June 2020 - CRUX - lists.crux.nu

ports/opt (3.5): [notify] libxslt: 1.1.33 -> 1.1.34 CVE-2019-13118 fix
by crux＠crux.nu 02 Jun '20

02 Jun '20

commit b905cd538839084127603f5042eb43b6f4e3a6da Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Wed Jun 3 00:07:12 2020 +1000 [notify] libxslt: 1.1.33 -> 1.1.34 CVE-2019-13118 fix diff --git a/libxslt/.footprint b/libxslt/.footprint index b54edc8b9..0eeef2afd 100644 --- a/libxslt/.footprint +++ b/libxslt/.footprint @@ -38,9 +38,9 @@ lrwxrwxrwx root/root usr/lib/libexslt.so.0 -> libexslt.so.0.8.20 drwxr-xr-x root/root usr/lib/libxslt-plugins/ -rw-r--r-- root/root usr/lib/libxslt.a -rwxr-xr-x root/root usr/lib/libxslt.la -lrwxrwxrwx root/root usr/lib/libxslt.so -> libxslt.so.1.1.33 -lrwxrwxrwx root/root usr/lib/libxslt.so.1 -> libxslt.so.1.1.33 --rwxr-xr-x root/root usr/lib/libxslt.so.1.1.33 +lrwxrwxrwx root/root usr/lib/libxslt.so -> libxslt.so.1.1.34 +lrwxrwxrwx root/root usr/lib/libxslt.so.1 -> libxslt.so.1.1.34 +-rwxr-xr-x root/root usr/lib/libxslt.so.1.1.34 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libexslt.pc -rw-r--r-- root/root usr/lib/pkgconfig/libxslt.pc diff --git a/libxslt/.signature b/libxslt/.signature index 4e1f11e16..e1fc4c2e1 100644 --- a/libxslt/.signature +++ b/libxslt/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/bVgKvO7Lfkagc9fWr47wn/4zlAxNkyqcg8AsqWlcpjoUGbxD3nAyfj85vyBHJqBmKA+Ps0K3k+Mp1Xhf6s2VQ8= -SHA256 (Pkgfile) = 36f66cf4ecc7f21f04c63fd2f81eb8f3a195de89d0442d6196bdd895bd5702a5 -SHA256 (.footprint) = 5c55155d30a55e88dbf0ddf79586958115431cdf0ee1314c60cccb91ede44112 -SHA256 (libxslt-1.1.33.tar.gz) = 8e36605144409df979cab43d835002f63988f3dc94d5d3537c12796db90e38c8 +RWSE3ohX2g5d/ZOTCTkxVCBRKxPDnRM8AwRy0TuNa7Sv6poNBjofYlpheZRu8irVohoOlv1swlVTUhCuBsM9Rswka4fCuEaY1wQ= +SHA256 (Pkgfile) = 6a66618ab5dc0ede7864047b1c035ca78e8fbfc2cce9f6e73e6ccfddf136c885 +SHA256 (.footprint) = 4b41b943bf7fb9ade4b90e5a2d0c8403246b6e1da266ef403baa863788ed3bcf +SHA256 (libxslt-1.1.34.tar.gz) = 98b1bd46d6792925ad2dfe9a87452ea2adebf69dcb9919ffd55bf926a7f93f7f diff --git a/libxslt/Pkgfile b/libxslt/Pkgfile index 6d17798c7..f22b34bca 100644 --- a/libxslt/Pkgfile +++ b/libxslt/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libxml2 name=libxslt -version=1.1.33 +version=1.1.34 release=1 source=(http://xmlsoft.org/sources/$name-$version.tar.gz)

1 0

ports/contrib (3.5): [notify] libssh: 0.9.0 -> 0.9.4; fixes CVE-2019-14889
by crux＠crux.nu 01 Jun '20

01 Jun '20

commit ee058021aa326790ac097de800df1a7f1b2b0d59 Author: Tim Biermann <tbier(a)posteo.de> Date: Mon Jun 1 22:21:52 2020 +0200 [notify] libssh: 0.9.0 -> 0.9.4; fixes CVE-2019-14889 diff --git a/libssh/.footprint b/libssh/.footprint index 60a06f619..e232f10dc 100644 --- a/libssh/.footprint +++ b/libssh/.footprint @@ -11,10 +11,11 @@ drwxr-xr-x root/root usr/include/libssh/ drwxr-xr-x root/root usr/lib/ drwxr-xr-x root/root usr/lib/cmake/ drwxr-xr-x root/root usr/lib/cmake/libssh/ +-rw-r--r-- root/root usr/lib/cmake/libssh/libssh-config-release.cmake -rw-r--r-- root/root usr/lib/cmake/libssh/libssh-config-version.cmake -rw-r--r-- root/root usr/lib/cmake/libssh/libssh-config.cmake lrwxrwxrwx root/root usr/lib/libssh.so -> libssh.so.4 -lrwxrwxrwx root/root usr/lib/libssh.so.4 -> libssh.so.4.8.1 --rwxr-xr-x root/root usr/lib/libssh.so.4.8.1 +lrwxrwxrwx root/root usr/lib/libssh.so.4 -> libssh.so.4.8.5 +-rwxr-xr-x root/root usr/lib/libssh.so.4.8.5 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libssh.pc diff --git a/libssh/.signature b/libssh/.signature index d0a554330..47eee04e7 100644 --- a/libssh/.signature +++ b/libssh/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF36gXkbPM4esRS7PMc47bs5xBhEztHck9hvzVvYoMsU9s8rYcROKhVBp4c2ySlwmOBu/wKxSndwJ+Ls1OmdpUggk= -SHA256 (Pkgfile) = 517940360f0997c5e492f66baaa65ee1126d6664d55fcd502f54343ac77abe24 -SHA256 (.footprint) = 65e8138c3427aafcaf928c0fa9909596d87269f9bce9c0473b94a4c02706328d -SHA256 (libssh-0.9.0.tar.xz) = 25303c2995e663cd169fdd902bae88106f48242d7e96311d74f812023482c7a5 +RWSagIOpLGJF3zTRXBgWsNp6MqDELr1Gdsat7keb8FigegJTps3+otMgWrbC8LztxRawJn4iFaOaTluMbJYV3k7dMm8e4PVUjA8= +SHA256 (Pkgfile) = 5570a59201dccbaca153dc7099621cbfa41c1db75cdf9a6961c123c449ed6d55 +SHA256 (.footprint) = 89be291bbd99b557510fefd59a50a1e98c6932e43daf0f2f2c6a85204bc405df +SHA256 (libssh-0.9.4.tar.xz) = 150897a569852ac05aac831dc417a7ba8e610c86ca2e0154a99c6ade2486226b diff --git a/libssh/Pkgfile b/libssh/Pkgfile index 161bfe150..59983ada1 100644 --- a/libssh/Pkgfile +++ b/libssh/Pkgfile @@ -1,18 +1,18 @@ # Description: ssh library -# URL: http://libssh.org +# URL: https://libssh.org # Maintainer: Thomas Penteker, tek at serverop dot de # Depends on: cmake name=libssh -version=0.9.0 +version=0.9.4 release=1 source=(https://www.libssh.org/files/${version%.*}/libssh-${version}.tar.xz) build() { - cd $name-$version - - mkdir -p build - cd build - cmake .. -DCMAKE_INSTALL_PREFIX=/usr -DCMAKE_BUILD_TYPE=Release - make DESTDIR=$PKG install + cmake -S$name-$version -Bbuild -GNinja \ + -DCMAKE_INSTALL_PREFIX=/usr \ + -DCMAKE_INSTALL_LIBDIR=lib \ + -DCMAKE_BUILD_TYPE=Release + cmake --build build + DESTDIR=$PKG cmake --build build --target install }

1 0

ports/contrib (3.5): [notify] libplacebo: 1.29.1 -> 2.43.1 ABI change rebuild mpv and anything else, check with revdep!
by crux＠crux.nu 01 Jun '20

01 Jun '20

commit 5642e248f2612126a2f17ff971edaeffd44db112 Author: Danny Rawlins <monster.romster(a)gmail.com> Date: Mon Jun 1 23:38:59 2020 +1000 [notify] libplacebo: 1.29.1 -> 2.43.1 ABI change rebuild mpv and anything else, check with revdep! diff --git a/libplacebo/.footprint b/libplacebo/.footprint index 3e99fa0ae..5ec6c228c 100644 --- a/libplacebo/.footprint +++ b/libplacebo/.footprint @@ -10,6 +10,7 @@ drwxr-xr-x root/root usr/include/libplacebo/ -rw-r--r-- root/root usr/include/libplacebo/dummy.h -rw-r--r-- root/root usr/include/libplacebo/filters.h -rw-r--r-- root/root usr/include/libplacebo/gpu.h +-rw-r--r-- root/root usr/include/libplacebo/opengl.h -rw-r--r-- root/root usr/include/libplacebo/renderer.h -rw-r--r-- root/root usr/include/libplacebo/shaders.h drwxr-xr-x root/root usr/include/libplacebo/shaders/ @@ -21,7 +22,7 @@ drwxr-xr-x root/root usr/include/libplacebo/utils/ -rw-r--r-- root/root usr/include/libplacebo/utils/upload.h -rw-r--r-- root/root usr/include/libplacebo/vulkan.h drwxr-xr-x root/root usr/lib/ -lrwxrwxrwx root/root usr/lib/libplacebo.so -> libplacebo.so.29 --rwxr-xr-x root/root usr/lib/libplacebo.so.29 +lrwxrwxrwx root/root usr/lib/libplacebo.so -> libplacebo.so.43 +-rwxr-xr-x root/root usr/lib/libplacebo.so.43 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libplacebo.pc diff --git a/libplacebo/.signature b/libplacebo/.signature index 9e97a887d..5c7ec0326 100644 --- a/libplacebo/.signature +++ b/libplacebo/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF39wQo0DCBrRnev46P03LfQsjRvUlQLcSQmzJLXKrAnlJqiJdG3N+aD8ddjwQd6RDryl5+pCOmbkK1WU6O1bK1A0= -SHA256 (Pkgfile) = e50b10c1904232ba4a711e00405985bb9d7092f4868f4ca40ae7123bcfd4de74 -SHA256 (.footprint) = d829ecb8d6e1033fb10749b12793c015e5a776c4fc6fdb58fd0d5151c02fb301 -SHA256 (libplacebo-v1.29.1.tar.gz) = 478497b442f2151de8e09248511c8871bd3958e857770cf5c41af58740a40f5d +RWSagIOpLGJF31GJKWe/yF3R1qNO38z4mPmMdUs3ab6cRK3ghHDGOwBCm7AW2IXe7NXKLjPecixXrCprg6RvJImiqIPYH423hws= +SHA256 (Pkgfile) = 448af5305565f9d357ed09726b6436431d4f79c1b59746bac3cbec6c9dbbd714 +SHA256 (.footprint) = 3890eb55dddefc91ae42281944ccb2871d5d61c88bd7185d743a1be508e710b1 +SHA256 (libplacebo-v2.43.1.tar.gz) = b5b67a07f99308f492f9b31ee2731f9b4e10214c0d3e0c32cbb0ee961c7c83f2 diff --git a/libplacebo/Pkgfile b/libplacebo/Pkgfile index 0cf47af12..cc7aa687c 100644 --- a/libplacebo/Pkgfile +++ b/libplacebo/Pkgfile @@ -1,10 +1,10 @@ # Description: Reusable library for GPU-accelerated video/image rendering primitives # URL: https://github.com/haasn/libplacebo # Maintainer: Danny Rawlins, crux at romster dot me -# Depends on: lcms2 shaderc vulkan-loader +# Depends on: lcms2 meson shaderc vulkan-loader name=libplacebo -version=1.29.1 +version=2.43.1 release=1 source=(https://code.videolan.org/videolan/libplacebo/-/archive/v$version/$…

1 0