August 2020 - CRUX - lists.crux.nu

ports/opt (3.5): [notify] dovecot: update to 2.3.11.3
by crux＠crux.nu 12 Aug '20

12 Aug '20

commit 37e4134316b3ec3dc59adc9f0d5aadcdeb5d424d Author: Juergen Daubert <jue(a)jue.li> Date: Wed Aug 12 15:59:00 2020 +0200 [notify] dovecot: update to 2.3.11.3 includes security fixes, see - https://dovecot.org/pipermail/dovecot-news/2020-August/000440.html - https://dovecot.org/pipermail/dovecot-news/2020-August/000441.html - https://dovecot.org/pipermail/dovecot-news/2020-August/000442.html - https://dovecot.org/pipermail/dovecot-news/2020-August/000443.html diff --git a/dovecot/.footprint b/dovecot/.footprint index 3de911024..2e8e22c0b 100644 --- a/dovecot/.footprint +++ b/dovecot/.footprint @@ -72,6 +72,7 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/auth-master.h -rw-r--r-- root/root usr/include/dovecot/auth-penalty.h -rw-r--r-- root/root usr/include/dovecot/auth-policy.h +-rw-r--r-- root/root usr/include/dovecot/auth-request-handler-private.h -rw-r--r-- root/root usr/include/dovecot/auth-request-handler.h -rw-r--r-- root/root usr/include/dovecot/auth-request-stats.h -rw-r--r-- root/root usr/include/dovecot/auth-request-var-expand.h @@ -448,6 +449,7 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/mdbox-storage-rebuild.h -rw-r--r-- root/root usr/include/dovecot/mdbox-storage.h -rw-r--r-- root/root usr/include/dovecot/mdbox-sync.h +-rw-r--r-- root/root usr/include/dovecot/mech-digest-md5-private.h -rw-r--r-- root/root usr/include/dovecot/mech-otp-skey-common.h -rw-r--r-- root/root usr/include/dovecot/mech-plain-common.h -rw-r--r-- root/root usr/include/dovecot/mech-scram.h @@ -494,6 +496,7 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/ostream-private.h -rw-r--r-- root/root usr/include/dovecot/ostream-rawlog.h -rw-r--r-- root/root usr/include/dovecot/ostream-unix.h +-rw-r--r-- root/root usr/include/dovecot/ostream-wrapper.h -rw-r--r-- root/root usr/include/dovecot/ostream-zlib.h -rw-r--r-- root/root usr/include/dovecot/ostream.h -rw-r--r-- root/root usr/include/dovecot/passdb-blocking.h diff --git a/dovecot/.signature b/dovecot/.signature index 281acf5d6..053302e61 100644 --- a/dovecot/.signature +++ b/dovecot/.signature @@ -1,7 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/QEeUC5yRSXfYdP7uP8Dp/UnJZkH0luYjBclJujJ7txo7BufRVQ4CHSJFTIYpXJF8sGg1XruiFq1KbrgMis0BQQ= -SHA256 (Pkgfile) = 92d01b8d702dfcd4d14879e4577ea934096486ecfdceb0c82b1c47e461c6b396 -SHA256 (.footprint) = 57c55cd7ad4daccd267abc8bf15f9ed747fc8668a0ace7332d43e63f8bf6bc3d -SHA256 (dovecot-2.3.10.1.tar.gz) = 6642e62f23b1b23cfac235007ca6e21cb67460cca834689fad450724456eb10c +RWSE3ohX2g5d/TMHjyF5bIkjrvQLGorcmYB8im5yWyU3rO65jL/0+rAVg9NsNcTMt31PWdgnMGQShTr1ks7XKoLUoy7I/nq98wE= +SHA256 (Pkgfile) = f54d099eeaa898869c277cabe308ea33d20a6127f45afdff24bf96934982ab1c +SHA256 (.footprint) = e42264b74c1935b079f1edb700bf9212a928e715e96155878a0f1cc203162b75 +SHA256 (dovecot-2.3.11.3.tar.gz) = d3d9ea9010277f57eb5b9f4166a5d2ba539b172bd6d5a2b2529a6db524baafdc SHA256 (dovecot.rc) = 188af70cdcbb012eedd44bc0bbe6ef11567e7a788ecc57ffb106b934a87de286 SHA256 (dovecot.pam) = 9aa8bd8871560e4e3c255ca3e8ed9c99d6b29620e375155ef6c4118b5b7da4af diff --git a/dovecot/Pkgfile b/dovecot/Pkgfile index c13d5ec33..7382b0f1d 100644 --- a/dovecot/Pkgfile +++ b/dovecot/Pkgfile @@ -4,7 +4,7 @@ # Depends on: zlib bzip2 xz openssl libcap linux-pam name=dovecot -version=2.3.10.1 +version=2.3.11.3 release=1 source=(https://dovecot.org/releases/2.3/$name-$version.tar.gz dovecot.rc dovecot.pam)

1 0

ports/opt (3.5): [notify] apache: update to 2.4.46
by crux＠crux.nu 11 Aug '20

11 Aug '20

commit d334351c4a5fb0379d61321183e764cb82f1d862 Author: Juergen Daubert <jue(a)jue.li> Date: Tue Aug 11 10:47:00 2020 +0200 [notify] apache: update to 2.4.46 includes security fixes, see https://downloads.apache.org/httpd/CHANGES_2.4.46 diff --git a/apache/.signature b/apache/.signature index d4df84e27..d3ddc7c80 100644 --- a/apache/.signature +++ b/apache/.signature @@ -1,7 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/W8Rb/b23N2MB4wTcYF0sG91S9iwCd3cW+lW3w9zJcP1/P5fGVmhFW87A8nOadDcC7D3yH5dsZ7wqL1J/M1E/QQ= -SHA256 (Pkgfile) = 2f6304a08761f93c26d784cbfb083d44e1d2cb9e5d93596d40bab963280fcab5 +RWSE3ohX2g5d/R/hsN/SXKm4dm9oZei0XCagQL6nmZUZOgiyLx8ua2t1WuKRwqvCpuzygrt0FClAJ3r2WHjjoiDwpvKXlXOMFQk= +SHA256 (Pkgfile) = 5f4fa3bca1ee8c32b8966492ee6d1ca7b95aea121e2a7fd3685d834857b834d0 SHA256 (.footprint) = 5e67d75802efcd4097db6c95f25e70dfa4b740e7e437404376fdd65c9a010bb5 -SHA256 (httpd-2.4.43.tar.bz2) = a497652ab3fc81318cdc2a203090a999150d86461acff97c1065dc910fe10f43 +SHA256 (httpd-2.4.46.tar.bz2) = 740eddf6e1c641992b22359cabc66e6325868c3c5e2e3f98faf349b61ecf41ea SHA256 (crux.layout) = cf555f92cdc9a078d9e89035819da1ac0d2e248f0d31637b9e8f48fc8d3f42cf SHA256 (apache) = f4ff530751a937bead9030e15689a3b19591f790095b46bddc073efc82f756dd diff --git a/apache/Pkgfile b/apache/Pkgfile index 553b4387a..fe85c9410 100644 --- a/apache/Pkgfile +++ b/apache/Pkgfile @@ -5,7 +5,7 @@ # Group: apache name=apache -version=2.4.43 +version=2.4.46 release=1 source=(http://www.apache.org/dist/httpd/httpd-$version.tar.bz2 \ crux.layout apache)

1 0

ports/contrib (3.5): [notify] python3-pyqt5: new dependency: python3-pyqt5-sip, fixes problems with fakeroot
by crux＠crux.nu 06 Aug '20

06 Aug '20

commit 86b56f370cb0c6c0a04a7dbf513e6d7b581eb162 Author: Tim Biermann <tbier(a)posteo.de> Date: Thu Aug 6 14:10:48 2020 +0000 [notify] python3-pyqt5: new dependency: python3-pyqt5-sip, fixes problems with fakeroot diff --git a/python3-pyqt5/.footprint b/python3-pyqt5/.footprint index a5937a3f9..f9d93b3a8 100644 --- a/python3-pyqt5/.footprint +++ b/python3-pyqt5/.footprint @@ -39,6 +39,7 @@ drwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5/ -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/QtWebChannel.abi3.so -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/QtWebSockets.abi3.so -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/QtWidgets.abi3.so +-rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/QtX11Extras.abi3.so -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/QtXml.abi3.so -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/QtXmlPatterns.abi3.so -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/_QOpenGLFunctions_2_0.abi3.so @@ -881,6 +882,10 @@ drwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtWidgets/ -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtWidgets/qwidget.sip -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtWidgets/qwidgetaction.sip -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtWidgets/qwizard.sip +drwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtX11Extras/ +-rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtX11Extras/QtX11Extras.toml +-rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtX11Extras/QtX11Extrasmod.sip +-rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtX11Extras/qx11info_x11.sip drwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtXml/ -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtXml/QtXml.toml -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtXml/QtXmlmod.sip @@ -907,7 +912,6 @@ drwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5/bindings/QtXmlPattern -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/pylupdate_main.py -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/pyrcc.abi3.so -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/pyrcc_main.py --rwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5/sip.cpython-37m-x86_64-linux-gnu.so drwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5/uic/ drwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5/uic/Compiler/ -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/uic/Compiler/__init__.py @@ -1025,12 +1029,6 @@ drwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5/uic/widget-plugins/__ -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/uic/widget-plugins/qtquickwidgets.py -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/uic/widget-plugins/qtwebenginewidgets.py -rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5/uic/widget-plugins/qtwebkit.py -drwxr-xr-x root/root usr/lib/python3.7/site-packages/PyQt5_sip-12.8.0.dist-info/ --rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5_sip-12.8.0.dist-info/METADATA --rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5_sip-12.8.0.dist-info/RECORD --rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5_sip-12.8.0.dist-info/WHEEL --rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5_sip-12.8.0.dist-info/direct_url.json --rw-r--r-- root/root usr/lib/python3.7/site-packages/PyQt5_sip-12.8.0.dist-info/top_level.txt drwxr-xr-x root/root usr/lib/qt5/ drwxr-xr-x root/root usr/lib/qt5/plugins/ drwxr-xr-x root/root usr/lib/qt5/plugins/PyQt5/ diff --git a/python3-pyqt5/.signature b/python3-pyqt5/.signature index a5d5f18b0..080a60a4e 100644 --- a/python3-pyqt5/.signature +++ b/python3-pyqt5/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF37nF57hhf/OwzabFz7rjeh1GAMQO0Tx2CNIAJ46qKg0Ei88NU6lpmOiAumwxQ82JnG2QrdMNr6xU+L8GnGO1qAc= -SHA256 (Pkgfile) = 11b0a527c14cc8d767c9819a6573d1d19bf2931b22b480ca7938c1cae2175255 -SHA256 (.footprint) = bb9ce5a45e8208f4fbfe868bce635b51771b75fd4f06ef8632322e0497d0a16a +RWSagIOpLGJF35V/XcxezpcgCRcvImwUdYsJQuQmOfIN/sJo1rXk61DJHsgO6Mo+yzgrWXFLIlJTjFXxftTUVS7Pu2DGRQ5vYgs= +SHA256 (Pkgfile) = 321ef3d37c5c9f7db484bd13ac3d65e0c7e795587380cf5c01c0a37734429343 +SHA256 (.footprint) = 6e5025fc89a97a58f2b07883b6a50d12e58767070be047732af8509980088608 SHA256 (PyQt5-5.15.0.tar.gz) = c6f75488ffd5365a65893bc64ea82a6957db126fbfe33654bcd43ae1c30c52f9 diff --git a/python3-pyqt5/Pkgfile b/python3-pyqt5/Pkgfile index 72bc348f1..6fc53dd26 100644 --- a/python3-pyqt5/Pkgfile +++ b/python3-pyqt5/Pkgfile @@ -1,11 +1,11 @@ # Description: Python bindings for the QT5 toolkit # URL: https://riverbankcomputing.com/software/pyqt/intro # Maintainer: Tim Biermann, tbier at posteo dot de -# Depends on: dbus-python3 python3-opengl python3-packaging python3-pip python3-pyqt-builder qt5 sip sip5 +# Depends on: dbus-python3 python3-opengl python3-packaging python3-pip python3-pyqt-builder python3-pyqt5-sip qt5 sip sip5 name=python3-pyqt5 version=5.15.0 -release=1 +release=2 source=(https://pypi.python.org/packages/source/P/PyQt5/PyQt5-$version.tar.… build() { @@ -20,8 +20,6 @@ build() { make INSTALL_ROOT=$PKG install -j1 python3 -m compileall -d / $PKG/usr/lib python3 -O -m compileall -d / $PKG/usr/lib - sip-module --sdist PyQt5.sip - pip3 install PyQt5_sip-*.tar.gz --root "$PKG" find $PKG \ -iname "*INSTALLER*" \ -delete

1 0

Building imlib2 for tint2
by david mccooey 02 Aug '20

02 Aug '20

Hello, I am trying to build /usr/ports/contrib/tint2 on my Crux 3.5 system. One of the dependencies is imlib2. When I try to build /usr/ports/opt/imlib2 using "pkgmk -d -i", it reports the following: =======> ERROR: Footprint mismatch found: MISSING -rwxr-xr-x root/root usr/lib/imlib2/loaders/gif.la MISSING -rwxr-xr-x root/root usr/lib/imlib2/loaders/gif.so MISSING -rwxr-xr-x root/root usr/lib/imlib2/loaders/id3.la MISSING -rwxr-xr-x root/root usr/lib/imlib2/loaders/id3.so =======> ERROR: Building '/usr/ports/opt/imlib2/imlib2#1.6.1-1.pkg.tar.gz' failed. The message seems to indicate a problem with the package itself. Any help would be appreciated. Best regards, Dave

2 2

installing libfm for pcmanfm
by david mccooey 02 Aug '20

02 Aug '20

Hello, I am trying to build /usr/ports/contrib/pcmanfm on my Crux 3.5 system. pkgmk tells me it needs libfm and libfm-gtk. After building other dependencies (menu-cache and libfm-extra), I built /usr/ports/contrib/libfm using "pkgmk -d -f". It appears to succeed with the last line: =======> Building '/usr/ports/contrib/libfm/libfm#1.3.1-2.pkg.tar.gz' succeeded. When I try to build /usr/ports/contrib/pcmanfm using "pkgmk -d -i", it reports the following: No package 'libfm' found No package 'libfm-gtk' found Here are all of the "libfm" files on my system: # ls -dgo `find / -iname "*libfm*"` lrwxrwxrwx 1 9 Aug 1 14:10 /usr/include/libfm -> libfm-1.0 drwxr-xr-x 2 4096 Aug 1 14:10 /usr/include/libfm-1.0 -rw-r--r-- 1 26414 Aug 1 14:10 /usr/lib/libfm-extra.a -rwxr-xr-x 1 1020 Aug 1 14:10 /usr/lib/libfm-extra.la lrwxrwxrwx 1 20 Aug 1 14:10 /usr/lib/libfm-extra.so -> libfm-extra.so.4.1.2 lrwxrwxrwx 1 20 Aug 1 14:10 /usr/lib/libfm-extra.so.4 -> libfm-extra.so.4.1.2 -rwxr-xr-x 1 26936 Aug 1 14:10 /usr/lib/libfm-extra.so.4.1.2 -rw-r--r-- 1 296 Aug 1 14:10 /usr/lib/pkgconfig/libfm-extra.pc drwxr-xr-x 2 4096 Aug 1 15:04 /usr/ports/contrib/libfm drwxr-xr-x 2 4096 Aug 1 14:10 /usr/ports/contrib/libfm-extra -rw-r--r-- 1 940632 Dec 17 2018 /usr/ports/contrib/libfm-extra/libfm-1.3.1.tar.xz -rw-r--r-- 1 23101 Aug 1 14:10 /usr/ports/contrib/libfm-extra/libfm-extra#1.3.1-1.pkg.tar.gz -rw-r--r-- 1 830134 Aug 1 14:46 /usr/ports/contrib/libfm/libfm#1.3.1-2.pkg.tar.gz -rw-r--r-- 1 940632 Dec 17 2018 /usr/ports/contrib/libfm/libfm-1.3.1.tar.xz This shows no libfm library (without "extra" in the name). Shouldn't the "pkgmk -d -f" in /usr/ports/contrib/libfm be installing a "libfm" library somewhere? Best regards, Dave

2 2

ports/xorg (3.5): [notify] xorg-server: Fix for CVE-2020-14347.
by crux＠crux.nu 01 Aug '20

01 Aug '20

commit 3a026cd9c14551db0164ea400ac6b799bb28e945 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Sat Aug 1 16:16:55 2020 +0200 [notify] xorg-server: Fix for CVE-2020-14347. X.Org security advisory: July 31, 2020 X Server Pixel Data Uninitialized Memory Information Disclosure =============================================================== CVE-2020-14347 Allocation for pixmap data in AllocatePixmap() does not initialize the memory in xserver, it leads to leak uninitialize heap memory to clients. When the X server runs with elevated privileges. This flaw can lead to ASLR bypass, which when combined with other flaws (known/unknown) could lead to lead to privilege elevation in the client. diff --git a/xorg-server/.signature b/xorg-server/.signature index 032a5a98..c019d3b2 100644 --- a/xorg-server/.signature +++ b/xorg-server/.signature @@ -1,5 +1,6 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndDg1Anu2ouJAb7KUFEPSKqh472+MCvxVBHiDcuPT93VorAqVbFCmcpsSEI4l73lkhcm04cQvMdHdNpknkA/mJwA= -SHA256 (Pkgfile) = d051963ce7c6250aabc5c609700c293f4c4a93df5ce436958f6c729734b14a97 +RWTSGWF5Q7TndO6ucO1zqkMnuHKTjsfLzAeeCsVuNPNeyBRjpEFi1wF2R38IGZBO5CQtDCF+UmiGXmKiKjs1LE3agFVeTjhh9A4= +SHA256 (Pkgfile) = 3b300ca40982d994f747b1832e1bb939677aff193dd9a969ded6ce4b3ec453b6 SHA256 (.footprint) = d159a275a4868001332954580ab4f70976c97a80334b157023935b36722e50cd SHA256 (xorg-server-1.20.8.tar.bz2) = d17b646bee4ba0fb7850c1cc55b18e3e8513ed5c02bdf38da7e107f84e2d0146 +SHA256 (CVE-2020-14347.patch) = 8ec70385e7e8195c27db0a86c851b7505249ec4ef167e1b0d171b187bc837604 diff --git a/xorg-server/CVE-2020-14347.patch b/xorg-server/CVE-2020-14347.patch new file mode 100644 index 00000000..7adec3a1 --- /dev/null +++ b/xorg-server/CVE-2020-14347.patch @@ -0,0 +1,12 @@ +diff --git a/dix/pixmap.c b/dix/pixmap.c +index 1186d7dbb..5a0146bbb 100644 +--- a/dix/pixmap.c ++++ b/dix/pixmap.c +@@ -116,7 +116,7 @@ AllocatePixmap(ScreenPtr pScreen, int pixDataSize) + if (pScreen->totalPixmapSize > ((size_t) - 1) - pixDataSize) + return NullPixmap; + +- pPixmap = malloc(pScreen->totalPixmapSize + pixDataSize); ++ pPixmap = calloc(1, pScreen->totalPixmapSize + pixDataSize); + if (!pPixmap) + return NullPixmap; diff --git a/xorg-server/Pkgfile b/xorg-server/Pkgfile index 5e908298..d8513c3c 100644 --- a/xorg-server/Pkgfile +++ b/xorg-server/Pkgfile @@ -5,12 +5,15 @@ name=xorg-server version=1.20.8 -release=1 -source=(https://www.x.org/releases/individual/xserver/$name-$version.tar.bz2) +release=2 +source=(https://www.x.org/releases/individual/xserver/$name-$version.tar.bz2 \ + CVE-2020-14347.patch) build() { cd $name-$version + patch -p1 -i $SRC/CVE-2020-14347.patch + ./configure --prefix=/usr \ --localstatedir=/var \ --with-fontrootdir=/usr/share/fonts/X11 \

1 0