May 2018 - CRUX - lists.crux.nu

[ANN] CRUX 3.4-rc2 available for testing!
by Matt Housh 08 May '18

08 May '18

Greetings, The CRUX team is pleased to announce the availability of a second release candidate for the upcoming CRUX 3.4. Please note that this is a release candidate, NOT the final release. Please test it if you have a chance and report any problems you find to us! Important details about the upcoming release can be found here: https://crux.nu/Wiki/TODO34 The ISO itself can be found here: https://crux.ninja/crux/crux-3.4-rc2.iso https://crux.ninja/crux/crux-3.4-rc2.md5 Enjoy! Cheers, Matt (for the CRUX team)

2 1

ports/contrib (3.3): [notify] gst-libav: depend on ffmpeg3 FS#1652
by crux＠crux.nu 07 May '18

07 May '18

commit c9868a3ced348219a7fc992ae57ad03acb1bbf87 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Mon May 7 21:38:13 2018 +1000 [notify] gst-libav: depend on ffmpeg3 FS#1652 diff --git a/gst-libav/.signature b/gst-libav/.signature index 5078291d..882565ea 100644 --- a/gst-libav/.signature +++ b/gst-libav/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF369Zhz9h/NoajCLoeE4aFr4ZRjajqfpebsRS7g4wEx4O9gSCN7t7imjqqzHRVgDUKXtdu8v3WeXOhacV7GesYAw= -SHA256 (Pkgfile) = 17f6e3fa18a86a16ff4b6c2d7506a89a2e0cd1454a5620ff6eed51ad11d0de22 +RWSagIOpLGJF30zxxHhph/TW7qj1eH5qwBlHhUqn3pSVbmZt0x376Crnueq7S2S+IYvBkLH1xdEg9gSr6m+Ib1R1wm3K6z11mAY= +SHA256 (Pkgfile) = cf542f2dd58dd596219010bd7530b19762ce7e25383431fed826ecb7eb8c5a5d SHA256 (.footprint) = d74c92d6ce61aa73f319dc0142b76031fc1eed2bf3609fbe282054e9dc1e06de SHA256 (gst-libav-1.14.0.tar.xz) = fb134b4d3e054746ef8b922ff157b0c7903d1fdd910708a45add66954da7ef89 diff --git a/gst-libav/Pkgfile b/gst-libav/Pkgfile index 3f594509..639a50fe 100644 --- a/gst-libav/Pkgfile +++ b/gst-libav/Pkgfile @@ -1,16 +1,17 @@ # Description: Gstreamer libav Plugin. # URL: https://gstreamer.freedesktop.org/modules/gst-libav.html # Maintainer: Danny Rawlins, crux at romster dot me -# Depends on: ffmpeg gst-plugins-base +# Depends on: ffmpeg3 gst-plugins-base name=gst-libav version=1.14.0 -release=1 +release=2 source=(https://gstreamer.freedesktop.org/src/$name/$name-$version.tar.xz) build() { cd $name-$version + PKG_CONFIG_PATH="/usr/lib/ffmpeg3/pkgconfig:$PKG_CONFIG_PATH" \ ./configure \ --prefix=/usr \ --with-system-libav

1 0

ports/core (3.4): [notify] wget: updated to 1.19.5. Fix for CVE-2018-0494
by crux＠crux.nu 06 May '18

06 May '18

commit ea1d062c1397a48779323f7e6c1d8209e7f9419b Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Sun May 6 20:19:15 2018 +0200 [notify] wget: updated to 1.19.5. Fix for CVE-2018-0494 diff --git a/wget/.md5sum b/wget/.md5sum index af03279f..fc0a988c 100644 --- a/wget/.md5sum +++ b/wget/.md5sum @@ -1,2 +1,2 @@ -50d3c7b607ef4addccc21eae7ba35430 wget-1.19.4.tar.lz +4ee511011a15f4207bea8b2993c343ee wget-1.19.5.tar.lz fa717c9970a09e8ee1775a93e51fb694 wgetrc diff --git a/wget/.signature b/wget/.signature index dc30eb5b..9e1ca412 100644 --- a/wget/.signature +++ b/wget/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqisBn2CrUskCPxseHwkaJYWIEiWo6QjOk+eT2M5MZ4AbmzbMoN0WtzpPpzF6XmA8xOwUYoDYfphQYaWNHBJsFw0= -SHA256 (Pkgfile) = a9daf11aae75a82917f795105c6907c784a9bb90dd40cf1b57318d9b154d575a +RWRJc1FUaeVeqndMZYy5P2ilEioAIWc03mt9w89gQbMcyI3VZsA5ZtuJuRnqrIzqewuyB/fRP+UZSx3GmdDji0jInZAQB7grxw4= +SHA256 (Pkgfile) = 707d5910c5c30cb8b54b4aef37baf53c26b083404ce6bc0e086ff148dde57dd7 SHA256 (.footprint) = 6580430c889fd6e30229e19a6a2f07f73b6b0934f354b7302c174b1a166d064b -SHA256 (wget-1.19.4.tar.lz) = 2fc0ffb965a8dc8f1e4a89cbe834c0ae7b9c22f559ebafc84c7874ad1866559a +SHA256 (wget-1.19.5.tar.lz) = 29fbe6f3d5408430c572a63fe32bd43d5860f32691173dfd84edc06869edca75 SHA256 (wgetrc) = d40a2188590d15e49daa2686b08b76b9725a2fa24f776dd1819fb473d7962a69 diff --git a/wget/Pkgfile b/wget/Pkgfile index 1856fbfc..481563ba 100644 --- a/wget/Pkgfile +++ b/wget/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl name=wget -version=1.19.4 +version=1.19.5 release=1 source=(http://ftp.gnu.org/gnu/$name/$name-$version.tar.lz \ wgetrc)

1 0

ports/core (3.3): [notify] wget: updated to 1.19.5. Fix for CVE-2018-0494
by crux＠crux.nu 06 May '18

06 May '18

commit ea1d062c1397a48779323f7e6c1d8209e7f9419b Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Sun May 6 20:19:15 2018 +0200 [notify] wget: updated to 1.19.5. Fix for CVE-2018-0494 diff --git a/wget/.md5sum b/wget/.md5sum index af03279f..fc0a988c 100644 --- a/wget/.md5sum +++ b/wget/.md5sum @@ -1,2 +1,2 @@ -50d3c7b607ef4addccc21eae7ba35430 wget-1.19.4.tar.lz +4ee511011a15f4207bea8b2993c343ee wget-1.19.5.tar.lz fa717c9970a09e8ee1775a93e51fb694 wgetrc diff --git a/wget/.signature b/wget/.signature index dc30eb5b..9e1ca412 100644 --- a/wget/.signature +++ b/wget/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqisBn2CrUskCPxseHwkaJYWIEiWo6QjOk+eT2M5MZ4AbmzbMoN0WtzpPpzF6XmA8xOwUYoDYfphQYaWNHBJsFw0= -SHA256 (Pkgfile) = a9daf11aae75a82917f795105c6907c784a9bb90dd40cf1b57318d9b154d575a +RWRJc1FUaeVeqndMZYy5P2ilEioAIWc03mt9w89gQbMcyI3VZsA5ZtuJuRnqrIzqewuyB/fRP+UZSx3GmdDji0jInZAQB7grxw4= +SHA256 (Pkgfile) = 707d5910c5c30cb8b54b4aef37baf53c26b083404ce6bc0e086ff148dde57dd7 SHA256 (.footprint) = 6580430c889fd6e30229e19a6a2f07f73b6b0934f354b7302c174b1a166d064b -SHA256 (wget-1.19.4.tar.lz) = 2fc0ffb965a8dc8f1e4a89cbe834c0ae7b9c22f559ebafc84c7874ad1866559a +SHA256 (wget-1.19.5.tar.lz) = 29fbe6f3d5408430c572a63fe32bd43d5860f32691173dfd84edc06869edca75 SHA256 (wgetrc) = d40a2188590d15e49daa2686b08b76b9725a2fa24f776dd1819fb473d7962a69 diff --git a/wget/Pkgfile b/wget/Pkgfile index 1856fbfc..481563ba 100644 --- a/wget/Pkgfile +++ b/wget/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl name=wget -version=1.19.4 +version=1.19.5 release=1 source=(http://ftp.gnu.org/gnu/$name/$name-$version.tar.lz \ wgetrc)

1 0

ports/opt (3.4): [notify] python: update to 2.7.15, closes FS#1655
by crux＠crux.nu 05 May '18

05 May '18

commit f7e71aa7eb2ec6c091397a3bfc9d4d0d749d2b0a Author: Juergen Daubert <jue(a)jue.li> Date: Sat May 5 15:14:09 2018 +0200 [notify] python: update to 2.7.15, closes FS#1655 several security fixes, see https://github.com/python/cpython/blob/2.7/Misc/NEWS.d/2.7.15rc1.rst diff --git a/python/.footprint b/python/.footprint index bb48ad2c5..83c9aa625 100644 --- a/python/.footprint +++ b/python/.footprint @@ -1036,8 +1036,8 @@ drwxr-xr-x root/root usr/lib/python2.7/ensurepip/ -rw-r--r-- root/root usr/lib/python2.7/ensurepip/__main__.pyc -rw-r--r-- root/root usr/lib/python2.7/ensurepip/__main__.pyo drwxr-xr-x root/root usr/lib/python2.7/ensurepip/_bundled/ --rw-r--r-- root/root usr/lib/python2.7/ensurepip/_bundled/pip-9.0.1-py2.py3-none-any.whl --rw-r--r-- root/root usr/lib/python2.7/ensurepip/_bundled/setuptools-28.8.0-py2.py3-none-any.whl +-rw-r--r-- root/root usr/lib/python2.7/ensurepip/_bundled/pip-9.0.3-py2.py3-none-any.whl +-rw-r--r-- root/root usr/lib/python2.7/ensurepip/_bundled/setuptools-39.0.1-py2.py3-none-any.whl -rw-r--r-- root/root usr/lib/python2.7/ensurepip/_uninstall.py -rw-r--r-- root/root usr/lib/python2.7/ensurepip/_uninstall.pyc -rw-r--r-- root/root usr/lib/python2.7/ensurepip/_uninstall.pyo @@ -1440,7 +1440,7 @@ drwxr-xr-x root/root usr/lib/python2.7/json/ -rw-r--r-- root/root usr/lib/python2.7/keyword.pyc -rw-r--r-- root/root usr/lib/python2.7/keyword.pyo drwxr-xr-x root/root usr/lib/python2.7/lib-dynload/ --rw-r--r-- root/root usr/lib/python2.7/lib-dynload/Python-2.7.14-py2.7.egg-info +-rw-r--r-- root/root usr/lib/python2.7/lib-dynload/Python-2.7.15-py2.7.egg-info -rwxr-xr-x root/root usr/lib/python2.7/lib-dynload/_bisect.so -rwxr-xr-x root/root usr/lib/python2.7/lib-dynload/_bsddb.so -rwxr-xr-x root/root usr/lib/python2.7/lib-dynload/_codecs_cn.so @@ -1614,9 +1614,9 @@ drwxr-xr-x root/root usr/lib/python2.7/lib-tk/test/test_ttk/ -rw-r--r-- root/root usr/lib/python2.7/lib-tk/turtle.pyo drwxr-xr-x root/root usr/lib/python2.7/lib2to3/ -rw-r--r-- root/root usr/lib/python2.7/lib2to3/Grammar.txt --rw-r--r-- root/root usr/lib/python2.7/lib2to3/Grammar2.7.14.final.0.pickle +-rw-r--r-- root/root usr/lib/python2.7/lib2to3/Grammar2.7.15.final.0.pickle -rw-r--r-- root/root usr/lib/python2.7/lib2to3/PatternGrammar.txt --rw-r--r-- root/root usr/lib/python2.7/lib2to3/PatternGrammar2.7.14.final.0.pickle +-rw-r--r-- root/root usr/lib/python2.7/lib2to3/PatternGrammar2.7.15.final.0.pickle -rw-r--r-- root/root usr/lib/python2.7/lib2to3/__init__.py -rw-r--r-- root/root usr/lib/python2.7/lib2to3/__init__.pyc -rw-r--r-- root/root usr/lib/python2.7/lib2to3/__init__.pyo @@ -2540,7 +2540,6 @@ drwxr-xr-x root/root usr/lib/python2.7/test/imghdrdata/ -rw-r--r-- root/root usr/lib/python2.7/test/seq_tests.pyc -rw-r--r-- root/root usr/lib/python2.7/test/seq_tests.pyo -rw-r--r-- root/root usr/lib/python2.7/test/sgml_input.html --rw-r--r-- root/root usr/lib/python2.7/test/sha256.pem -rw-r--r-- root/root usr/lib/python2.7/test/sortperf.py -rw-r--r-- root/root usr/lib/python2.7/test/sortperf.pyc -rw-r--r-- root/root usr/lib/python2.7/test/sortperf.pyo @@ -3828,6 +3827,7 @@ drwxr-xr-x root/root usr/lib/python2.7/test/tracedmodules/ -rw-r--r-- root/root usr/lib/python2.7/test/win_console_handler.pyo -rw-r--r-- root/root usr/lib/python2.7/test/wrongcert.pem drwxr-xr-x root/root usr/lib/python2.7/test/xmltestdata/ +-rw-r--r-- root/root usr/lib/python2.7/test/xmltestdata/expat224_utf8_bug.xml -rw-r--r-- root/root usr/lib/python2.7/test/xmltestdata/simple-ns.xml -rw-r--r-- root/root usr/lib/python2.7/test/xmltestdata/simple.xml -rw-r--r-- root/root usr/lib/python2.7/test/xmltestdata/test.xml diff --git a/python/.md5sum b/python/.md5sum index 2522becf5..ce21c0a0b 100644 --- a/python/.md5sum +++ b/python/.md5sum @@ -1,3 +1,2 @@ -ff653e9e002ca0e3d4a828988e52edd3 CVE-2018-1000030.patch -1f6db41ad91d9eb0a6f0c769b8613c5b Python-2.7.14.tar.xz +a80ae3cc478460b922242f43a1b4094d Python-2.7.15.tar.xz 387d5f6d00d2be01ecb87216cac0f88c pyconfig.h diff --git a/python/.signature b/python/.signature index 660b6eece..699fd46d7 100644 --- a/python/.signature +++ b/python/.signature @@ -1,7 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/boQipBgLcfxZlqFZR09X30s/Z5MGSa539QoTYA6+7gBtc/kPgMKpF6e8opocX6wAQjcf9trsFzX4XMdoJaRFwY= -SHA256 (Pkgfile) = 68fdadc03201267d440d69f8cd2e02a028887cf0b274d02ca17c52095aa8c663 -SHA256 (.footprint) = cad0b763c2deaad518b7c81ea32fbbe025df03c1548002336ef818ca9f4cf7ce -SHA256 (Python-2.7.14.tar.xz) = 71ffb26e09e78650e424929b2b457b9c912ac216576e6bd9e7d204ed03296a66 -SHA256 (CVE-2018-1000030.patch) = f7ff89ad24d529532b4dfa6bd601d8f7368c3ae3950dae539ecc11e5e09b3ecb +RWSE3ohX2g5d/QL9azCD8wrAyLYz7OIZz45ib254f7ONHFsMdZTkv/eshI8AxHtmbP0Nr59Mwf0D7Rm+UB866dHroOwADn7Vmgw= +SHA256 (Pkgfile) = cd669df4f421b7406cbca94fb69daf8128bdd018e2039c4ecec8724da3f709ea +SHA256 (.footprint) = 31c574d370b644955bc7d95e69f2b234ac56ecb5b4934bdeb27f99637137fcb9 +SHA256 (Python-2.7.15.tar.xz) = 22d9b1ac5b26135ad2b8c2901a9413537e08749a753356ee913c84dbd2df5574 SHA256 (pyconfig.h) = 081426cb9524c2e156a71bb035c25a67e44d389afc6f7e091bcf86a7f4e2002f diff --git a/python/CVE-2018-1000030.patch b/python/CVE-2018-1000030.patch deleted file mode 100644 index efec47684..000000000 --- a/python/CVE-2018-1000030.patch +++ /dev/null @@ -1,258 +0,0 @@ ---- a/Lib/test/test_file2k.py 2018-02-16 17:49:45.180147747 -0500 -+++ b/Lib/test/test_file2k.py 2018-02-16 17:51:06.870149602 -0500 -@@ -652,6 +652,33 @@ class FileThreadingTests(unittest.TestCa - self.f.writelines('') - self._test_close_open_io(io_func) - -+ def test_iteration_torture(self): -+ # bpo-31530 -+ with open(self.filename, "wb") as fp: -+ for i in xrange(2**20): -+ fp.write(b"0"*50 + b"\n") -+ with open(self.filename, "rb") as f: -+ def it(): -+ for l in f: -+ pass -+ self._run_workers(it, 10) -+ -+ def test_iteration_seek(self): -+ # bpo-31530: Crash when concurrently seek and iterate over a file. -+ with open(self.filename, "wb") as fp: -+ for i in xrange(10000): -+ fp.write(b"0"*50 + b"\n") -+ with open(self.filename, "rb") as f: -+ it = iter([1] + [0]*10) # one thread reads, others seek -+ def iterate(): -+ if next(it): -+ for l in f: -+ pass -+ else: -+ for i in xrange(100): -+ f.seek(i*100, 0) -+ self._run_workers(iterate, 10) -+ - - @unittest.skipUnless(os.name == 'posix', 'test requires a posix system.') - class TestFileSignalEINTR(unittest.TestCase): ---- a/Objects/fileobject.c 2018-02-16 17:49:45.304147750 -0500 -+++ b/Objects/fileobject.c 2018-02-16 17:51:06.872149603 -0500 -@@ -430,7 +430,7 @@ close_the_file(PyFileObject *f) - if (f->ob_refcnt > 0) { - PyErr_SetString(PyExc_IOError, - "close() called during concurrent " -- "operation on the same file object."); -+ "operation on the same file object"); - } else { - /* This should not happen unless someone is - * carelessly playing with the PyFileObject -@@ -438,7 +438,7 @@ close_the_file(PyFileObject *f) - * pointer. */ - PyErr_SetString(PyExc_SystemError, - "PyFileObject locking error in " -- "destructor (refcnt <= 0 at close)."); -+ "destructor (refcnt <= 0 at close)"); - } - return NULL; - } -@@ -604,7 +604,12 @@ err_iterbuffered(void) - return NULL; - } - --static void drop_readahead(PyFileObject *); -+static void -+drop_file_readahead(PyFileObject *f) -+{ -+ PyMem_FREE(f->f_buf); -+ f->f_buf = NULL; -+} - - /* Methods */ - -@@ -627,7 +632,7 @@ file_dealloc(PyFileObject *f) - Py_XDECREF(f->f_mode); - Py_XDECREF(f->f_encoding); - Py_XDECREF(f->f_errors); -- drop_readahead(f); -+ drop_file_readahead(f); - Py_TYPE(f)->tp_free((PyObject *)f); - } - -@@ -762,7 +767,7 @@ file_seek(PyFileObject *f, PyObject *arg - - if (f->f_fp == NULL) - return err_closed(); -- drop_readahead(f); -+ drop_file_readahead(f); - whence = 0; - if (!PyArg_ParseTuple(args, "O|i:seek", &offobj, &whence)) - return NULL; -@@ -2221,12 +2226,16 @@ static PyGetSetDef file_getsetlist[] = { - {0}, - }; - -+typedef struct { -+ char *buf, *bufptr, *bufend; -+} readaheadbuffer; -+ - static void --drop_readahead(PyFileObject *f) -+drop_readaheadbuffer(readaheadbuffer *rab) - { -- if (f->f_buf != NULL) { -- PyMem_Free(f->f_buf); -- f->f_buf = NULL; -+ if (rab->buf != NULL) { -+ PyMem_FREE(rab->buf); -+ rab->buf = NULL; - } - } - -@@ -2234,35 +2243,34 @@ drop_readahead(PyFileObject *f) - (unless at EOF) and no more than bufsize. Returns negative value on - error, will set MemoryError if bufsize bytes cannot be allocated. */ - static int --readahead(PyFileObject *f, Py_ssize_t bufsize) -+readahead(PyFileObject *f, readaheadbuffer *rab, Py_ssize_t bufsize) - { - Py_ssize_t chunksize; - -- if (f->f_buf != NULL) { -- if( (f->f_bufend - f->f_bufptr) >= 1) -+ if (rab->buf != NULL) { -+ if ((rab->bufend - rab->bufptr) >= 1) - return 0; - else -- drop_readahead(f); -+ drop_readaheadbuffer(rab); - } -- if ((f->f_buf = (char *)PyMem_Malloc(bufsize)) == NULL) { -+ if ((rab->buf = PyMem_MALLOC(bufsize)) == NULL) { - PyErr_NoMemory(); - return -1; - } - FILE_BEGIN_ALLOW_THREADS(f) - errno = 0; -- chunksize = Py_UniversalNewlineFread( -- f->f_buf, bufsize, f->f_fp, (PyObject *)f); -+ chunksize = Py_UniversalNewlineFread(rab->buf, bufsize, f->f_fp, (PyObject *)f); - FILE_END_ALLOW_THREADS(f) - if (chunksize == 0) { - if (ferror(f->f_fp)) { - PyErr_SetFromErrno(PyExc_IOError); - clearerr(f->f_fp); -- drop_readahead(f); -+ drop_readaheadbuffer(rab); - return -1; - } - } -- f->f_bufptr = f->f_buf; -- f->f_bufend = f->f_buf + chunksize; -+ rab->bufptr = rab->buf; -+ rab->bufend = rab->buf + chunksize; - return 0; - } - -@@ -2272,45 +2280,43 @@ readahead(PyFileObject *f, Py_ssize_t bu - logarithmic buffer growth to about 50 even when reading a 1gb line. */ - - static PyStringObject * --readahead_get_line_skip(PyFileObject *f, Py_ssize_t skip, Py_ssize_t bufsize) -+readahead_get_line_skip(PyFileObject *f, readaheadbuffer *rab, Py_ssize_t skip, Py_ssize_t bufsize) - { - PyStringObject* s; - char *bufptr; - char *buf; - Py_ssize_t len; - -- if (f->f_buf == NULL) -- if (readahead(f, bufsize) < 0) -+ if (rab->buf == NULL) -+ if (readahead(f, rab, bufsize) < 0) - return NULL; - -- len = f->f_bufend - f->f_bufptr; -+ len = rab->bufend - rab->bufptr; - if (len == 0) -- return (PyStringObject *) -- PyString_FromStringAndSize(NULL, skip); -- bufptr = (char *)memchr(f->f_bufptr, '\n', len); -+ return (PyStringObject *)PyString_FromStringAndSize(NULL, skip); -+ bufptr = (char *)memchr(rab->bufptr, '\n', len); - if (bufptr != NULL) { - bufptr++; /* Count the '\n' */ -- len = bufptr - f->f_bufptr; -- s = (PyStringObject *) -- PyString_FromStringAndSize(NULL, skip + len); -+ len = bufptr - rab->bufptr; -+ s = (PyStringObject *)PyString_FromStringAndSize(NULL, skip + len); - if (s == NULL) - return NULL; -- memcpy(PyString_AS_STRING(s) + skip, f->f_bufptr, len); -- f->f_bufptr = bufptr; -- if (bufptr == f->f_bufend) -- drop_readahead(f); -+ memcpy(PyString_AS_STRING(s) + skip, rab->bufptr, len); -+ rab->bufptr = bufptr; -+ if (bufptr == rab->bufend) -+ drop_readaheadbuffer(rab); - } else { -- bufptr = f->f_bufptr; -- buf = f->f_buf; -- f->f_buf = NULL; /* Force new readahead buffer */ -+ bufptr = rab->bufptr; -+ buf = rab->buf; -+ rab->buf = NULL; /* Force new readahead buffer */ - assert(len <= PY_SSIZE_T_MAX - skip); -- s = readahead_get_line_skip(f, skip + len, bufsize + (bufsize>>2)); -+ s = readahead_get_line_skip(f, rab, skip + len, bufsize + (bufsize>>2)); - if (s == NULL) { -- PyMem_Free(buf); -+ PyMem_FREE(buf); - return NULL; - } - memcpy(PyString_AS_STRING(s) + skip, bufptr, len); -- PyMem_Free(buf); -+ PyMem_FREE(buf); - } - return s; - } -@@ -2328,7 +2334,30 @@ file_iternext(PyFileObject *f) - if (!f->readable) - return err_mode("reading"); - -- l = readahead_get_line_skip(f, 0, READAHEAD_BUFSIZE); -+ { -+ /* -+ Multiple threads can enter this method while the GIL is released -+ during file read and wreak havoc on the file object's readahead -+ buffer. To avoid dealing with cross-thread coordination issues, we -+ cache the file buffer state locally and only set it back on the file -+ object when we're done. -+ */ -+ readaheadbuffer rab = {f->f_buf, f->f_bufptr, f->f_bufend}; -+ f->f_buf = NULL; -+ l = readahead_get_line_skip(f, &rab, 0, READAHEAD_BUFSIZE); -+ /* -+ Make sure the file's internal read buffer is cleared out. This will -+ only do anything if some other thread interleaved with us during -+ readahead. We want to drop any changeling buffer, so we don't leak -+ memory. We may lose data, but that's what you get for reading the same -+ file object in multiple threads. -+ */ -+ drop_file_readahead(f); -+ f->f_buf = rab.buf; -+ f->f_bufptr = rab.bufptr; -+ f->f_bufend = rab.bufend; -+ } -+ - if (l == NULL || PyString_GET_SIZE(l) == 0) { - Py_XDECREF(l); - return NULL; -@@ -2692,7 +2721,7 @@ int PyObject_AsFileDescriptor(PyObject * - } - else { - PyErr_SetString(PyExc_TypeError, -- "argument must be an int, or have a fileno() method."); -+ "argument must be an int, or have a fileno() method"); - return -1; - } diff --git a/python/Pkgfile b/python/Pkgfile index 3120ef84a..f3784af0f 100644 --- a/python/Pkgfile +++ b/python/Pkgfile @@ -4,18 +4,13 @@ # Depends on: db gdbm openssl bzip2 zlib sqlite3 name=python -version=2.7.14 -release=2 +version=2.7.15 +release=1 source=(http://www.python.org/ftp/$name/$version/Python-$version.tar.xz \ - CVE-2018-1000030.patch pyconfig.h) build () { cd Python-$version - - # fix for CVE-2018-1000030 - # see https://bugs.python.org/issue31530 - patch -p1 -i $SRC/CVE-2018-1000030.patch # set OPT to the python default without -O3 # our CFLAGS are used as well

1 0

ports/opt (3.3): [notify] python: update to 2.7.15, closes FS#1655
by crux＠crux.nu 05 May '18

05 May '18

commit f7e71aa7eb2ec6c091397a3bfc9d4d0d749d2b0a Author: Juergen Daubert <jue(a)jue.li> Date: Sat May 5 15:14:09 2018 +0200 [notify] python: update to 2.7.15, closes FS#1655 several security fixes, see https://github.com/python/cpython/blob/2.7/Misc/NEWS.d/2.7.15rc1.rst diff --git a/python/.footprint b/python/.footprint index bb48ad2c5..83c9aa625 100644 --- a/python/.footprint +++ b/python/.footprint @@ -1036,8 +1036,8 @@ drwxr-xr-x root/root usr/lib/python2.7/ensurepip/ -rw-r--r-- root/root usr/lib/python2.7/ensurepip/__main__.pyc -rw-r--r-- root/root usr/lib/python2.7/ensurepip/__main__.pyo drwxr-xr-x root/root usr/lib/python2.7/ensurepip/_bundled/ --rw-r--r-- root/root usr/lib/python2.7/ensurepip/_bundled/pip-9.0.1-py2.py3-none-any.whl --rw-r--r-- root/root usr/lib/python2.7/ensurepip/_bundled/setuptools-28.8.0-py2.py3-none-any.whl +-rw-r--r-- root/root usr/lib/python2.7/ensurepip/_bundled/pip-9.0.3-py2.py3-none-any.whl +-rw-r--r-- root/root usr/lib/python2.7/ensurepip/_bundled/setuptools-39.0.1-py2.py3-none-any.whl -rw-r--r-- root/root usr/lib/python2.7/ensurepip/_uninstall.py -rw-r--r-- root/root usr/lib/python2.7/ensurepip/_uninstall.pyc -rw-r--r-- root/root usr/lib/python2.7/ensurepip/_uninstall.pyo @@ -1440,7 +1440,7 @@ drwxr-xr-x root/root usr/lib/python2.7/json/ -rw-r--r-- root/root usr/lib/python2.7/keyword.pyc -rw-r--r-- root/root usr/lib/python2.7/keyword.pyo drwxr-xr-x root/root usr/lib/python2.7/lib-dynload/ --rw-r--r-- root/root usr/lib/python2.7/lib-dynload/Python-2.7.14-py2.7.egg-info +-rw-r--r-- root/root usr/lib/python2.7/lib-dynload/Python-2.7.15-py2.7.egg-info -rwxr-xr-x root/root usr/lib/python2.7/lib-dynload/_bisect.so -rwxr-xr-x root/root usr/lib/python2.7/lib-dynload/_bsddb.so -rwxr-xr-x root/root usr/lib/python2.7/lib-dynload/_codecs_cn.so @@ -1614,9 +1614,9 @@ drwxr-xr-x root/root usr/lib/python2.7/lib-tk/test/test_ttk/ -rw-r--r-- root/root usr/lib/python2.7/lib-tk/turtle.pyo drwxr-xr-x root/root usr/lib/python2.7/lib2to3/ -rw-r--r-- root/root usr/lib/python2.7/lib2to3/Grammar.txt --rw-r--r-- root/root usr/lib/python2.7/lib2to3/Grammar2.7.14.final.0.pickle +-rw-r--r-- root/root usr/lib/python2.7/lib2to3/Grammar2.7.15.final.0.pickle -rw-r--r-- root/root usr/lib/python2.7/lib2to3/PatternGrammar.txt --rw-r--r-- root/root usr/lib/python2.7/lib2to3/PatternGrammar2.7.14.final.0.pickle +-rw-r--r-- root/root usr/lib/python2.7/lib2to3/PatternGrammar2.7.15.final.0.pickle -rw-r--r-- root/root usr/lib/python2.7/lib2to3/__init__.py -rw-r--r-- root/root usr/lib/python2.7/lib2to3/__init__.pyc -rw-r--r-- root/root usr/lib/python2.7/lib2to3/__init__.pyo @@ -2540,7 +2540,6 @@ drwxr-xr-x root/root usr/lib/python2.7/test/imghdrdata/ -rw-r--r-- root/root usr/lib/python2.7/test/seq_tests.pyc -rw-r--r-- root/root usr/lib/python2.7/test/seq_tests.pyo -rw-r--r-- root/root usr/lib/python2.7/test/sgml_input.html --rw-r--r-- root/root usr/lib/python2.7/test/sha256.pem -rw-r--r-- root/root usr/lib/python2.7/test/sortperf.py -rw-r--r-- root/root usr/lib/python2.7/test/sortperf.pyc -rw-r--r-- root/root usr/lib/python2.7/test/sortperf.pyo @@ -3828,6 +3827,7 @@ drwxr-xr-x root/root usr/lib/python2.7/test/tracedmodules/ -rw-r--r-- root/root usr/lib/python2.7/test/win_console_handler.pyo -rw-r--r-- root/root usr/lib/python2.7/test/wrongcert.pem drwxr-xr-x root/root usr/lib/python2.7/test/xmltestdata/ +-rw-r--r-- root/root usr/lib/python2.7/test/xmltestdata/expat224_utf8_bug.xml -rw-r--r-- root/root usr/lib/python2.7/test/xmltestdata/simple-ns.xml -rw-r--r-- root/root usr/lib/python2.7/test/xmltestdata/simple.xml -rw-r--r-- root/root usr/lib/python2.7/test/xmltestdata/test.xml diff --git a/python/.md5sum b/python/.md5sum index 2522becf5..ce21c0a0b 100644 --- a/python/.md5sum +++ b/python/.md5sum @@ -1,3 +1,2 @@ -ff653e9e002ca0e3d4a828988e52edd3 CVE-2018-1000030.patch -1f6db41ad91d9eb0a6f0c769b8613c5b Python-2.7.14.tar.xz +a80ae3cc478460b922242f43a1b4094d Python-2.7.15.tar.xz 387d5f6d00d2be01ecb87216cac0f88c pyconfig.h diff --git a/python/.signature b/python/.signature index 660b6eece..699fd46d7 100644 --- a/python/.signature +++ b/python/.signature @@ -1,7 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/boQipBgLcfxZlqFZR09X30s/Z5MGSa539QoTYA6+7gBtc/kPgMKpF6e8opocX6wAQjcf9trsFzX4XMdoJaRFwY= -SHA256 (Pkgfile) = 68fdadc03201267d440d69f8cd2e02a028887cf0b274d02ca17c52095aa8c663 -SHA256 (.footprint) = cad0b763c2deaad518b7c81ea32fbbe025df03c1548002336ef818ca9f4cf7ce -SHA256 (Python-2.7.14.tar.xz) = 71ffb26e09e78650e424929b2b457b9c912ac216576e6bd9e7d204ed03296a66 -SHA256 (CVE-2018-1000030.patch) = f7ff89ad24d529532b4dfa6bd601d8f7368c3ae3950dae539ecc11e5e09b3ecb +RWSE3ohX2g5d/QL9azCD8wrAyLYz7OIZz45ib254f7ONHFsMdZTkv/eshI8AxHtmbP0Nr59Mwf0D7Rm+UB866dHroOwADn7Vmgw= +SHA256 (Pkgfile) = cd669df4f421b7406cbca94fb69daf8128bdd018e2039c4ecec8724da3f709ea +SHA256 (.footprint) = 31c574d370b644955bc7d95e69f2b234ac56ecb5b4934bdeb27f99637137fcb9 +SHA256 (Python-2.7.15.tar.xz) = 22d9b1ac5b26135ad2b8c2901a9413537e08749a753356ee913c84dbd2df5574 SHA256 (pyconfig.h) = 081426cb9524c2e156a71bb035c25a67e44d389afc6f7e091bcf86a7f4e2002f diff --git a/python/CVE-2018-1000030.patch b/python/CVE-2018-1000030.patch deleted file mode 100644 index efec47684..000000000 --- a/python/CVE-2018-1000030.patch +++ /dev/null @@ -1,258 +0,0 @@ ---- a/Lib/test/test_file2k.py 2018-02-16 17:49:45.180147747 -0500 -+++ b/Lib/test/test_file2k.py 2018-02-16 17:51:06.870149602 -0500 -@@ -652,6 +652,33 @@ class FileThreadingTests(unittest.TestCa - self.f.writelines('') - self._test_close_open_io(io_func) - -+ def test_iteration_torture(self): -+ # bpo-31530 -+ with open(self.filename, "wb") as fp: -+ for i in xrange(2**20): -+ fp.write(b"0"*50 + b"\n") -+ with open(self.filename, "rb") as f: -+ def it(): -+ for l in f: -+ pass -+ self._run_workers(it, 10) -+ -+ def test_iteration_seek(self): -+ # bpo-31530: Crash when concurrently seek and iterate over a file. -+ with open(self.filename, "wb") as fp: -+ for i in xrange(10000): -+ fp.write(b"0"*50 + b"\n") -+ with open(self.filename, "rb") as f: -+ it = iter([1] + [0]*10) # one thread reads, others seek -+ def iterate(): -+ if next(it): -+ for l in f: -+ pass -+ else: -+ for i in xrange(100): -+ f.seek(i*100, 0) -+ self._run_workers(iterate, 10) -+ - - @unittest.skipUnless(os.name == 'posix', 'test requires a posix system.') - class TestFileSignalEINTR(unittest.TestCase): ---- a/Objects/fileobject.c 2018-02-16 17:49:45.304147750 -0500 -+++ b/Objects/fileobject.c 2018-02-16 17:51:06.872149603 -0500 -@@ -430,7 +430,7 @@ close_the_file(PyFileObject *f) - if (f->ob_refcnt > 0) { - PyErr_SetString(PyExc_IOError, - "close() called during concurrent " -- "operation on the same file object."); -+ "operation on the same file object"); - } else { - /* This should not happen unless someone is - * carelessly playing with the PyFileObject -@@ -438,7 +438,7 @@ close_the_file(PyFileObject *f) - * pointer. */ - PyErr_SetString(PyExc_SystemError, - "PyFileObject locking error in " -- "destructor (refcnt <= 0 at close)."); -+ "destructor (refcnt <= 0 at close)"); - } - return NULL; - } -@@ -604,7 +604,12 @@ err_iterbuffered(void) - return NULL; - } - --static void drop_readahead(PyFileObject *); -+static void -+drop_file_readahead(PyFileObject *f) -+{ -+ PyMem_FREE(f->f_buf); -+ f->f_buf = NULL; -+} - - /* Methods */ - -@@ -627,7 +632,7 @@ file_dealloc(PyFileObject *f) - Py_XDECREF(f->f_mode); - Py_XDECREF(f->f_encoding); - Py_XDECREF(f->f_errors); -- drop_readahead(f); -+ drop_file_readahead(f); - Py_TYPE(f)->tp_free((PyObject *)f); - } - -@@ -762,7 +767,7 @@ file_seek(PyFileObject *f, PyObject *arg - - if (f->f_fp == NULL) - return err_closed(); -- drop_readahead(f); -+ drop_file_readahead(f); - whence = 0; - if (!PyArg_ParseTuple(args, "O|i:seek", &offobj, &whence)) - return NULL; -@@ -2221,12 +2226,16 @@ static PyGetSetDef file_getsetlist[] = { - {0}, - }; - -+typedef struct { -+ char *buf, *bufptr, *bufend; -+} readaheadbuffer; -+ - static void --drop_readahead(PyFileObject *f) -+drop_readaheadbuffer(readaheadbuffer *rab) - { -- if (f->f_buf != NULL) { -- PyMem_Free(f->f_buf); -- f->f_buf = NULL; -+ if (rab->buf != NULL) { -+ PyMem_FREE(rab->buf); -+ rab->buf = NULL; - } - } - -@@ -2234,35 +2243,34 @@ drop_readahead(PyFileObject *f) - (unless at EOF) and no more than bufsize. Returns negative value on - error, will set MemoryError if bufsize bytes cannot be allocated. */ - static int --readahead(PyFileObject *f, Py_ssize_t bufsize) -+readahead(PyFileObject *f, readaheadbuffer *rab, Py_ssize_t bufsize) - { - Py_ssize_t chunksize; - -- if (f->f_buf != NULL) { -- if( (f->f_bufend - f->f_bufptr) >= 1) -+ if (rab->buf != NULL) { -+ if ((rab->bufend - rab->bufptr) >= 1) - return 0; - else -- drop_readahead(f); -+ drop_readaheadbuffer(rab); - } -- if ((f->f_buf = (char *)PyMem_Malloc(bufsize)) == NULL) { -+ if ((rab->buf = PyMem_MALLOC(bufsize)) == NULL) { - PyErr_NoMemory(); - return -1; - } - FILE_BEGIN_ALLOW_THREADS(f) - errno = 0; -- chunksize = Py_UniversalNewlineFread( -- f->f_buf, bufsize, f->f_fp, (PyObject *)f); -+ chunksize = Py_UniversalNewlineFread(rab->buf, bufsize, f->f_fp, (PyObject *)f); - FILE_END_ALLOW_THREADS(f) - if (chunksize == 0) { - if (ferror(f->f_fp)) { - PyErr_SetFromErrno(PyExc_IOError); - clearerr(f->f_fp); -- drop_readahead(f); -+ drop_readaheadbuffer(rab); - return -1; - } - } -- f->f_bufptr = f->f_buf; -- f->f_bufend = f->f_buf + chunksize; -+ rab->bufptr = rab->buf; -+ rab->bufend = rab->buf + chunksize; - return 0; - } - -@@ -2272,45 +2280,43 @@ readahead(PyFileObject *f, Py_ssize_t bu - logarithmic buffer growth to about 50 even when reading a 1gb line. */ - - static PyStringObject * --readahead_get_line_skip(PyFileObject *f, Py_ssize_t skip, Py_ssize_t bufsize) -+readahead_get_line_skip(PyFileObject *f, readaheadbuffer *rab, Py_ssize_t skip, Py_ssize_t bufsize) - { - PyStringObject* s; - char *bufptr; - char *buf; - Py_ssize_t len; - -- if (f->f_buf == NULL) -- if (readahead(f, bufsize) < 0) -+ if (rab->buf == NULL) -+ if (readahead(f, rab, bufsize) < 0) - return NULL; - -- len = f->f_bufend - f->f_bufptr; -+ len = rab->bufend - rab->bufptr; - if (len == 0) -- return (PyStringObject *) -- PyString_FromStringAndSize(NULL, skip); -- bufptr = (char *)memchr(f->f_bufptr, '\n', len); -+ return (PyStringObject *)PyString_FromStringAndSize(NULL, skip); -+ bufptr = (char *)memchr(rab->bufptr, '\n', len); - if (bufptr != NULL) { - bufptr++; /* Count the '\n' */ -- len = bufptr - f->f_bufptr; -- s = (PyStringObject *) -- PyString_FromStringAndSize(NULL, skip + len); -+ len = bufptr - rab->bufptr; -+ s = (PyStringObject *)PyString_FromStringAndSize(NULL, skip + len); - if (s == NULL) - return NULL; -- memcpy(PyString_AS_STRING(s) + skip, f->f_bufptr, len); -- f->f_bufptr = bufptr; -- if (bufptr == f->f_bufend) -- drop_readahead(f); -+ memcpy(PyString_AS_STRING(s) + skip, rab->bufptr, len); -+ rab->bufptr = bufptr; -+ if (bufptr == rab->bufend) -+ drop_readaheadbuffer(rab); - } else { -- bufptr = f->f_bufptr; -- buf = f->f_buf; -- f->f_buf = NULL; /* Force new readahead buffer */ -+ bufptr = rab->bufptr; -+ buf = rab->buf; -+ rab->buf = NULL; /* Force new readahead buffer */ - assert(len <= PY_SSIZE_T_MAX - skip); -- s = readahead_get_line_skip(f, skip + len, bufsize + (bufsize>>2)); -+ s = readahead_get_line_skip(f, rab, skip + len, bufsize + (bufsize>>2)); - if (s == NULL) { -- PyMem_Free(buf); -+ PyMem_FREE(buf); - return NULL; - } - memcpy(PyString_AS_STRING(s) + skip, bufptr, len); -- PyMem_Free(buf); -+ PyMem_FREE(buf); - } - return s; - } -@@ -2328,7 +2334,30 @@ file_iternext(PyFileObject *f) - if (!f->readable) - return err_mode("reading"); - -- l = readahead_get_line_skip(f, 0, READAHEAD_BUFSIZE); -+ { -+ /* -+ Multiple threads can enter this method while the GIL is released -+ during file read and wreak havoc on the file object's readahead -+ buffer. To avoid dealing with cross-thread coordination issues, we -+ cache the file buffer state locally and only set it back on the file -+ object when we're done. -+ */ -+ readaheadbuffer rab = {f->f_buf, f->f_bufptr, f->f_bufend}; -+ f->f_buf = NULL; -+ l = readahead_get_line_skip(f, &rab, 0, READAHEAD_BUFSIZE); -+ /* -+ Make sure the file's internal read buffer is cleared out. This will -+ only do anything if some other thread interleaved with us during -+ readahead. We want to drop any changeling buffer, so we don't leak -+ memory. We may lose data, but that's what you get for reading the same -+ file object in multiple threads. -+ */ -+ drop_file_readahead(f); -+ f->f_buf = rab.buf; -+ f->f_bufptr = rab.bufptr; -+ f->f_bufend = rab.bufend; -+ } -+ - if (l == NULL || PyString_GET_SIZE(l) == 0) { - Py_XDECREF(l); - return NULL; -@@ -2692,7 +2721,7 @@ int PyObject_AsFileDescriptor(PyObject * - } - else { - PyErr_SetString(PyExc_TypeError, -- "argument must be an int, or have a fileno() method."); -+ "argument must be an int, or have a fileno() method"); - return -1; - } diff --git a/python/Pkgfile b/python/Pkgfile index 3120ef84a..f3784af0f 100644 --- a/python/Pkgfile +++ b/python/Pkgfile @@ -4,18 +4,13 @@ # Depends on: db gdbm openssl bzip2 zlib sqlite3 name=python -version=2.7.14 -release=2 +version=2.7.15 +release=1 source=(http://www.python.org/ftp/$name/$version/Python-$version.tar.xz \ - CVE-2018-1000030.patch pyconfig.h) build () { cd Python-$version - - # fix for CVE-2018-1000030 - # see https://bugs.python.org/issue31530 - patch -p1 -i $SRC/CVE-2018-1000030.patch # set OPT to the python default without -O3 # our CFLAGS are used as well

1 0

Re: KF5 - An install error message too difficult for me
by Fredrik Rinnestam 04 May '18

04 May '18

On Fri, May 04, 2018 at 09:58:23AM +0200, Giorgio Cittadini wrote: > Hi, alas, Fredrik: another problem! > > I advanced very much in the installation of plasma5 from KF5 repository ( > prt-get depinst frameworks-meta plasma-meta applications-meta > --install-scripts -is -if -im --ignore=cryfs). But suddenly, while > installing qt5-5.10.1-1, I'm stopped by a ERROR: Building > `/home/pkgmk/packages/qt5#5.10.1-1.pkg.tar.gz' failed. "prt-get: error > while install". No other indications, but I see that the problem lies in the > fact that there is a continuous "Write failed". These are the last rows: > > .......... > .......... > qt-everywhere-src-5.10.1/qtscxml/examples/scxml/calculator-qml/calculator-qml.qrc: > Write failed > qt-everywhere-src-5.10.1/qtscxml/examples/scxml/invoke-dynamic/invoke-dynamic.cpp: > Write failed > qt-everywhere-src-5.10.1/qtscxml/examples/scxml/invoke-dynamic/invoke-dynamic.pro: > Write failed > qt-everywhere-src-5.10.1/qtscxml/examples/scxml/invoke-dynamic/doc/images/invoke-dynamic.png: > Write failed > qt-everywhere-src-5.10.1/qtscxml/LICENSE.GPL3-EXCEPT: Write failed > > The same happens changing qt5-5.10.1-1 with qt5-5.10.0-1. > > Never happened before, and I don't understand what to do. Have you any idea? > Again thanks. Those errors seem very generic. Are you running out of disk space? qt is ~2.3GB uncompressed. Add objects and binaries to that during compile and im sure you go well over 3gb. How much free space do you have? > Giorgio Cittadini > > > On 04/05/2018 08:10, Fredrik Rinnestam wrote: > > On Fri, May 04, 2018 at 06:32:15AM +0200, Giorgio Cittadini wrote: > > > You were right! SOLVED through your suggestion. > > > > > > I knew that "six" is a Python 2 and 3 compatibility library providing > > > utility functions for smoothing over the differences between the Python > > > versions so to be able to write Python code compatible on both Python > > > versions. Anyhow, I couldn't understand which package was missing in my crux > > > installation, and - as sometimes happens - it was the most obvious. > > > > > > Many thanks. I hope not to encounter other problems (and so, not to disturb > > > you any more...). > > No worries. Glad you got it fixed. > > > Giorgio Cittadini > > > > > > > > > On 04/05/2018 00:01, Fredrik Rinnestam wrote: > > > > On Thu, May 03, 2018 at 10:29:09PM +0200, Giorgio Cittadini wrote: > > > > > While installing plasma 5 from tsaop in crux-3.4-rc2, I have been obliged to > > > > > halt by the following message: > > > > > > > > > > Traceback (most recent call last): > > > > > File "/usr/bin/gtkdoc-rebase", line 28, in <module> > > > > > from gtkdoc import common, config, rebase > > > > > File "/usr/share/gtk-doc/python/gtkdoc/common.py", line 31, in <module> > > > > > import six > > > > > ImportError: No module named six. > > > > > > > > > > As far as at this moment, the halt blocked install of networkmanager and > > > > > libnotify. I found similar messages while googling, but no clear indication > > > > > of its meaning. > > > > > > > > > > I would be grateful for an help about how to proceed. > > > > > Thanks. > > > > > > > > > You are missing either of > > > > python-six > > > > python3-six > > > > > > > > Dunno if its python 2 or 3 thats in use, but one or the other should > > > > solve the above error. > > > > > -- Fredrik Rinnestam

1 0

KF5 - An install error message too difficult for me
by Giorgio Cittadini 03 May '18

03 May '18

While installing plasma 5 from tsaop in crux-3.4-rc2, I have been obliged to halt by the following message: Traceback (most recent call last): File "/usr/bin/gtkdoc-rebase", line 28, in <module> from gtkdoc import common, config, rebase File "/usr/share/gtk-doc/python/gtkdoc/common.py", line 31, in <module> import six ImportError: No module named six. As far as at this moment, the halt blocked install of networkmanager and libnotify. I found similar messages while googling, but no clear indication of its meaning. I would be grateful for an help about how to proceed. Thanks.

2 1

ports/opt (3.4): [notify] freetype: updated to 2.9.1. Fixes CVE-2018-6942. Closes #FS1654
by crux＠crux.nu 03 May '18

03 May '18

commit b6019adad062d827dd5e13885184445f76849b6b Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu May 3 23:55:10 2018 +0200 [notify] freetype: updated to 2.9.1. Fixes CVE-2018-6942. Closes #FS1654 Advisory URL: https://nvd.nist.gov/vuln/detail/CVE-2018-6942 diff --git a/freetype/.footprint b/freetype/.footprint index c7d7f1395..5edb0dd26 100644 --- a/freetype/.footprint +++ b/freetype/.footprint @@ -1,6 +1,4 @@ drwxr-xr-x root/root usr/ -drwxr-xr-x root/root usr/bin/ --rwxr-xr-x root/root usr/bin/freetype-config drwxr-xr-x root/root usr/include/ drwxr-xr-x root/root usr/include/freetype2/ drwxr-xr-x root/root usr/include/freetype2/freetype/ @@ -57,14 +55,11 @@ drwxr-xr-x root/root usr/include/freetype2/freetype/config/ drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libfreetype.a -rwxr-xr-x root/root usr/lib/libfreetype.la -lrwxrwxrwx root/root usr/lib/libfreetype.so -> libfreetype.so.6.16.0 -lrwxrwxrwx root/root usr/lib/libfreetype.so.6 -> libfreetype.so.6.16.0 --rwxr-xr-x root/root usr/lib/libfreetype.so.6.16.0 +lrwxrwxrwx root/root usr/lib/libfreetype.so -> libfreetype.so.6.16.1 +lrwxrwxrwx root/root usr/lib/libfreetype.so.6 -> libfreetype.so.6.16.1 +-rwxr-xr-x root/root usr/lib/libfreetype.so.6.16.1 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/freetype2.pc drwxr-xr-x root/root usr/share/ drwxr-xr-x root/root usr/share/aclocal/ -rw-r--r-- root/root usr/share/aclocal/freetype2.m4 -drwxr-xr-x root/root usr/share/man/ -drwxr-xr-x root/root usr/share/man/man1/ --rw-r--r-- root/root usr/share/man/man1/freetype-config.1.gz diff --git a/freetype/.md5sum b/freetype/.md5sum index fa72720c8..552c00360 100644 --- a/freetype/.md5sum +++ b/freetype/.md5sum @@ -1 +1 @@ -513c403c110016fdc7e537216a642b1d freetype-2.9.tar.bz2 +60ef7d8160cd4bf8cb118ee9d65367ca freetype-2.9.1.tar.bz2 diff --git a/freetype/.signature b/freetype/.signature index 2fc716aaf..032aa0e3c 100644 --- a/freetype/.signature +++ b/freetype/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/b3hktn/BdjVFwD7jMn+sCVzaOtFrZoYKUWgqykgAdC+gjMeIkur0n3uwI8r8/tLp9uKdMHIx7dDrlbaYLLHtAY= -SHA256 (Pkgfile) = eeed712b06d696c513b8603e19eba9cd17a1f64643c470928b44a2489ba7610f -SHA256 (.footprint) = 93edabc23c1ccc2ebab56022b8f17c21537885fc55c9fe24be8e1c260fe99efd -SHA256 (freetype-2.9.tar.bz2) = e6ffba3c8cef93f557d1f767d7bc3dee860ac7a3aaff588a521e081bc36f4c8a +RWSE3ohX2g5d/Yc308aODwcAPn1gO9MoadwJmSpHjkL04L9Z3xXubIZ9w0oufFwlub1H+b7FTL0LhqDKaoSviEzbaYgR/EW5FAc= +SHA256 (Pkgfile) = 86cc3e4f4c59fd975218a01f9216138407bb50d6fecdb601765a92b05c39a467 +SHA256 (.footprint) = 9e450e330caeb4edda03d403270d47137a72cdeed398c48e5337e1d884a01019 +SHA256 (freetype-2.9.1.tar.bz2) = db8d87ea720ea9d5edc5388fc7a0497bb11ba9fe972245e0f7f4c7e8b1e1e84d diff --git a/freetype/Pkgfile b/freetype/Pkgfile index 56559a7b6..62f3e8c3f 100644 --- a/freetype/Pkgfile +++ b/freetype/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libpng name=freetype -version=2.9 +version=2.9.1 release=1 source=(http://download.savannah.gnu.org/releases/$name/$name-$version.tar.…

1 0

ports/opt (3.3): [notify] freetype: updated to 2.9.1. Fixes CVE-2018-6942. Closes #FS1654
by crux＠crux.nu 03 May '18

03 May '18

commit b6019adad062d827dd5e13885184445f76849b6b Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu May 3 23:55:10 2018 +0200 [notify] freetype: updated to 2.9.1. Fixes CVE-2018-6942. Closes #FS1654 Advisory URL: https://nvd.nist.gov/vuln/detail/CVE-2018-6942 diff --git a/freetype/.footprint b/freetype/.footprint index c7d7f1395..5edb0dd26 100644 --- a/freetype/.footprint +++ b/freetype/.footprint @@ -1,6 +1,4 @@ drwxr-xr-x root/root usr/ -drwxr-xr-x root/root usr/bin/ --rwxr-xr-x root/root usr/bin/freetype-config drwxr-xr-x root/root usr/include/ drwxr-xr-x root/root usr/include/freetype2/ drwxr-xr-x root/root usr/include/freetype2/freetype/ @@ -57,14 +55,11 @@ drwxr-xr-x root/root usr/include/freetype2/freetype/config/ drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libfreetype.a -rwxr-xr-x root/root usr/lib/libfreetype.la -lrwxrwxrwx root/root usr/lib/libfreetype.so -> libfreetype.so.6.16.0 -lrwxrwxrwx root/root usr/lib/libfreetype.so.6 -> libfreetype.so.6.16.0 --rwxr-xr-x root/root usr/lib/libfreetype.so.6.16.0 +lrwxrwxrwx root/root usr/lib/libfreetype.so -> libfreetype.so.6.16.1 +lrwxrwxrwx root/root usr/lib/libfreetype.so.6 -> libfreetype.so.6.16.1 +-rwxr-xr-x root/root usr/lib/libfreetype.so.6.16.1 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/freetype2.pc drwxr-xr-x root/root usr/share/ drwxr-xr-x root/root usr/share/aclocal/ -rw-r--r-- root/root usr/share/aclocal/freetype2.m4 -drwxr-xr-x root/root usr/share/man/ -drwxr-xr-x root/root usr/share/man/man1/ --rw-r--r-- root/root usr/share/man/man1/freetype-config.1.gz diff --git a/freetype/.md5sum b/freetype/.md5sum index fa72720c8..552c00360 100644 --- a/freetype/.md5sum +++ b/freetype/.md5sum @@ -1 +1 @@ -513c403c110016fdc7e537216a642b1d freetype-2.9.tar.bz2 +60ef7d8160cd4bf8cb118ee9d65367ca freetype-2.9.1.tar.bz2 diff --git a/freetype/.signature b/freetype/.signature index 2fc716aaf..032aa0e3c 100644 --- a/freetype/.signature +++ b/freetype/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/b3hktn/BdjVFwD7jMn+sCVzaOtFrZoYKUWgqykgAdC+gjMeIkur0n3uwI8r8/tLp9uKdMHIx7dDrlbaYLLHtAY= -SHA256 (Pkgfile) = eeed712b06d696c513b8603e19eba9cd17a1f64643c470928b44a2489ba7610f -SHA256 (.footprint) = 93edabc23c1ccc2ebab56022b8f17c21537885fc55c9fe24be8e1c260fe99efd -SHA256 (freetype-2.9.tar.bz2) = e6ffba3c8cef93f557d1f767d7bc3dee860ac7a3aaff588a521e081bc36f4c8a +RWSE3ohX2g5d/Yc308aODwcAPn1gO9MoadwJmSpHjkL04L9Z3xXubIZ9w0oufFwlub1H+b7FTL0LhqDKaoSviEzbaYgR/EW5FAc= +SHA256 (Pkgfile) = 86cc3e4f4c59fd975218a01f9216138407bb50d6fecdb601765a92b05c39a467 +SHA256 (.footprint) = 9e450e330caeb4edda03d403270d47137a72cdeed398c48e5337e1d884a01019 +SHA256 (freetype-2.9.1.tar.bz2) = db8d87ea720ea9d5edc5388fc7a0497bb11ba9fe972245e0f7f4c7e8b1e1e84d diff --git a/freetype/Pkgfile b/freetype/Pkgfile index 56559a7b6..62f3e8c3f 100644 --- a/freetype/Pkgfile +++ b/freetype/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libpng name=freetype -version=2.9 +version=2.9.1 release=1 source=(http://download.savannah.gnu.org/releases/$name/$name-$version.tar.…

1 0