October 2019 - CRUX - lists.crux.nu

ports/opt (3.5): [notify] unbound: update to 1.9.4
by crux＠crux.nu 03 Oct '19

03 Oct '19

commit fa4860ddab099125c2f8e7b2f46d2f5cf80fb822 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Oct 3 12:51:05 2019 +0200 [notify] unbound: update to 1.9.4 fix for CVE-2019-16866, see https://nlnetlabs.nl/projects/unbound/security-advisories/#vulnerability-in… diff --git a/unbound/.signature b/unbound/.signature index cb7780b92..226c4509c 100644 --- a/unbound/.signature +++ b/unbound/.signature @@ -1,8 +1,8 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/XjGPcv1XaHZzo97EStXuhw8+OB/bWwU/Zz8ixpfv5YdETdBGHKsVp3CWMmtHdJtoAOcLymkgQkc1SefjHn6Cg8= -SHA256 (Pkgfile) = 19cd6e4c93762bfaa5839a9598361a93a1c7c07ad612e14243a6a5273bd9f8e9 +RWSE3ohX2g5d/ZB4kSicLd36FPyYuANoeVxLTePy7DRSc+S1lsU3HPp80GzecRYZxxzR0eP2XMCRNuIFRjIIU4K61Cca+ffzfAQ= +SHA256 (Pkgfile) = fbd66377754b3946686dcf8fb1ff2ba7c0843fa8f83602900f5b316b76f36d39 SHA256 (.footprint) = 55dae6262dda05e002b80b843c0e57553a93a9e770d86630d104c04e3efaced7 -SHA256 (unbound-1.9.3.tar.gz) = 1b55dd9170e4bfb327fb644de7bbf7f0541701149dff3adf1b63ffa785f16dfa +SHA256 (unbound-1.9.4.tar.gz) = 3d3e25fb224025f0e732c7970e5676f53fd1764c16d6a01be073a13e42954bb0 SHA256 (unbound) = 54c94f1813c00c7faac51bde904b879b73d043e87c49cf8aff63de565368a095 SHA256 (README) = df6c339bdb1dcb173ec13cfdb37c28ea2d47a2700334aea3c503ef96f955f043 SHA256 (pre-install) = ec1d006e0ec4dca5b83fb0364ae2a591a9ffad7c41bac0c45f22f32a9d55f2c5 diff --git a/unbound/Pkgfile b/unbound/Pkgfile index d607ff13f..8a8051b74 100644 --- a/unbound/Pkgfile +++ b/unbound/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl expat name=unbound -version=1.9.3 +version=1.9.4 release=1 source=(https://unbound.net/downloads/$name-$version.tar.gz unbound

1 0

ports/opt (3.5): [notify] tcpdump: update to 4.9.3
by crux＠crux.nu 03 Oct '19

03 Oct '19

commit f2a835e799474f995853b3cd8006a88f56219de1 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Oct 3 11:33:26 2019 +0200 [notify] tcpdump: update to 4.9.3 several security fixes, see https://www.tcpdump.org/tcpdump-changes.txt diff --git a/tcpdump/.signature b/tcpdump/.signature index 1d5d2259e..877f6beea 100644 --- a/tcpdump/.signature +++ b/tcpdump/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/c8S8RzbTAnGrEdX8HYypZ0hCcMjhYN4ds6AMl2NvKdgmPdWYF9rR1vprZGrnHqFR/rMEVrRVjI8zDa7guxuiAE= -SHA256 (Pkgfile) = 9c4627d957fc182a08039443c35e50df538624897e4241417871a730e6c2ff2b +RWSE3ohX2g5d/TJsifJlBEh/nPb/7ZHQnuwmo9nfzRQuh72NnPAtRvnVxq9dSlILleAYp33Zh5uQ01oPH8g4IwqppHxRHGFKDQk= +SHA256 (Pkgfile) = f19dabb2d021dd06bed45c7ae452dc1c59720fe7f0e94df97ac86cd76959b1c6 SHA256 (.footprint) = 42b48f345c07d2a9409863f67dc1310e4d26b1f089309643dbea4e459f5094fb -SHA256 (tcpdump-4.9.2.tar.gz) = 798b3536a29832ce0cbb07fafb1ce5097c95e308a6f592d14052e1ef1505fe79 +SHA256 (tcpdump-4.9.3.tar.gz) = 2cd47cb3d460b6ff75f4a9940f594317ad456cfbf2bd2c8e5151e16559db6410 diff --git a/tcpdump/Pkgfile b/tcpdump/Pkgfile index 987e0238a..c930e4bd3 100644 --- a/tcpdump/Pkgfile +++ b/tcpdump/Pkgfile @@ -1,12 +1,12 @@ # Description: Network sniffer with command line interface -# URL: http://www.tcpdump.org +# URL: https://www.tcpdump.org # Maintainer: Juergen Daubert, jue at crux dot nu # Depends on: libpcap, openssl name=tcpdump -version=4.9.2 +version=4.9.3 release=1 -source=(http://www.tcpdump.org/release/$name-$version.tar.gz) +source=(https://www.tcpdump.org/release/$name-$version.tar.gz) build() { cd $name-$version

1 0

ports/opt (3.5): [notify] libpcap: update to 1.9.1
by crux＠crux.nu 03 Oct '19

03 Oct '19

commit 93005580bc5afd6cf221e723afacad735b6a03f7 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Oct 3 11:32:34 2019 +0200 [notify] libpcap: update to 1.9.1 includes several security fixes, see https://www.tcpdump.org/libpcap-changes.txt diff --git a/libpcap/.footprint b/libpcap/.footprint index c60b5fc17..d2bc07234 100644 --- a/libpcap/.footprint +++ b/libpcap/.footprint @@ -18,13 +18,14 @@ drwxr-xr-x root/root usr/include/pcap/ -rw-r--r-- root/root usr/include/pcap/pcap-inttypes.h -rw-r--r-- root/root usr/include/pcap/pcap.h -rw-r--r-- root/root usr/include/pcap/sll.h +-rw-r--r-- root/root usr/include/pcap/socket.h -rw-r--r-- root/root usr/include/pcap/usb.h -rw-r--r-- root/root usr/include/pcap/vlan.h drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libpcap.a lrwxrwxrwx root/root usr/lib/libpcap.so -> libpcap.so.1 -lrwxrwxrwx root/root usr/lib/libpcap.so.1 -> libpcap.so.1.9.0 --rwxr-xr-x root/root usr/lib/libpcap.so.1.9.0 +lrwxrwxrwx root/root usr/lib/libpcap.so.1 -> libpcap.so.1.9.1 +-rwxr-xr-x root/root usr/lib/libpcap.so.1.9.1 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libpcap.pc drwxr-xr-x root/root usr/share/ @@ -42,6 +43,7 @@ drwxr-xr-x root/root usr/share/man/man3/ -rw-r--r-- root/root usr/share/man/man3/pcap_datalink.3pcap.gz -rw-r--r-- root/root usr/share/man/man3/pcap_datalink_name_to_val.3pcap.gz lrwxrwxrwx root/root usr/share/man/man3/pcap_datalink_val_to_description.3pcap.gz -> pcap_datalink_val_to_name.3pcap.gz +lrwxrwxrwx root/root usr/share/man/man3/pcap_datalink_val_to_description_or_dlt.3pcap.gz -> pcap_datalink_val_to_name.3pcap.gz -rw-r--r-- root/root usr/share/man/man3/pcap_datalink_val_to_name.3pcap.gz lrwxrwxrwx root/root usr/share/man/man3/pcap_dispatch.3pcap.gz -> pcap_loop.3pcap.gz -rw-r--r-- root/root usr/share/man/man3/pcap_dump.3pcap.gz diff --git a/libpcap/.signature b/libpcap/.signature index 44beec392..9214a15de 100644 --- a/libpcap/.signature +++ b/libpcap/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/Xkhrg+zfa+15dZ3kt+PxsCzoglUPgxDgTzOQoARFrOl8WLkU1uYRRCrxR+raGWJeA5ALYvhu6iAVMrhaC+4+QA= -SHA256 (Pkgfile) = 8ce778fddf50cb37135e1e9c8967a36e079c7dc4d02f1126f69a8dc54f8068e7 -SHA256 (.footprint) = 3ffe2f41f146383f739fb05e8d1189c3076ad1e56b046214a1e3da6145554072 -SHA256 (libpcap-1.9.0.tar.gz) = 2edb88808e5913fdaa8e9c1fcaf272e19b2485338742b5074b9fe44d68f37019 +RWSE3ohX2g5d/V8x04kQ1PFyzG0Ts4ghDW+dUufnP1grrtk0h2vdUdcoR8CQ5Y7wCFu5peBI72ZxRkJwfMZScCZb71IzDhfdsgs= +SHA256 (Pkgfile) = c5b1d3b28578ae10cc024d2137ec0b5c7825902f45d952911a3a15749d365b72 +SHA256 (.footprint) = b53cfbc855d60a04638d2f72ed8235d2acb6b80a257e7266ee512fbbf8d1ca7a +SHA256 (libpcap-1.9.1.tar.gz) = 635237637c5b619bcceba91900666b64d56ecb7be63f298f601ec786ce087094 diff --git a/libpcap/Pkgfile b/libpcap/Pkgfile index 23b8d1184..11833732b 100644 --- a/libpcap/Pkgfile +++ b/libpcap/Pkgfile @@ -1,12 +1,12 @@ # Description: Packet capture library -# URL: http://www.tcpdump.org +# URL: https://www.tcpdump.org/ # Maintainer: Juergen Daubert, jue at crux dot nu # Depends on: libusb name=libpcap -version=1.9.0 +version=1.9.1 release=1 -source=(http://www.tcpdump.org/release/$name-$version.tar.gz) +source=(https://www.tcpdump.org/release/$name-$version.tar.gz) build () { cd $name-$version

1 0

ports/opt (3.5): [notify] ruby: update to 2.6.5
by crux＠crux.nu 01 Oct '19

01 Oct '19

commit 413423c55e69951c2f37a9996f3b85341c7838ff Author: Juergen Daubert <jue(a)jue.li> Date: Tue Oct 1 15:59:52 2019 +0200 [notify] ruby: update to 2.6.5 includes security fixes for the following vulnerabilities: - https://www.ruby-lang.org/en/news/2019/10/01/code-injection-shell-test-cve-… - https://www.ruby-lang.org/en/news/2019/10/01/http-response-splitting-in-web… - https://www.ruby-lang.org/en/news/2019/10/01/nul-injection-file-fnmatch-cve… - https://www.ruby-lang.org/en/news/2019/10/01/webrick-regexp-digestauth-dos-… diff --git a/ruby/.footprint b/ruby/.footprint index d0d67bf01..51e9fc3e0 100644 --- a/ruby/.footprint +++ b/ruby/.footprint @@ -42,13 +42,13 @@ drwxr-xr-x root/root usr/include/ruby-2.6/ruby/backward/ -rw-r--r-- root/root usr/include/ruby-2.6/ruby/version.h -rw-r--r-- root/root usr/include/ruby-2.6/ruby/vm.h drwxr-xr-x root/root usr/include/ruby-2.6/x86_64-linux/ --rw-r--r-- root/root usr/include/ruby-2.6/x86_64-linux/rb_mjit_min_header-2.6.4.h +-rw-r--r-- root/root usr/include/ruby-2.6/x86_64-linux/rb_mjit_min_header-2.6.5.h drwxr-xr-x root/root usr/include/ruby-2.6/x86_64-linux/ruby/ -rw-r--r-- root/root usr/include/ruby-2.6/x86_64-linux/ruby/config.h drwxr-xr-x root/root usr/lib/ -lrwxrwxrwx root/root usr/lib/libruby.so -> libruby.so.2.6.4 -lrwxrwxrwx root/root usr/lib/libruby.so.2.6 -> libruby.so.2.6.4 --rwxr-xr-x root/root usr/lib/libruby.so.2.6.4 +lrwxrwxrwx root/root usr/lib/libruby.so -> libruby.so.2.6.5 +lrwxrwxrwx root/root usr/lib/libruby.so.2.6 -> libruby.so.2.6.5 +-rwxr-xr-x root/root usr/lib/libruby.so.2.6.5 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/ruby-2.6.pc drwxr-xr-x root/root usr/lib/ruby/ diff --git a/ruby/.signature b/ruby/.signature index 45e2896d0..e075cf17d 100644 --- a/ruby/.signature +++ b/ruby/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/VG/U3PcgZV16GbVeR+rpO7H2Zx98r9NtKNdJAk4qtQiAMG9n4GdPQ/ZgjU441iw96zWQJ0fRJpx6ZRiu0+uBQ8= -SHA256 (Pkgfile) = 2d70b995eaae6c1a201468b70cd9855357d3eacee2d05b7f51e26d1a8b171250 -SHA256 (.footprint) = e036c37d04600f0a758e973497f5bcb434308508998f6d66c5a0d6904d4d2ad5 -SHA256 (ruby-2.6.4.tar.xz) = df593cd4c017de19adf5d0154b8391bb057cef1b72ecdd4a8ee30d3235c65f09 +RWSE3ohX2g5d/ed7qyaHwwQndeglslBVCFTV1bUJnG/7ZOF4cCiOm0AvqmlX5sOJV7ZftHU14eQL/ZlffdhGVVXgQrsKUdmfUwE= +SHA256 (Pkgfile) = fa971b94e4259b38905ed1151fe658ba331b2ff376b8f3d5c53d23e9103685a5 +SHA256 (.footprint) = c9be8926de2e04b02aa9cb638a5d86731461c7c0575e8609090d176edd5deaf2 +SHA256 (ruby-2.6.5.tar.xz) = d5d6da717fd48524596f9b78ac5a2eeb9691753da5c06923a6c31190abe01a62 diff --git a/ruby/Pkgfile b/ruby/Pkgfile index a7da34b15..00fe1cda3 100644 --- a/ruby/Pkgfile +++ b/ruby/Pkgfile @@ -4,7 +4,7 @@ # Depends on: gdbm libgmp openssl zlib libffi libyaml name=ruby -version=2.6.4 +version=2.6.5 release=1 source=(http://cache.ruby-lang.org/pub/$name/${version%.*}/$name-$version.t…

1 0