Pkgfile) = dc083141d577ae0910ed2a6cc57f0f7dab6e9b2cb5abeeea86dbe8f182b72925 +RWSE3ohX2g5d/eRDwXRZ5MDi/jTWVrMforD2kClk7CprTWmTTraw7qRx0FrvRiUeZPbjx65RUgL3BjA4j1lY/vQSvMcnl60YNww= +SHA256 (Pkgfile) = 76ce3c96242b1a758e8e5ee8c048164d101c54cf9a5f7518a0e7d9f2e85367b1 SHA256 (.footprint) = 4b6e9e791f10bb007a541c6a4cfe6a189d549592939bdf3e04c5bd0f25a4bfa0 -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 diff --git a/php-ftp/Pkgfile b/php-ftp/Pkgfile index 1e400e367..01bd25f0d 100644 --- a/php-ftp/Pkgfile +++ b/php-ftp/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=php-ftp -version=5.6.33 +version=5.6.34 release=1 source=(http://www.php.net/distributions/php-$version.tar.xz) diff --git a/php-gd/.md5sum b/php-gd/.md5sum index 8d427149c..d32c77dff 100644 --- a/php-gd/.md5sum +++ b/php-gd/.md5sum @@ -1 +1 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz diff --git a/php-gd/.signature b/php-gd/.signature index aa27f1f58..2126f34a5 100644 --- a/php-gd/.signature +++ b/php-gd/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/apW8nOzisd/uD1cnZHzoYAO7kLbs8DZAqUyTQ2SPMiElMTcSLlBElXyMeKkFQYHHOknp8eZbCWrcO5dfqR++g4= -SHA256 (Pkgfile) = 87ab0ec7e927f81b7f4bf7f890ffc5c809f62440b5f1a0ce1e9a1770f9df69a4 +RWSE3ohX2g5d/QF6NeWSlBbd57u5Vf/SgZvGSkvARkjONmsk57Nswo7K3eGRFN1dss9Qn8Ou3Xgs+rsjTN++ODrsJUG2Hi0z5wU= +SHA256 (Pkgfile) = f8b00f2f64a2bed53ec10abb5a15601b3ab08e214f49fba8771bb48cb7fc01e0 SHA256 (.footprint) = 09e41333252c613bbc54155a95e91919aedf35e3fe90607f941528ac9f1a39bb -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 diff --git a/php-gd/Pkgfile b/php-gd/Pkgfile index 85c36878f..dfd8efbba 100644 --- a/php-gd/Pkgfile +++ b/php-gd/Pkgfile @@ -5,7 +5,7 @@ # Depends on: libgd name=php-gd -version=5.6.33 +version=5.6.34 release=1 source=(http://www.php.net/distributions/php-$version.tar.xz) diff --git a/php-gettext/.md5sum b/php-gettext/.md5sum index 8d427149c..d32c77dff 100644 --- a/php-gettext/.md5sum +++ b/php-gettext/.md5sum @@ -1 +1 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz diff --git a/php-gettext/.signature b/php-gettext/.signature index c7b5df6af..c784dd3eb 100644 --- a/php-gettext/.signature +++ b/php-gettext/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/UtTJovUQKp7vP/1BugsH0u1pLR4C+ds0dgH8oe+jr3Biof4JlMY+7UgUlZMwrKQtBLoE2jwGfuY1B1PlBClDgc= -SHA256 (Pkgfile) = 7c8f5fa5f1e2f6af143108890e01bbec80a0b5161c946e8c2ee7ff524b158e2d +RWSE3ohX2g5d/agLlcobvSHpegOzrdmAxrzfz6MoMcV4b4TupFHsTyN05mY6z8s1u5wVXrJtmKapv1z1Hvl1SgNx90TUv3xRNgY= +SHA256 (Pkgfile) = d678b7de541fa4c575e7298a032f14e32501e87c60bf0957f9e286d9b7276c4d SHA256 (.footprint) = f2188408bdd37cf12c2eb9ef545b934e6a10d8faf52d3b961cd6c7649bdfaf9a -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 diff --git a/php-gettext/Pkgfile b/php-gettext/Pkgfile index 3d63cb5de..2253d5307 100644 --- a/php-gettext/Pkgfile +++ b/php-gettext/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=php-gettext -version=5.6.33 +version=5.6.34 release=1 source=(http://www.php.net/distributions/php-$version.tar.xz) diff --git a/php-mysql/.md5sum b/php-mysql/.md5sum index 8d427149c..d32c77dff 100644 --- a/php-mysql/.md5sum +++ b/php-mysql/.md5sum @@ -1 +1 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz diff --git a/php-mysql/.signature b/php-mysql/.signature index 7cb3b18af..f26297d57 100644 --- a/php-mysql/.signature +++ b/php-mysql/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/WjxGpcb+EA5nGHbrYTLa7dKPsrxJS/RByyfNOSgoEipGKBZzQbWdwvh3EpYWwaZd9Xzl2sY/zPe8L9kkRRJAQo= -SHA256 (Pkgfile) = a12fb1ebdb740ba151a63171bdabb6f266ae9c49126f8abb6591035a76f5f3ed +RWSE3ohX2g5d/RB1xYUe4emk3387b2IKO9IYmuvYWcyvno1PCkCIFJBtwaggd4skVglBF7Mqjs62bIEFyvWQ8J0Uuq37XTTm2wo= +SHA256 (Pkgfile) = 1178aafeb8cd6f5ebbd45cbdbf1101b8b7c7dcf70372becff33e5087ef8d766b SHA256 (.footprint) = 4dd3e707e3020b35147ba1ebdf629cbeaa4da75c01c769261626a1d91e0e5f0e -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 diff --git a/php-mysql/Pkgfile b/php-mysql/Pkgfile index 9c867315f..ecf5b4080 100644 --- a/php-mysql/Pkgfile +++ b/php-mysql/Pkgfile @@ -4,7 +4,7 @@ # Depends on: mysql name=php-mysql -version=5.6.33 +version=5.6.34 release=1 source=(http://php.net/distributions/php-$version.tar.xz) diff --git a/php-sockets/.md5sum b/php-sockets/.md5sum index 8d427149c..d32c77dff 100644 --- a/php-sockets/.md5sum +++ b/php-sockets/.md5sum @@ -1 +1 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz diff --git a/php-sockets/.signature b/php-sockets/.signature index 67536d329..61da121e4 100644 --- a/php-sockets/.signature +++ b/php-sockets/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/eLZtQupdEYpVdOhLgJd3+76KbJ7n0D7mEHwauseaAamK4qn4cICQ85j33u4F0VkYRwjxLiQbSaVsnQbmc6AigI= -SHA256 (Pkgfile) = c109bcd40ec5e3a053fe6a9fa1faef75860da85aa83cee8b7723d310661fc806 +RWSE3ohX2g5d/blk/kY2mvh9Dtt2mpWYl8+Rtq1n1Xrsy99mYsADX7uM6cvB/Fc2NT5h7SlhxOr7SNqUrmpUvC+7+h/wqWVKtwA= +SHA256 (Pkgfile) = f6bf673d31a2c2425473a99094d71e1cc46ea73d360265a430d5378bc13c323a SHA256 (.footprint) = 1a0e33807dcda8d11408be8b6356860cac8daea5a94d4e9a87e535fbf778f04e -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 diff --git a/php-sockets/Pkgfile b/php-sockets/Pkgfile index 1203fe3d1..f706dd244 100644 --- a/php-sockets/Pkgfile +++ b/php-sockets/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=php-sockets -version=5.6.33 +version=5.6.34 release=1 source=(http://www.php.net/distributions/php-$version.tar.xz) diff --git a/php-sqlite3/.md5sum b/php-sqlite3/.md5sum index 8d427149c..d32c77dff 100644 --- a/php-sqlite3/.md5sum +++ b/php-sqlite3/.md5sum @@ -1 +1 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz diff --git a/php-sqlite3/.signature b/php-sqlite3/.signature index 6d846812c..ea1895523 100644 --- a/php-sqlite3/.signature +++ b/php-sqlite3/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/RukDUi/CIrgd0Liz74ltmr4xDwt7DBtnaEmhvD+ueWcDBqgJ9Ym0gH52U2OPmuHx9/4J5jFwVioNALVoo8xCAA= -SHA256 (Pkgfile) = 74761ccc865a725799f89d53187bf8085709907c3cf9595f6ffdb45870571cdd +RWSE3ohX2g5d/SEcUIaxBRTvu7qIC1GQ2mObJA0DZiRNqCzquqJUmYsSbUq4RA521CRNCzBVYkYD9WCr+jTW22hCqYFpuuMKxAE= +SHA256 (Pkgfile) = 32d9f20eb8dcf0a693141d15bd00f16a7885f2b3eaca82f5a5692ba217c9f599 SHA256 (.footprint) = e626528b1bc2b3ce187cc979172f24c489075e0bc584aeb1d082b2f7197d6e49 -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 diff --git a/php-sqlite3/Pkgfile b/php-sqlite3/Pkgfile index 88da8c920..d67ee74e5 100644 --- a/php-sqlite3/Pkgfile +++ b/php-sqlite3/Pkgfile @@ -4,7 +4,7 @@ # Depends on: sqlite3 name=php-sqlite3 -version=5.6.33 +version=5.6.34 release=1 source=(http://php.net/distributions/php-$version.tar.xz) diff --git a/php/.md5sum b/php/.md5sum index 8d427149c..d32c77dff 100644 --- a/php/.md5sum +++ b/php/.md5sum @@ -1 +1 @@ -ca5d8f4b2b8c19519e495ecfed625ffa php-5.6.33.tar.xz +dd28a659b88ad60797a7c102307f2edb php-5.6.34.tar.xz diff --git a/php/.signature b/php/.signature index 37b0c03ba..07f0f65a3 100644 --- a/php/.signature +++ b/php/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/eIueJTTRNuDkMAVWA+V/LHERMd59QtPQDGfa3Oq/khknkrprkUUKxKfgWdhEIjUXVfIl1ShH2N+gZUZwuD7kgI= -SHA256 (Pkgfile) = da8ee59f68dbb1bc266abd0521024784572633f98215336a7f3c08b95cb422b3 +RWSE3ohX2g5d/Z8VmvOqIdduAEuzwTKvGFzk5KztLCIC622Wn/ug5IX+dDo5cqHnBM9Yh46iw1xU138Xvz8PBadr+PSK5xb3nw8= +SHA256 (Pkgfile) = 94fd7e3e97e8cf007256e0affb884e62d4406396c1609ecd649dbb948b4b50be SHA256 (.footprint) = 65e725950334ab8815dc34d555a1a963d49b0af8df57aabe4efba07854a69adc -SHA256 (php-5.6.33.tar.xz) = 9004995fdf55f111cd9020e8b8aff975df3d8d4191776c601a46988c375f3553 +SHA256 (php-5.6.34.tar.xz) = 21453be3a045204cd2717543ef42771324f411f40962ecda4fe841930a933128 diff --git a/php/Pkgfile b/php/Pkgfile index 4783ed2d7..c70e881ce 100644 --- a/php/Pkgfile +++ b/php/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libpcre libxml2 curl db gdbm name=php -version=5.6.33 +version=5.6.34 release=1 source=(http://php.net/distributions/php-$version.tar.xz)

1 0

ports/opt (3.3): [notify] python: security fix for CVE-2018-1000030, closes FS#1593
by crux＠crux.nu 05 Mar '18

05 Mar '18

commit 44a2a4397f72c46d9233396e33b20440e169967b Author: Juergen Daubert <jue(a)jue.li> Date: Mon Mar 5 14:00:09 2018 +0100 [notify] python: security fix for CVE-2018-1000030, closes FS#1593 see https://nvd.nist.gov/vuln/detail/CVE-2018-1000030 diff --git a/python/.md5sum b/python/.md5sum index 827b1afbb..2522becf5 100644 --- a/python/.md5sum +++ b/python/.md5sum @@ -1,2 +1,3 @@ +ff653e9e002ca0e3d4a828988e52edd3 CVE-2018-1000030.patch 1f6db41ad91d9eb0a6f0c769b8613c5b Python-2.7.14.tar.xz 387d5f6d00d2be01ecb87216cac0f88c pyconfig.h diff --git a/python/.signature b/python/.signature index 79f65e271..660b6eece 100644 --- a/python/.signature +++ b/python/.signature @@ -1,6 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/epCMlUlFvQyaIBzosMEyP+lGSzf7nv8h9yrdisRjDKb2xLBIKFHVun/04RwTZIvn0CBZvxCeIfrt5e8O4HPwQQ= -SHA256 (Pkgfile) = 1fb4bf0238ad36a48a801d2d37d04e2c9650697dff1939f2781dc74f72058491 +RWSE3ohX2g5d/boQipBgLcfxZlqFZR09X30s/Z5MGSa539QoTYA6+7gBtc/kPgMKpF6e8opocX6wAQjcf9trsFzX4XMdoJaRFwY= +SHA256 (Pkgfile) = 68fdadc03201267d440d69f8cd2e02a028887cf0b274d02ca17c52095aa8c663 SHA256 (.footprint) = cad0b763c2deaad518b7c81ea32fbbe025df03c1548002336ef818ca9f4cf7ce SHA256 (Python-2.7.14.tar.xz) = 71ffb26e09e78650e424929b2b457b9c912ac216576e6bd9e7d204ed03296a66 +SHA256 (CVE-2018-1000030.patch) = f7ff89ad24d529532b4dfa6bd601d8f7368c3ae3950dae539ecc11e5e09b3ecb SHA256 (pyconfig.h) = 081426cb9524c2e156a71bb035c25a67e44d389afc6f7e091bcf86a7f4e2002f diff --git a/python/Pkgfile b/python/Pkgfile index 3645f5e98..3120ef84a 100644 --- a/python/Pkgfile +++ b/python/Pkgfile @@ -5,12 +5,17 @@ name=python version=2.7.14 -release=1 +release=2 source=(http://www.python.org/ftp/$name/$version/Python-$version.tar.xz \ + CVE-2018-1000030.patch pyconfig.h) build () { cd Python-$version + + # fix for CVE-2018-1000030 + # see https://bugs.python.org/issue31530 + patch -p1 -i $SRC/CVE-2018-1000030.patch # set OPT to the python default without -O3 # our CFLAGS are used as well

1 0

ports/opt (3.4): [notify] dovecot: update to 2.3.0.1, closes FS#1599
by crux＠crux.nu 02 Mar '18

02 Mar '18

commit b927b2f2d7680a3241d70b6c70f1ec8602169831 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Mar 1 09:57:59 2018 +0100 [notify] dovecot: update to 2.3.0.1, closes FS#1599 security fix, see https://dovecot.org/list/dovecot-news/2018-February/000371.html diff --git a/dovecot/.md5sum b/dovecot/.md5sum index 3b4936f51..21943f3b4 100644 --- a/dovecot/.md5sum +++ b/dovecot/.md5sum @@ -1,5 +1,3 @@ -a1a5efc13766e3b2d0a154e9716f0f7a CVE-2017-15132-1.patch -f043e0bb2773cd38f74ada8c164524a6 CVE-2017-15132.patch ec342928dd97131f82dba41546741b5f dovecot -a8802617ddf68972f5f97bd8677e5856 dovecot-2.3.0.tar.gz +865d6ad94c98ac3289fa06a77b1c014e dovecot-2.3.0.1.tar.gz 1cc42484b5515bddf47edcf26b288b6b dovecot-config.patch diff --git a/dovecot/.signature b/dovecot/.signature index c9707c0a1..a7f0a14ea 100644 --- a/dovecot/.signature +++ b/dovecot/.signature @@ -1,9 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/SkROei+JVsseDKn6SIUNsjxW4JVhAKiDa6r4HZW5ka8HbQjpy6OBAAyHGpg/+/NM5m9pchHJcjlYyFH2k1VXQs= -SHA256 (Pkgfile) = f325affa0506d8e0a7f7ac40e81503af99fa2ee54a3a8c38a76205de6e8e396b +RWSE3ohX2g5d/d5N12tWoNTQhb7I2Fr15CI5nf6EiZ2gY+6Rhbz6ryRonaZ1C0T02UcuQeVDNq4sOW7xEVNd5IwW2K3Msih3vQE= +SHA256 (Pkgfile) = 4d2c31432a6ab2b7a42ea598e913f45ee22ddc15d7f1ba53d95ccf30896c884b SHA256 (.footprint) = d464c6eb14ad58ab166c901d6c1a6f66a010f3e934f3b1645a9cd20d24663b4b -SHA256 (dovecot-2.3.0.tar.gz) = de60cb470d025e4dd0f8e8fbbb4b9316dfd4930eb949d307330669ffbeaf8581 -SHA256 (CVE-2017-15132.patch) = ddbfdb187e1e763aa10364e57ed82bd37d264d66ed01559a7dbdeccb9f41e91f -SHA256 (CVE-2017-15132-1.patch) = 480980136322c3361ab334346218504397668df49d66afef0bca70b7e4d40fae +SHA256 (dovecot-2.3.0.1.tar.gz) = ab772b3e214683aba347203c9391295552255c4d69afb324c7b8c8fc5ad6f153 SHA256 (dovecot-config.patch) = a6f09e637f1ac15368d2d18736dc353e4a188959c5940dedd5306b689156e91c SHA256 (dovecot) = ead06d36290cca8be6be350f2c05edf53a4e9ce8aec5d5d663b1162ae96c17c7 diff --git a/dovecot/CVE-2017-15132-1.patch b/dovecot/CVE-2017-15132-1.patch deleted file mode 100644 index b1d8b4923..000000000 --- a/dovecot/CVE-2017-15132-1.patch +++ /dev/null @@ -1,57 +0,0 @@ -From a9b135760aea6d1790d447d351c56b78889dac22 Mon Sep 17 00:00:00 2001 -From: Aki Tuomi <aki.tuomi(a)dovecot.fi> -Date: Fri, 26 Jan 2018 10:55:54 +0200 -Subject: [PATCH] lib-auth: Remove request after abort - -Otherwise the request will still stay in hash table -and get dereferenced when all requests are aborted -causing an attempt to access free'd memory. - -Found by Apollon Oikonomopoulos <apoikos(a)debian.org> - -Broken in 1a29ed2f96da1be22fa5a4d96c7583aa81b8b060 ---- - src/lib-auth/auth-client-request.c | 2 ++ - src/lib-auth/auth-server-connection.c | 7 +++++++ - src/lib-auth/auth-server-connection.h | 2 ++ - 3 files changed, 11 insertions(+) - -diff --git a/src/lib-auth/auth-client-request.c b/src/lib-auth/auth-client-request.c -index 046f7c307d..f6d0290a13 100644 ---- a/src/lib-auth/auth-client-request.c -+++ b/src/lib-auth/auth-client-request.c -@@ -186,6 +186,8 @@ void auth_client_request_abort(struct auth_client_request **_request) - - auth_client_send_cancel(request->conn->client, request->id); - call_callback(request, AUTH_REQUEST_STATUS_ABORT, NULL, NULL); -+ /* remove the request */ -+ auth_server_connection_remove_request(request->conn, request->id); - pool_unref(&request->pool); - } - -diff --git a/src/lib-auth/auth-server-connection.c b/src/lib-auth/auth-server-connection.c -index 9d65450fb3..7eea061cad 100644 ---- a/src/lib-auth/auth-server-connection.c -+++ b/src/lib-auth/auth-server-connection.c -@@ -483,3 +483,10 @@ auth_server_connection_add_request(struct auth_server_connection *conn, - hash_table_insert(conn->requests, POINTER_CAST(id), request); - return id; - } -+ -+void auth_server_connection_remove_request(struct auth_server_connection *conn, -+ unsigned int id) -+{ -+ i_assert(conn->handshake_received); -+ hash_table_remove(conn->requests, POINTER_CAST(id)); -+} -diff --git a/src/lib-auth/auth-server-connection.h b/src/lib-auth/auth-server-connection.h -index 179b5dbd4c..c2c533a41d 100644 ---- a/src/lib-auth/auth-server-connection.h -+++ b/src/lib-auth/auth-server-connection.h -@@ -40,4 +40,6 @@ void auth_server_connection_disconnect(struct auth_server_connection *conn, - unsigned int - auth_server_connection_add_request(struct auth_server_connection *conn, - struct auth_client_request *request); -+void auth_server_connection_remove_request(struct auth_server_connection *conn, -+ unsigned int id); - #endif diff --git a/dovecot/CVE-2017-15132.patch b/dovecot/CVE-2017-15132.patch deleted file mode 100644 index 6b147abef..000000000 --- a/dovecot/CVE-2017-15132.patch +++ /dev/null @@ -1,28 +0,0 @@ -From 1a29ed2f96da1be22fa5a4d96c7583aa81b8b060 Mon Sep 17 00:00:00 2001 -From: Timo Sirainen <timo.sirainen(a)dovecot.fi> -Date: Mon, 18 Dec 2017 16:50:51 +0200 -Subject: [PATCH] lib-auth: Fix memory leak in auth_client_request_abort() - -This caused memory leaks when authentication was aborted. For example -with IMAP: - -a AUTHENTICATE PLAIN -* - -Broken by 9137c55411aa39d41c1e705ddc34d5bd26c65021 ---- - src/lib-auth/auth-client-request.c | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/src/lib-auth/auth-client-request.c b/src/lib-auth/auth-client-request.c -index 480fb42b30..046f7c307d 100644 ---- a/src/lib-auth/auth-client-request.c -+++ b/src/lib-auth/auth-client-request.c -@@ -186,6 +186,7 @@ void auth_client_request_abort(struct auth_client_request **_request) - - auth_client_send_cancel(request->conn->client, request->id); - call_callback(request, AUTH_REQUEST_STATUS_ABORT, NULL, NULL); -+ pool_unref(&request->pool); - } - - unsigned int auth_client_request_get_id(struct auth_client_request *request) diff --git a/dovecot/Pkgfile b/dovecot/Pkgfile index a9f4f109e..4c0b42b99 100644 --- a/dovecot/Pkgfile +++ b/dovecot/Pkgfile @@ -4,18 +4,13 @@ # Depends on: zlib bzip2 openssl libcap name=dovecot -version=2.3.0 -release=3 +version=2.3.0.1 +release=1 source=(https://dovecot.org/releases/2.3/$name-$version.tar.gz - CVE-2017-15132.patch CVE-2017-15132-1.patch dovecot-config.patch dovecot) build () { - cd $name-ce-$version - - patch -p1 -i $SRC/CVE-2017-15132.patch - patch -p1 -i $SRC/CVE-2017-15132-1.patch - patch -p1 -i $SRC/$name-config.patch + cd $name-$version ./configure --prefix=/usr \ --libexecdir=/usr/lib \

1 0

ports/contrib (3.3): [notify] libcdio: 0.94 -> 2.0.0 CVE-2017-18201 Closes FS#1600
by crux＠crux.nu 01 Mar '18

01 Mar '18

commit 0b850e6535e9a4a29169e4be7db29cc8356aa0bc Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Thu Mar 1 23:06:40 2018 +1100 [notify] libcdio: 0.94 -> 2.0.0 CVE-2017-18201 Closes FS#1600 diff --git a/libcdio/.footprint b/libcdio/.footprint index 93cf7b54..bb286a17 100644 --- a/libcdio/.footprint +++ b/libcdio/.footprint @@ -56,14 +56,14 @@ drwxr-xr-x root/root usr/include/cdio/ drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libcdio++.a -rwxr-xr-x root/root usr/lib/libcdio++.la -lrwxrwxrwx root/root usr/lib/libcdio++.so -> libcdio++.so.0.0.2 -lrwxrwxrwx root/root usr/lib/libcdio++.so.0 -> libcdio++.so.0.0.2 --rwxr-xr-x root/root usr/lib/libcdio++.so.0.0.2 +lrwxrwxrwx root/root usr/lib/libcdio++.so -> libcdio++.so.1.0.0 +lrwxrwxrwx root/root usr/lib/libcdio++.so.1 -> libcdio++.so.1.0.0 +-rwxr-xr-x root/root usr/lib/libcdio++.so.1.0.0 -rw-r--r-- root/root usr/lib/libcdio.a -rwxr-xr-x root/root usr/lib/libcdio.la -lrwxrwxrwx root/root usr/lib/libcdio.so -> libcdio.so.16.0.0 -lrwxrwxrwx root/root usr/lib/libcdio.so.16 -> libcdio.so.16.0.0 --rwxr-xr-x root/root usr/lib/libcdio.so.16.0.0 +lrwxrwxrwx root/root usr/lib/libcdio.so -> libcdio.so.18.0.0 +lrwxrwxrwx root/root usr/lib/libcdio.so.18 -> libcdio.so.18.0.0 +-rwxr-xr-x root/root usr/lib/libcdio.so.18.0.0 -rw-r--r-- root/root usr/lib/libiso9660++.a -rwxr-xr-x root/root usr/lib/libiso9660++.la lrwxrwxrwx root/root usr/lib/libiso9660++.so -> libiso9660++.so.0.0.0 @@ -71,9 +71,9 @@ lrwxrwxrwx root/root usr/lib/libiso9660++.so.0 -> libiso9660++.so.0.0.0 -rwxr-xr-x root/root usr/lib/libiso9660++.so.0.0.0 -rw-r--r-- root/root usr/lib/libiso9660.a -rwxr-xr-x root/root usr/lib/libiso9660.la -lrwxrwxrwx root/root usr/lib/libiso9660.so -> libiso9660.so.10.0.0 -lrwxrwxrwx root/root usr/lib/libiso9660.so.10 -> libiso9660.so.10.0.0 --rwxr-xr-x root/root usr/lib/libiso9660.so.10.0.0 +lrwxrwxrwx root/root usr/lib/libiso9660.so -> libiso9660.so.11.0.0 +lrwxrwxrwx root/root usr/lib/libiso9660.so.11 -> libiso9660.so.11.0.0 +-rwxr-xr-x root/root usr/lib/libiso9660.so.11.0.0 -rw-r--r-- root/root usr/lib/libudf.a -rwxr-xr-x root/root usr/lib/libudf.la lrwxrwxrwx root/root usr/lib/libudf.so -> libudf.so.0.0.0 diff --git a/libcdio/.md5sum b/libcdio/.md5sum index a48ec28d..c6a9fd2b 100644 --- a/libcdio/.md5sum +++ b/libcdio/.md5sum @@ -1,2 +1 @@ -5a7f50209c03d5919d5b932f07871af7 libcdio-0.83-linking.patch -d8734266a20fbc2605a97b701b838ab6 libcdio-0.94.tar.gz +5beb1f68b9c812ee47c58072daf3be17 libcdio-2.0.0.tar.bz2 diff --git a/libcdio/.signature b/libcdio/.signature index 7460485c..48e295ad 100644 --- a/libcdio/.signature +++ b/libcdio/.signature @@ -1,6 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF348q411V+leF4eXuZvWOsl3Ok1d7b22Qme8dGZnafyIPhEC6Grd6ZdmsKJUKWGg8d8H6v5W8ziXAtvJ7wICe7gc= -SHA256 (Pkgfile) = 21726ec1037bb9d4660fcd5466e9e8e45d7ad20388e9012c50ce5dd583b922ab -SHA256 (.footprint) = a354132bdb7be191b8c897e1bbed81dbc6d2711aba6a4bae8e2b26c4c710c64b -SHA256 (libcdio-0.94.tar.gz) = 96e2c903f866ae96f9f5b9048fa32db0921464a2286f5b586c0f02699710025a -SHA256 (libcdio-0.83-linking.patch) = d88186b2a11726fe5ef10853e0245996b55793552b14230d1f7ba5ee3c54f3ed +RWSagIOpLGJF37T+3i7hbUym/YmmpAP+M+1xeP/Y4YkoQEjzRGt0XabqB3qACS8YmoqzMW46fzGMLkDzTDObAq7fIJyJzyarVAM= +SHA256 (Pkgfile) = 6ddb4d71fddadb00ab8fed54fdfbc6a1193158cb05d57446a4da0835abe4d01a +SHA256 (.footprint) = f2e092aa140d5cc06e550e1674b96f73c16a293fa621c0b84ff61b76e02152e7 +SHA256 (libcdio-2.0.0.tar.bz2) = cd0da052a0e149e2526c41c5ac37b4865deb5c1cffe6faed18850154dbbd284b diff --git a/libcdio/Pkgfile b/libcdio/Pkgfile index 80df6e47..d330a72c 100644 --- a/libcdio/Pkgfile +++ b/libcdio/Pkgfile @@ -1,20 +1,16 @@ # Description: A library for CD-ROM and CD image access. # URL: http://www.gnu.org/software/libcdio/ # Maintainer: Danny Rawlins, crux at romster dot me -# Packager: Tim Biermann, tim_biermann at web dot de # Depends on: libcddb ncurses name=libcdio -version=0.94 +version=2.0.0 release=1 -source=(https://ftp.gnu.org/gnu/$name/$name-$version.tar.gz - libcdio-0.83-linking.patch) +source=(https://ftp.gnu.org/gnu/$name/$name-$version.tar.bz2) build() { cd $name-$version - patch -p 1 -i $SRC/libcdio-0.83-linking.patch - sed -i '/AM_INIT_AUTOMAKE/s/subdir-objects//' configure.ac autoreconf -fi ./configure \ diff --git a/libcdio/libcdio-0.83-linking.patch b/libcdio/libcdio-0.83-linking.patch deleted file mode 100644 index 84a0746b..00000000 --- a/libcdio/libcdio-0.83-linking.patch +++ /dev/null @@ -1,22 +0,0 @@ -diff -Naur libcdio-0.83-orig/example/C++/OO/Makefile.in libcdio-0.83/example/C++/OO/Makefile.in ---- libcdio-0.83-orig/example/C++/OO/Makefile.in 2011-10-27 18:02:31.000000000 +1000 -+++ libcdio-0.83/example/C++/OO/Makefile.in 2012-02-18 11:10:07.369277231 +1000 -@@ -315,15 +315,15 @@ - - isofile2_SOURCES = isofile2.cpp - isofile2_LDADD = $(LIBISO9660PP_LIBS) $(LIBISO9660_LIBS) \ -- $(LIBCDIOPP_LIBS) $(LTLIBICONV) -+ $(LIBCDIOPP_LIBS) $(LIBCDIO_LIBS) $(LTLIBICONV) - - isolist_SOURCES = isolist.cpp - isolist_LDADD = $(LIBISO9660PP_LIBS) $(LIBISO9660_LIBS) \ -- $(LIBCDIOPP_LIBS) $(LTLIBICONV) -+ $(LIBCDIOPP_LIBS) $(LIBCDIO_LIBS) $(LTLIBICONV) - - iso4_SOURCES = iso4.cpp - iso4_LDADD = $(LIBISO9660PP_LIBS) $(LIBISO9660_LIBS) \ -- $(LIBCDIOPP_LIBS) $(LTLIBICONV) -+ $(LIBCDIOPP_LIBS) $(LIBCDIO_LIBS) $(LTLIBICONV) - - mmc1_SOURCES = mmc1.cpp - mmc1_DEPENDENCIES = $(LIBCDIO_DEPS)

1 0

ports/opt (3.3): [notify] dovecot: update to 2.3.0.1, closes FS#1599
by crux＠crux.nu 01 Mar '18

01 Mar '18

commit b927b2f2d7680a3241d70b6c70f1ec8602169831 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Mar 1 09:57:59 2018 +0100 [notify] dovecot: update to 2.3.0.1, closes FS#1599 security fix, see https://dovecot.org/list/dovecot-news/2018-February/000371.html diff --git a/dovecot/.md5sum b/dovecot/.md5sum index 3b4936f51..21943f3b4 100644 --- a/dovecot/.md5sum +++ b/dovecot/.md5sum @@ -1,5 +1,3 @@ -a1a5efc13766e3b2d0a154e9716f0f7a CVE-2017-15132-1.patch -f043e0bb2773cd38f74ada8c164524a6 CVE-2017-15132.patch ec342928dd97131f82dba41546741b5f dovecot -a8802617ddf68972f5f97bd8677e5856 dovecot-2.3.0.tar.gz +865d6ad94c98ac3289fa06a77b1c014e dovecot-2.3.0.1.tar.gz 1cc42484b5515bddf47edcf26b288b6b dovecot-config.patch diff --git a/dovecot/.signature b/dovecot/.signature index c9707c0a1..a7f0a14ea 100644 --- a/dovecot/.signature +++ b/dovecot/.signature @@ -1,9 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/SkROei+JVsseDKn6SIUNsjxW4JVhAKiDa6r4HZW5ka8HbQjpy6OBAAyHGpg/+/NM5m9pchHJcjlYyFH2k1VXQs= -SHA256 (Pkgfile) = f325affa0506d8e0a7f7ac40e81503af99fa2ee54a3a8c38a76205de6e8e396b +RWSE3ohX2g5d/d5N12tWoNTQhb7I2Fr15CI5nf6EiZ2gY+6Rhbz6ryRonaZ1C0T02UcuQeVDNq4sOW7xEVNd5IwW2K3Msih3vQE= +SHA256 (Pkgfile) = 4d2c31432a6ab2b7a42ea598e913f45ee22ddc15d7f1ba53d95ccf30896c884b SHA256 (.footprint) = d464c6eb14ad58ab166c901d6c1a6f66a010f3e934f3b1645a9cd20d24663b4b -SHA256 (dovecot-2.3.0.tar.gz) = de60cb470d025e4dd0f8e8fbbb4b9316dfd4930eb949d307330669ffbeaf8581 -SHA256 (CVE-2017-15132.patch) = ddbfdb187e1e763aa10364e57ed82bd37d264d66ed01559a7dbdeccb9f41e91f -SHA256 (CVE-2017-15132-1.patch) = 480980136322c3361ab334346218504397668df49d66afef0bca70b7e4d40fae +SHA256 (dovecot-2.3.0.1.tar.gz) = ab772b3e214683aba347203c9391295552255c4d69afb324c7b8c8fc5ad6f153 SHA256 (dovecot-config.patch) = a6f09e637f1ac15368d2d18736dc353e4a188959c5940dedd5306b689156e91c SHA256 (dovecot) = ead06d36290cca8be6be350f2c05edf53a4e9ce8aec5d5d663b1162ae96c17c7 diff --git a/dovecot/CVE-2017-15132-1.patch b/dovecot/CVE-2017-15132-1.patch deleted file mode 100644 index b1d8b4923..000000000 --- a/dovecot/CVE-2017-15132-1.patch +++ /dev/null @@ -1,57 +0,0 @@ -From a9b135760aea6d1790d447d351c56b78889dac22 Mon Sep 17 00:00:00 2001 -From: Aki Tuomi <aki.tuomi(a)dovecot.fi> -Date: Fri, 26 Jan 2018 10:55:54 +0200 -Subject: [PATCH] lib-auth: Remove request after abort - -Otherwise the request will still stay in hash table -and get dereferenced when all requests are aborted -causing an attempt to access free'd memory. - -Found by Apollon Oikonomopoulos <apoikos(a)debian.org> - -Broken in 1a29ed2f96da1be22fa5a4d96c7583aa81b8b060 ---- - src/lib-auth/auth-client-request.c | 2 ++ - src/lib-auth/auth-server-connection.c | 7 +++++++ - src/lib-auth/auth-server-connection.h | 2 ++ - 3 files changed, 11 insertions(+) - -diff --git a/src/lib-auth/auth-client-request.c b/src/lib-auth/auth-client-request.c -index 046f7c307d..f6d0290a13 100644 ---- a/src/lib-auth/auth-client-request.c -+++ b/src/lib-auth/auth-client-request.c -@@ -186,6 +186,8 @@ void auth_client_request_abort(struct auth_client_request **_request) - - auth_client_send_cancel(request->conn->client, request->id); - call_callback(request, AUTH_REQUEST_STATUS_ABORT, NULL, NULL); -+ /* remove the request */ -+ auth_server_connection_remove_request(request->conn, request->id); - pool_unref(&request->pool); - } - -diff --git a/src/lib-auth/auth-server-connection.c b/src/lib-auth/auth-server-connection.c -index 9d65450fb3..7eea061cad 100644 ---- a/src/lib-auth/auth-server-connection.c -+++ b/src/lib-auth/auth-server-connection.c -@@ -483,3 +483,10 @@ auth_server_connection_add_request(struct auth_server_connection *conn, - hash_table_insert(conn->requests, POINTER_CAST(id), request); - return id; - } -+ -+void auth_server_connection_remove_request(struct auth_server_connection *conn, -+ unsigned int id) -+{ -+ i_assert(conn->handshake_received); -+ hash_table_remove(conn->requests, POINTER_CAST(id)); -+} -diff --git a/src/lib-auth/auth-server-connection.h b/src/lib-auth/auth-server-connection.h -index 179b5dbd4c..c2c533a41d 100644 ---- a/src/lib-auth/auth-server-connection.h -+++ b/src/lib-auth/auth-server-connection.h -@@ -40,4 +40,6 @@ void auth_server_connection_disconnect(struct auth_server_connection *conn, - unsigned int - auth_server_connection_add_request(struct auth_server_connection *conn, - struct auth_client_request *request); -+void auth_server_connection_remove_request(struct auth_server_connection *conn, -+ unsigned int id); - #endif diff --git a/dovecot/CVE-2017-15132.patch b/dovecot/CVE-2017-15132.patch deleted file mode 100644 index 6b147abef..000000000 --- a/dovecot/CVE-2017-15132.patch +++ /dev/null @@ -1,28 +0,0 @@ -From 1a29ed2f96da1be22fa5a4d96c7583aa81b8b060 Mon Sep 17 00:00:00 2001 -From: Timo Sirainen <timo.sirainen(a)dovecot.fi> -Date: Mon, 18 Dec 2017 16:50:51 +0200 -Subject: [PATCH] lib-auth: Fix memory leak in auth_client_request_abort() - -This caused memory leaks when authentication was aborted. For example -with IMAP: - -a AUTHENTICATE PLAIN -* - -Broken by 9137c55411aa39d41c1e705ddc34d5bd26c65021 ---- - src/lib-auth/auth-client-request.c | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/src/lib-auth/auth-client-request.c b/src/lib-auth/auth-client-request.c -index 480fb42b30..046f7c307d 100644 ---- a/src/lib-auth/auth-client-request.c -+++ b/src/lib-auth/auth-client-request.c -@@ -186,6 +186,7 @@ void auth_client_request_abort(struct auth_client_request **_request) - - auth_client_send_cancel(request->conn->client, request->id); - call_callback(request, AUTH_REQUEST_STATUS_ABORT, NULL, NULL); -+ pool_unref(&request->pool); - } - - unsigned int auth_client_request_get_id(struct auth_client_request *request) diff --git a/dovecot/Pkgfile b/dovecot/Pkgfile index a9f4f109e..4c0b42b99 100644 --- a/dovecot/Pkgfile +++ b/dovecot/Pkgfile @@ -4,18 +4,13 @@ # Depends on: zlib bzip2 openssl libcap name=dovecot -version=2.3.0 -release=3 +version=2.3.0.1 +release=1 source=(https://dovecot.org/releases/2.3/$name-$version.tar.gz - CVE-2017-15132.patch CVE-2017-15132-1.patch dovecot-config.patch dovecot) build () { - cd $name-ce-$version - - patch -p1 -i $SRC/CVE-2017-15132.patch - patch -p1 -i $SRC/CVE-2017-15132-1.patch - patch -p1 -i $SRC/$name-config.patch + cd $name-$version ./configure --prefix=/usr \ --libexecdir=/usr/lib \

1 0