September 2018 - CRUX - lists.crux.nu

ports/opt (3.4): [notify] libsoup: 2.62.2 -> 2.64.0 removed dependency krb5, new dependency libpsl
by crux＠crux.nu 08 Sep '18

08 Sep '18

commit f0b45bc394c7be208eaa343d24649306e6e8d5cc Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Sun Sep 9 01:24:20 2018 +1000 [notify] libsoup: 2.62.2 -> 2.64.0 removed dependency krb5, new dependency libpsl diff --git a/libsoup/.signature b/libsoup/.signature index 96dfd4dc7..c3c92fb9d 100644 --- a/libsoup/.signature +++ b/libsoup/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/UhK8fa7BE9sHD0sEGOypxgnLVLXKTj8GgiOLgCv0CvN+eJZDGxhEGOoL8guvTW8v/vGi/OEge01Cvvm/NzzUAQ= -SHA256 (Pkgfile) = 09c25bfe3ce192bc6fbdf84865c0c98a19c2215676adf1081081d7a0022b343b +RWSE3ohX2g5d/QLojcwdRpYuatIRMRoGL0KLLr7w9P+TBz0KazIJE6ODOJY7Jz58SaXtZj0fWrtjsGF9/YOMKbh8ekQ/L/0qAQQ= +SHA256 (Pkgfile) = 64a878d678bec20ab1e1ea126e8e4c1a3b5cb3bcdf57e0d7783ec3c0b36af17f SHA256 (.footprint) = 36558b032373841d40eda9c8c73801e04e227620bb086011eb67081970124c7c -SHA256 (libsoup-2.62.2.tar.xz) = 9e536fe3da60b25d2c63addb84a9d5072d00b0d8b8cbeabc629a6bcd63f879b6 +SHA256 (libsoup-2.64.0.tar.xz) = d95bc9602c97ec805d80e5ddf75605665c4c4d6b2c56893c416e707ef578e727 diff --git a/libsoup/Pkgfile b/libsoup/Pkgfile index 8dbbfb0b2..1c69ff104 100644 --- a/libsoup/Pkgfile +++ b/libsoup/Pkgfile @@ -1,11 +1,11 @@ # Description: HTTP library implementation in C. # URL: https://wiki.gnome.org/action/show/Projects/libsoup # Maintainer: Danny Rawlins, crux at romster dot me -# Depends on: glib-networking gobject-introspection krb5 libxml2 +# Depends on: glib-networking libpsl libxml2 # Optional: vala name=libsoup -version=2.62.2 +version=2.64.0 release=1 source=(https://ftp.gnome.org/pub/gnome/sources/$name/${version%.*}/$name-$… @@ -19,7 +19,10 @@ build() { VALA='--enable-vala=no' fi - ./configure --prefix=/usr $VALA + ./configure $VALA \ + --prefix=/usr \ + --disable-gssapi + make make DESTDIR=$PKG install

1 0

ports/core (3.4): [notify] curl: updated to 7.61.1. Fix for CVE-2018-14618
by crux＠crux.nu 05 Sep '18

05 Sep '18

commit 8fefc328fc29d1643d497dd0b0b5e582d341128b Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Wed Sep 5 21:53:50 2018 +0200 [notify] curl: updated to 7.61.1. Fix for CVE-2018-14618 diff --git a/curl/.signature b/curl/.signature index aecb2b42..e10e012d 100644 --- a/curl/.signature +++ b/curl/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqi3s40coBO30bKNndDMUXkz0VmOJB4u3iu9/M6RP8wnH4RSz1eJKdiaws6jKywswddK8hao1W+inne7S+5ZSUgQ= -SHA256 (Pkgfile) = f6a5fa4fecf54130209e420aab79f6330e296deccf1ac77625eea68e9458b20e +RWRJc1FUaeVeqiYCtN3B+oLSMYoH8T7FAEDMFnpFpAH9PuDitJ9Gtyd4U3yEmU9/HOuXLCJBvypzGI98HranTnrL9c9pBHv+FQg= +SHA256 (Pkgfile) = 36b939604d2278962b8b4ddcc25d8b93ff4a7eabd0abc94c9ab19c3c5fe2e340 SHA256 (.footprint) = 90b5b2c43afeebb4290f9e3e02cce89c5134d989c4224d0e37b800dec441dc4b -SHA256 (curl-7.61.0.tar.xz) = ef6e55192d04713673b4409ccbcb4cb6cd723137d6e10ca45b0c593a454e1720 +SHA256 (curl-7.61.1.tar.xz) = 3d5913d6a39bd22e68e34dff697fd6e4c3c81563f580c76fca2009315cd81891 diff --git a/curl/Pkgfile b/curl/Pkgfile index 881523fd..8a7fa82e 100644 --- a/curl/Pkgfile +++ b/curl/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl, zlib name=curl -version=7.61.0 +version=7.61.1 release=1 source=(http://curl.haxx.se/download/$name-$version.tar.xz)

1 0

ports/core (3.4): [notify] libarchive: update to 3.3.3
by crux＠crux.nu 04 Sep '18

04 Sep '18

commit 1522e5dd854b2dec09c830b727fc76426a78a379 Author: Juergen Daubert <jue(a)jue.li> Date: Tue Sep 4 18:42:44 2018 +0200 [notify] libarchive: update to 3.3.3 includes security fixes, see https://www.cvedetails.com/vulnerability-list/vendor_id-12872/product_id-26… Note ---- to use the new version of libarchive rebuild core/pkgutils prt-get update -fr pkgutils diff --git a/libarchive/.footprint b/libarchive/.footprint index 5ac6902f..1c88dfb8 100644 --- a/libarchive/.footprint +++ b/libarchive/.footprint @@ -9,9 +9,9 @@ drwxr-xr-x root/root usr/include/ drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libarchive.a -rwxr-xr-x root/root usr/lib/libarchive.la -lrwxrwxrwx root/root usr/lib/libarchive.so -> libarchive.so.13.3.2 -lrwxrwxrwx root/root usr/lib/libarchive.so.13 -> libarchive.so.13.3.2 --rwxr-xr-x root/root usr/lib/libarchive.so.13.3.2 +lrwxrwxrwx root/root usr/lib/libarchive.so -> libarchive.so.13.3.3 +lrwxrwxrwx root/root usr/lib/libarchive.so.13 -> libarchive.so.13.3.3 +-rwxr-xr-x root/root usr/lib/libarchive.so.13.3.3 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libarchive.pc drwxr-xr-x root/root usr/share/ diff --git a/libarchive/.signature b/libarchive/.signature index 3a9ccc04..92055c4d 100644 --- a/libarchive/.signature +++ b/libarchive/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqovVfgRmnm4RBvHMLjxeq9j/f80JLfYsnn7sd32gQvA3qT5SG1lP8cNMcZ4TXZhRbeH/Tp221I0uueE1saS7SwI= -SHA256 (Pkgfile) = 285ee8e055799be0f54bce7086ce240a9d7e593a4476fe5ad9472c33f49758ef -SHA256 (.footprint) = f9b52dc3e6b29e0744100f97f19a3dbcc25ad1e861c9e702878a3b537d59a548 -SHA256 (libarchive-3.3.2.tar.gz) = ed2dbd6954792b2c054ccf8ec4b330a54b85904a80cef477a1c74643ddafa0ce +RWRJc1FUaeVeqohkDc5wkhri/9q/no5CA/dFeILdmk1UawvgjKmk1lA0eW+Uwis7PTu6zppLewE6NLQRJDJluOY+ctOMnmqGHQw= +SHA256 (Pkgfile) = 0d9c7a28bdcab59e3042c5de235940b67e9dd0943dfaa8b4085089f7cec7fa2c +SHA256 (.footprint) = cc20e7d228c38d1c2570b8fc9df5663e0ffe737865ff06368720ccbfa7afc9ee +SHA256 (libarchive-3.3.3.tar.gz) = ba7eb1781c9fbbae178c4c6bad1c6eb08edab9a1496c64833d1715d022b30e2e diff --git a/libarchive/Pkgfile b/libarchive/Pkgfile index 86f787c8..c71d5dd8 100644 --- a/libarchive/Pkgfile +++ b/libarchive/Pkgfile @@ -4,14 +4,14 @@ # Depends on: bzip2 xz zlib acl lzo name=libarchive -version=3.3.2 +version=3.3.3 release=1 source=(http://www.libarchive.org/downloads/$name-$version.tar.gz) build() { cd $name-$version - # We're passing --without-xml2, --without-expatto and --without-nettle + # We're passing --without-xml2, --without-expat and --without-nettle # to avoid linking to libraries which are only available in opt. # XML support is only needed for the xar format which we can live without. @@ -19,7 +19,8 @@ build() { --without-xml2 \ --without-expat \ --without-nettle \ - --without-openssl + --without-openssl \ + --without-zstd make make DESTDIR=$PKG install

1 0