September 2021 - CRUX - lists.crux.nu

Thoughts on making Crux more `alive' and `attractive'.
by Hans Bezemer 16 Mar '24

16 Mar '24

Dear fellow Crux-users, Recently there was some discussion in the IRC channel about how to make crux more `alive' and `attractive'. Being a relative new user I would like to share my thoughts. First of all, Crux has a lot of good things to offer: It's simplicity and script based orientation are unique. The package management through ports is simple but effective. Also there is some good documentation (but may be improved). And (last but not least) there's a friendly and helpful community. When I started out with Crux it took a while before I had everything up and running. Although I had used Arch for some while, went through the LFS-book twice, there was still a lot of ground to make up before I had my laptop configured the same way when using Arch. I had to hone several skills: building my own kernel, creating some udev rules, setting up networking using wpa_supplicant only (I know nm is at hand) and so on. Although the somewhat steep learning curve belongs to the way Crux works, there can be some minor improvements made which may help newcomers finding their way around more easily. First of, maybe Crux can become a rolling distro, with a new iso every month / 2 months. In practice it already seems to be. There are unofficial updated iso's and once you got everything installed everything can be kept up-to-date. As a new user I used the official iso (which is good practice I think), but after building the kernel, running a sysup was a bit of a showstopper. Almost all of the packages needed to be updated. When using the more recent unofficial iso, this is obvious not the case. Secondly, there is a lot of good documentation -especially on the Crux specific parts- but having two sources (Handbook and wiki) is somewhat confusing sometimes. Maybe merge the handbook into the wiki with an entry for installing Crux (like the installation guide on the Arch wiki)? The guide will walk the new user through a basic installation with links to several options (e.q. encrypting harddrive, using different bootloaders). At the end of the guide there can be some links to other entry (how to install packages, e.d.). It would be helpful if there is a basic `how to compile your own kernel'-tutorial. Something along the lines of `make defconfig', enabling audio and video support, untick some of the wlan firmware drivers, etc. Copying the bzImage and System.map and updating the boatloader. Lastly a guide on creating and maintaining your own repo (which is part of the charm of using Crux I think), would be very helpful. Beerman / Tim's guide would be a great starting point IMHO. https://gist.github.com/TimB87/6cf010c0c10d67faf98ae03e62ffb029 As for the documentation, for the most part it's a matter of reorganizing. Maybe a `further reading' section can be added at the end of an entry, with links to useful sources like the Arch wiki / offical kernel documentation and so on. The goal here is to keep it simple (of course ;-)) I'll be happy to help out with (re)writing some parts. What do you think? Would this be helpful? Or are there other / better options? Kind regards, Hans

9 13

ports/contrib (3.6): [notify] thunderbird: added libvpx libevent and libwebp as new dependencies
by crux＠crux.nu 30 Sep '21

30 Sep '21

commit 9663dc20927945d839806e82fee15f569357ea98 Author: Danny Rawlins <contact(a)romster.me> Date: Thu Sep 30 22:46:14 2021 +1000 [notify] thunderbird: added libvpx libevent and libwebp as new dependencies diff --git a/thunderbird/.signature b/thunderbird/.signature index d3042b9c8..3aa723add 100644 --- a/thunderbird/.signature +++ b/thunderbird/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF3zqGT9XhQbFn9Bw0Bx4QQvoP5WMldayll1diwhHp+sAY5qmd5rLgSEcxJSdD0I32SeJms989N4qBXtrEmwQCCwY= -SHA256 (Pkgfile) = 86482e21f568d5c015dca84e331f3edbaea7b06603edd326beaf44449dbda579 +RWSagIOpLGJF3wVPja+KqSJP7dvsgsm1PJm+rWGBtu+9MzRFYCRpYv/CBht2JgeRqcKlBADZmunWA3ICvdpwF7AYrq/nba+SSQE= +SHA256 (Pkgfile) = 7235bbab561b9410afb20ce9228c54de3e3b193c6e294d5cc3ea7d43a92472c7 SHA256 (.footprint) = 923d578f9d9e0dbd81a35f85c1d0228c2c29722327104100bdd991a056632803 SHA256 (thunderbird-91.1.2.source.tar.xz) = 4c63a215761d8710e9cc78c938828ff532ace33a00d0d59332b30d3d45c3b0f3 SHA256 (thunderbird.desktop) = c6bc6a66f16951c4f7560d019dad48968169aef6587cef4e98380a300078299a diff --git a/thunderbird/Pkgfile b/thunderbird/Pkgfile index 265dd8130..bb3977298 100644 --- a/thunderbird/Pkgfile +++ b/thunderbird/Pkgfile @@ -1,7 +1,7 @@ # Description: Email client from the Mozilla project # URL: https://www.thunderbird.net/en-US/ # Maintainer: Danny Rawlins, crux at romster dot me -# Depends on: alsa-lib autoconf-2.13 cbindgen clang dbus-glib gnupg gtk libidl libnotify lld nodejs nss startup-notification unzip yasm zip +# Depends on: alsa-lib autoconf-2.13 cbindgen clang dbus-glib gnupg gtk ibwebp libevent libidl libnotify libvpx lld nodejs nss startup-notification unzip zip # Optional: sccache name=thunderbird

1 0

Permission for files in Wine port
by Wawrzek Niewodniczanski 30 Sep '21

30 Sep '21

Hi, I run an update to the wine port and got an error. There is plenty of discrepancies in the footprint, but I think the most of the diff is related to permissions. Files in my build has an executable bit on. Any idea why? That's an example of the problem (I know that files are different, but they are neighbours in the error message). MISSING -rw-r--r-- root/root usr/lib32/wine/i386-unix/libd3d12.def NEW -rwxr-xr-x root/root usr/lib32/wine/i386-unix/light.msstyles.so Wawrzek -- Dr Wawrzyniec Niewodniczański or Wawrzek for short PhD in Quantum Chemistry & MSc in Molecular Engineering WWW: http://wawrzek.name E-MAIL: jobs(a)wawrzek.name Linux User #177124

1 0

ports/contrib (3.6): [notify] seatd: includes a patch that could cause the session to fail
by crux＠crux.nu 28 Sep '21

28 Sep '21

commit 7d7362e5ec9dd2efc8036233a35faf79f759cd9d Author: Tim Biermann <tbier(a)posteo.de> Date: Tue Sep 28 21:52:46 2021 +0200 [notify] seatd: includes a patch that could cause the session to fail diff --git a/seatd/.signature b/seatd/.signature index f0d9fa7b4..cf244e0d4 100644 --- a/seatd/.signature +++ b/seatd/.signature @@ -1,6 +1,7 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF36Smb1uIrwdifvd1VfKZqtKBCWmvS2o93QkUiF5Z9/k0jEM7EtAlQr+fEM/gR+z0FpMNYxgDPK8ONLWiGvKQIAA= -SHA256 (Pkgfile) = f9e165dc464282e3f55115a334a8a93175fd35d59b44fc9a1c7a2401b3f67a14 +RWSagIOpLGJF39+3lUcKSkpHKHbGfwgqOKnOHJHbqTVAq1ZXcVtJLHDbNxysapcSOPgi7JU+5gF6KXze5Nn/RTpoeNjRFS7ZQgg= +SHA256 (Pkgfile) = 2b5f99f6b553861197de4e92e6854ba499dba803177a6a4514184bc11b67eb46 SHA256 (.footprint) = 53478c164d996ba869bccf52a85204378233aa37908ddaa9a6c76e760de6faf8 SHA256 (seatd-0.6.2.tar.gz) = 1e2745ea39266de40d5beb24011782da95468b81ecfa410dd0db5ff75c665727 SHA256 (seatd.service) = 1cc6ff63f8d2b11aa6108f650643b972fcb1bb6bf960b65b78be2aeafdfa282d +SHA256 (vt.patch) = 9e3f8bbff6412cf8744eea143331c09202d804ca3c99326ab6729a517c5093b3 diff --git a/seatd/Pkgfile b/seatd/Pkgfile index 85d00de54..19f1824fe 100644 --- a/seatd/Pkgfile +++ b/seatd/Pkgfile @@ -5,11 +5,14 @@ name=seatd version=0.6.2 -release=1 +release=2 source=(https://github.com/kennylevinsen/seatd/archive/$version/$name-$vers… - seatd.service) + seatd.service + vt.patch) build() { + patch -Np1 -d $name-$version -i $SRC/vt.patch + meson setup $name-$version build \ --prefix=/usr \ --buildtype=plain \ diff --git a/seatd/vt.patch b/seatd/vt.patch new file mode 100644 index 000000000..910e47679 --- /dev/null +++ b/seatd/vt.patch @@ -0,0 +1,186 @@ +From 2eee9aa445e3f9dc6a7ca115489f87b10f60b9ba Mon Sep 17 00:00:00 2001 +From: Kenny Levinsen <kl(a)kl.wtf> +Date: Mon, 20 Sep 2021 23:43:10 +0200 +Subject: [PATCH] seatd: Implement ping request to wake up later + +When device open or close messages are sent to seatd, libseat must read +messages from the socket until it sees the associated response message. +This means that it may drain enable/disable seat events from the socket, +queueing them internally for deferred processing. + +As the socket is drained, the caller will not wake from a poll and have +no reason to dispatch libseat. To ensure that these messages would not +be left in the queue, 6fa82930d0c5660eea3102989c765dc864514e36 made it +so that open/close calls would execute all queued events just before +returning. + +Unfortunately, this had the side-effect of having events fire from the +stack of libseat_open_device or libseat_close_device, which we now see +cause problems in compositors. Specifically, an issue has been observed +where libinput end up calling libseat_close_device, which in turn +dispatch a disable seat event that calls libinput_suspend. libinput does +not like this. + +Instead, remove the execution from libseat_open_device and +libseat_close_device, and instead make a "ping" request to seatd if +events have been queued. The response to this will wake us up and ensure +that dispatch is called. +--- + include/protocol.h | 2 ++ + libseat/backend/seatd.c | 45 +++++++++++++++++++++++++++++++++++++---- + seatd/client.c | 22 ++++++++++++++++++++ + 3 files changed, 65 insertions(+), 4 deletions(-) + +diff --git a/include/protocol.h b/include/protocol.h +index b3361ba..cb994fc 100644 +--- a/include/protocol.h ++++ b/include/protocol.h +@@ -15,6 +15,7 @@ + #define CLIENT_CLOSE_DEVICE CLIENT_EVENT(4) + #define CLIENT_DISABLE_SEAT CLIENT_EVENT(5) + #define CLIENT_SWITCH_SESSION CLIENT_EVENT(6) ++#define CLIENT_PING CLIENT_EVENT(7) + + #define SERVER_SEAT_OPENED SERVER_EVENT(1) + #define SERVER_SEAT_CLOSED SERVER_EVENT(2) +@@ -22,6 +23,7 @@ + #define SERVER_DEVICE_CLOSED SERVER_EVENT(4) + #define SERVER_DISABLE_SEAT SERVER_EVENT(5) + #define SERVER_ENABLE_SEAT SERVER_EVENT(6) ++#define SERVER_PONG SERVER_EVENT(7) + #define SERVER_ERROR SERVER_EVENT(0x7FFF) + + #include <stdint.h> +diff --git a/libseat/backend/seatd.c b/libseat/backend/seatd.c +index 85df9f5..26308d1 100644 +--- a/libseat/backend/seatd.c ++++ b/libseat/backend/seatd.c +@@ -36,6 +36,7 @@ struct backend_seatd { + const struct libseat_seat_listener *seat_listener; + void *seat_listener_data; + struct linked_list pending_events; ++ bool awaiting_pong; + bool error; + + char seat_name[MAX_SEAT_LEN]; +@@ -243,6 +244,12 @@ static int dispatch_pending(struct backend_seatd *backend, int *opcode) { + while (connection_get(&backend->connection, &header, sizeof header) != -1) { + packets++; + switch (header.opcode) { ++ case SERVER_PONG: ++ // We care about whether or not the answer has been ++ // read from the connection, so handle it here instead ++ // of pushing it to the pending event list. ++ backend->awaiting_pong = false; ++ break; + case SERVER_DISABLE_SEAT: + case SERVER_ENABLE_SEAT: + if (queue_event(backend, header.opcode) == -1) { +@@ -450,6 +457,36 @@ static const char *seat_name(struct libseat *base) { + return backend->seat_name; + } + ++static int send_ping(struct backend_seatd *backend) { ++ struct proto_header header = { ++ .opcode = CLIENT_PING, ++ .size = 0, ++ }; ++ if (conn_put(backend, &header, sizeof header) == -1 || conn_flush(backend) == -1) { ++ return -1; ++ } ++ return 0; ++} ++ ++static void check_pending_events(struct backend_seatd *backend) { ++ if (linked_list_empty(&backend->pending_events)) { ++ return; ++ } ++ if (backend->awaiting_pong) { ++ return; ++ } ++ ++ // We have events pending execution, so a dispatch is required. ++ // However, we likely already drained our socket, so there will not be ++ // anything to read. Instead, send a ping request to seatd, so that the ++ // user will be woken up by its response. ++ if (send_ping(backend) == -1) { ++ log_errorf("Could not send ping request: %s", strerror(errno)); ++ return; ++ } ++ backend->awaiting_pong = true; ++} ++ + static int open_device(struct libseat *base, const char *path, int *fd) { + struct backend_seatd *backend = backend_seatd_from_libseat_backend(base); + if (backend->error) { +@@ -481,11 +518,11 @@ static int open_device(struct libseat *base, const char *path, int *fd) { + goto error; + } + +- execute_events(backend); ++ check_pending_events(backend); + return rmsg.device_id; + + error: +- execute_events(backend); ++ check_pending_events(backend); + return -1; + } + +@@ -516,11 +553,11 @@ static int close_device(struct libseat *base, int device_id) { + goto error; + } + +- execute_events(backend); ++ check_pending_events(backend); + return 0; + + error: +- execute_events(backend); ++ check_pending_events(backend); + return -1; + } + +diff --git a/seatd/client.c b/seatd/client.c +index 1bfe94a..220c5d3 100644 +--- a/seatd/client.c ++++ b/seatd/client.c +@@ -309,6 +309,20 @@ error: + return client_send_error(client, errno); + } + ++static int handle_ping(struct client *client) { ++ struct proto_header header = { ++ .opcode = SERVER_PONG, ++ .size = 0, ++ }; ++ ++ if (connection_put(&client->connection, &header, sizeof header) == -1) { ++ log_errorf("Could not write response: %s", strerror(errno)); ++ return -1; ++ } ++ ++ return 0; ++} ++ + static int client_handle_opcode(struct client *client, uint16_t opcode, size_t size) { + int res = 0; + switch (opcode) { +@@ -372,6 +386,14 @@ static int client_handle_opcode(struct client *client, uint16_t opcode, size_t s + res = handle_disable_seat(client); + break; + } ++ case CLIENT_PING: { ++ if (size != 0) { ++ log_error("Protocol error: invalid ping message"); ++ return -1; ++ } ++ res = handle_ping(client); ++ break; ++ } + default: + log_errorf("Protocol error: unknown opcode: %d", opcode); + res = -1; +-- +2.32.0 +

1 0

ports/core (3.6): [notify] exim: 4.94.2 -> 4.95
by crux＠crux.nu 28 Sep '21

28 Sep '21

commit c5e7f68dc67ce555d84a2c8066a76047b8b264c9 Author: Tim Biermann <tbier(a)posteo.de> Date: Tue Sep 28 21:44:23 2021 +0200 [notify] exim: 4.94.2 -> 4.95 Contains multiple security fixes, see https://git.exim.org/exim.git/blob/fb62e7a12be6593a5432fba4a9e4468c34feef5c… diff --git a/exim/Pkgfile b/exim/Pkgfile index e081aab9..4c27bf5c 100644 --- a/exim/Pkgfile +++ b/exim/Pkgfile @@ -4,7 +4,7 @@ # Depends on: db openssl libpcre name=exim -version=4.94.2 +version=4.95 release=1 source=(https://ftp.exim.org/pub/exim/exim4/$name-$version.tar.xz \ $name $name-config.patch)

1 0

ports/opt (3.6): [notify] php: update to 8.0.11, includes fix for CVE-2021-21706
by crux＠crux.nu 25 Sep '21

25 Sep '21

commit 43b6aed4fd00ac9a85af85e6f2bd21a6040bfee7 Author: Juergen Daubert <jue(a)jue.li> Date: Sat Sep 25 11:33:18 2021 +0200 [notify] php: update to 8.0.11, includes fix for CVE-2021-21706 diff --git a/mod_php/.signature b/mod_php/.signature index 825fcd19a..bcf3d6496 100644 --- a/mod_php/.signature +++ b/mod_php/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/XALSZ+7IyxiIDrgQgXqzhYrwNfVBNyf373GGe3xhQi6YeoXKnJwmUdYV6b9KaW+Rjlm67GU4VC9MF8weVu7HwM= -SHA256 (Pkgfile) = 288f9fb7b1bddc852afe3519364287b6e953850f5ad34e6c29339afa5cf25c60 +RWSE3ohX2g5d/Q8EYDmoyl8nuIGfDV5NhO6M4FJPwyzePPEJh+UOJDSzRyPQope5t5kAj1iTliKpPnUzlQjuIwNtX+fiTykYogE= +SHA256 (Pkgfile) = 6a41b645ec600d325e64d5fc8a769f722730a05af02519d760a96f5a266e83c9 SHA256 (.footprint) = 7fa4482315662d626464b194385ae557ec401ff110bea6d24f6f48efc315ceba -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/mod_php/Pkgfile b/mod_php/Pkgfile index 1d95f32d8..fce359663 100644 --- a/mod_php/Pkgfile +++ b/mod_php/Pkgfile @@ -4,7 +4,7 @@ # Depends on: apache libpcre2 name=mod_php -version=8.0.10 +version=8.0.11 release=1 source=(https://php.net/distributions/php-$version.tar.xz) diff --git a/php-fcgi/.signature b/php-fcgi/.signature index 37c01f6d4..eed86f625 100644 --- a/php-fcgi/.signature +++ b/php-fcgi/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/ebx/aX3H0AAd8ne8pOon6/fJRmcEwwpy+rYBG/QQGsIC9hJs/Txkq+vNrQaDFJmr2eXvv+6j6VY5eZadFqdngg= -SHA256 (Pkgfile) = a22ebf1c3da080af527344fc2300ec7531d70dbc9ba8d5cf4fefd9b1fc344620 +RWSE3ohX2g5d/cDxNy87X1viSR2shbU9NYXxlwrG5u+C4yjJ9+s0DQWuJ6hSkODEsx/uW23uR0Zr5SH9iq4BYm3BmVKba/JmzwM= +SHA256 (Pkgfile) = ad87e417571c4e4a59e69b25dc4b07c6c27434e0f4d1734112aa89b745055075 SHA256 (.footprint) = 073d817f449e60b58f4c904bd4ef54ddad9bd0ab946ee178956622bf76d5501b -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 SHA256 (php-fcgi) = 058feaf2d8ad8ed61a4191512eb2151b8ed87fd92ce469ee8bab1812c0cb6471 diff --git a/php-fcgi/Pkgfile b/php-fcgi/Pkgfile index fb5c6e242..476d345ab 100644 --- a/php-fcgi/Pkgfile +++ b/php-fcgi/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libpcre2 libxml2 name=php-fcgi -version=8.0.10 +version=8.0.11 release=1 source=(https://php.net/distributions/php-$version.tar.xz php-fcgi) diff --git a/php-fpm/.signature b/php-fpm/.signature index bbbc3a6b8..aa4c461ee 100644 --- a/php-fpm/.signature +++ b/php-fpm/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/VN6xWpw8KuHe9cG2QQp6kqx0YguTp8L8tf4nzlAxVDmpZNO88hCTBjaolURTcaoLrdDxxh5NWWG1sqeNgC8kgg= -SHA256 (Pkgfile) = f2c42a703644d3120ef8e8348633e7cccabbd3e77f15b1f9437e5a2ad50440fb +RWSE3ohX2g5d/cGjXDoKrTFxParx3rpUMEBRn8x/eA4QBONOdmoRwk8zEwECYpliYPr27/dglzk2qiD1H5jG18/5GpjKRHkgmQ8= +SHA256 (Pkgfile) = 15bb2a3f125e9af2e71c724ea5a6d6416e361f186a97fed0c983e71bc26c90a1 SHA256 (.footprint) = a26b7d8af42742c284dd40e96fb4c4d1ba451ac9bf4f714c8f12fb6975ffa5fe -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 SHA256 (php-fpm) = a1fde2295e819a33d492cfdeca8d4e0e8de08b8d051c95c4758ba01da38354b7 diff --git a/php-fpm/Pkgfile b/php-fpm/Pkgfile index b82dc3d6f..9798b85e0 100644 --- a/php-fpm/Pkgfile +++ b/php-fpm/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libpcre2 libxml2 name=php-fpm -version=8.0.10 +version=8.0.11 release=1 source=(https://php.net/distributions/php-$version.tar.xz php-fpm) diff --git a/php-ftp/.signature b/php-ftp/.signature index 9fa03f752..8b088e923 100644 --- a/php-ftp/.signature +++ b/php-ftp/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/WcsYgfiFKa3FYYPeVv4SEdh6qks0k+4D4qicRW7l2Izumcin5cVIECPqi47B/OSMC/Z8n79Ut3LtHPhHVFP1AU= -SHA256 (Pkgfile) = 9185db516689cb26d49708635ede8f8e8a6a3ecd55e86e0b9486a488fbbf13ca +RWSE3ohX2g5d/bdq2JODAU3SI6K0phtmkKb1B3JDiFxSqv+xhQOOtatrxfJrXZqXF6mdlTY7TeQ/RTN90MV1nToiRRFkXvPSlgM= +SHA256 (Pkgfile) = 643426fcf945783ada2b199b4ca66c3454e8e0c4d25fd597fbd760565dcb9f7e SHA256 (.footprint) = 4b6e9e791f10bb007a541c6a4cfe6a189d549592939bdf3e04c5bd0f25a4bfa0 -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/php-ftp/Pkgfile b/php-ftp/Pkgfile index ae41a5e0f..02f1f136d 100644 --- a/php-ftp/Pkgfile +++ b/php-ftp/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Juergen Daubert, jue at crux dot nu name=php-ftp -version=8.0.10 +version=8.0.11 release=1 source=(https://www.php.net/distributions/php-$version.tar.xz) diff --git a/php-gd/.signature b/php-gd/.signature index 18a9d8d81..206b57d78 100644 --- a/php-gd/.signature +++ b/php-gd/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/SFHnsIsr6gn6hd8VYoFvVV65rO3f9UgjQnexZfiIhhwknLXjAZDcycXcD7GgJatuXvxy3TOisv2WbSzMglPCg8= -SHA256 (Pkgfile) = bf87be367110435d16910716ecf0b65abc008815985a62803ba60ac989a29643 +RWSE3ohX2g5d/dMnQ3RekNOe/29GIGLc8Uqz4A87GSsiUimJK4oX/VedSg4HSRXS44Iu3QxuJMx7CV05j3HJmejv6CVKOU1wqQc= +SHA256 (Pkgfile) = 8a86c5836258ea147808a7e0de559374f28a1dc79234a6e5ef266923a4ca3199 SHA256 (.footprint) = 09e41333252c613bbc54155a95e91919aedf35e3fe90607f941528ac9f1a39bb -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/php-gd/Pkgfile b/php-gd/Pkgfile index 1e6f42cc1..1123ac7fe 100644 --- a/php-gd/Pkgfile +++ b/php-gd/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libgd name=php-gd -version=8.0.10 +version=8.0.11 release=1 source=(https://www.php.net/distributions/php-$version.tar.xz) diff --git a/php-gettext/.signature b/php-gettext/.signature index 635712f30..753f7de00 100644 --- a/php-gettext/.signature +++ b/php-gettext/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/dOkxe7SpI3wPOcIPIfWGoAEmnzVvXnOUV/EgCUJDd/msDiJARRmn0Pa1pyI7FDnTQVL/IriGEMBpow3XjhzOgA= -SHA256 (Pkgfile) = 54b487d175ed0cd15f03168e9585be8b66c2cdc7477331fa58b9c3f857d6feed +RWSE3ohX2g5d/S7Yxu4B+Ye7uj84X34oD+Nv6pFBK/8Ry7blAeHTwJJRSo8vAOYJlMjERlAYRdBZZr256SIwxVnWQa3k0t/e/go= +SHA256 (Pkgfile) = 1ec12bab51298d4aaaa5bf83aaffe5d11c90b64272a6ff75a7748f873f5db6a6 SHA256 (.footprint) = f2188408bdd37cf12c2eb9ef545b934e6a10d8faf52d3b961cd6c7649bdfaf9a -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/php-gettext/Pkgfile b/php-gettext/Pkgfile index 7f1c3a19e..c742328ac 100644 --- a/php-gettext/Pkgfile +++ b/php-gettext/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Juergen Daubert, jue at crux dot nu name=php-gettext -version=8.0.10 +version=8.0.11 release=1 source=(https://www.php.net/distributions/php-$version.tar.xz) diff --git a/php-mbstring/.signature b/php-mbstring/.signature index 620e166f4..7e3011692 100644 --- a/php-mbstring/.signature +++ b/php-mbstring/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/UbCNMacEL+sYhA6xVH5WoxrdNXKosrHOqGHd1ITRFsefHJ6SwAgrEbiosK8BbXAOXd5rP3O+CGbX+JDpRSnVgc= -SHA256 (Pkgfile) = 6c4faa64cd191e559384f9c3f0307efc9a7cfac4aa7d738b97c2d960bc589f52 +RWSE3ohX2g5d/dtppO+Y/mpV3DNIQX/GXferWZFoRd+084/OLVHc8soph1bsoB71QOe+Rv+J1okJXEgkErJ29s6y2brEhxbyrg8= +SHA256 (Pkgfile) = 6492ce48734ce1570ae526c4b4e04ba497de65cca282658a661d1622975461e1 SHA256 (.footprint) = 4a444295762f936750fb32f977171aecc73d9347bf51bace13d7f9dfc200812e -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/php-mbstring/Pkgfile b/php-mbstring/Pkgfile index 6ae5c03c5..1fd2da8ad 100644 --- a/php-mbstring/Pkgfile +++ b/php-mbstring/Pkgfile @@ -4,7 +4,7 @@ # Depends on: oniguruma name=php-mbstring -version=8.0.10 +version=8.0.11 release=1 source=(https://www.php.net/distributions/php-$version.tar.xz) diff --git a/php-mysql/.signature b/php-mysql/.signature index 991e331c2..766e99e18 100644 --- a/php-mysql/.signature +++ b/php-mysql/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/Zs8FvwAJ2nKLJd3/N5p63gk+HXuvZYh4pqXZjs19xQA6ha7PKmH7v0uq5reNYuiWp/avohz9K2Iijx5bJbU/wo= -SHA256 (Pkgfile) = 2f0117d8716f92f811da775f37b5da5a684f3af37417d9a2f623c42271784a4a +RWSE3ohX2g5d/ZQJKM7OwRUBMse9UNI6vmLCviFWPDU3nEHbe/CQBfRpXq27D4XuQZXHk6PPulkw82lZBZyUY6cXl1JCa5jhtAg= +SHA256 (Pkgfile) = 253e5e5b9ccdc53e0b66566ff67cd178aa24cb590e937d89c85fcda6267453c9 SHA256 (.footprint) = 0500f66a60a1c3d5951694c22f29e7e34a6dbc8e5a1487119ff56db1ea7cdda3 -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/php-mysql/Pkgfile b/php-mysql/Pkgfile index d6faa1c74..aab6d0c72 100644 --- a/php-mysql/Pkgfile +++ b/php-mysql/Pkgfile @@ -4,7 +4,7 @@ # Depends on: mysql name=php-mysql -version=8.0.10 +version=8.0.11 release=1 source=(https://php.net/distributions/php-$version.tar.xz) diff --git a/php-sockets/.signature b/php-sockets/.signature index 913d0ac99..bc8e26d73 100644 --- a/php-sockets/.signature +++ b/php-sockets/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/ZtkwPYc+JlXTMVauMMSSdXFVhDmuZVtADf2AynCidMoZLYx3C8AVfgAtOEq0YBwd43/JAkNgfXNnKBcmc+j7gI= -SHA256 (Pkgfile) = ac31b1293961b8bd420d4972d6aa278dec518c324eee9fcfd0e822cf54a33763 +RWSE3ohX2g5d/VMEgDbMWrNl7DkOneNDdsxSUvGU3a+0trWHm3Fkd2994PvLWw90ONGr8gbevVbbCZRXhkThVAFZtGewycNWBQI= +SHA256 (Pkgfile) = f609ea028e89aad8a479b269caae2c707f7f87494b778515b38412a6af7cea28 SHA256 (.footprint) = 1a0e33807dcda8d11408be8b6356860cac8daea5a94d4e9a87e535fbf778f04e -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/php-sockets/Pkgfile b/php-sockets/Pkgfile index ed0a90304..b68ca5ef2 100644 --- a/php-sockets/Pkgfile +++ b/php-sockets/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Juergen Daubert, jue at crux dot nu name=php-sockets -version=8.0.10 +version=8.0.11 release=1 source=(https://www.php.net/distributions/php-$version.tar.xz) diff --git a/php-sqlite3/.signature b/php-sqlite3/.signature index ad4c15f33..13842532e 100644 --- a/php-sqlite3/.signature +++ b/php-sqlite3/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/YWTG2t5494X5nQL4lPp16STdmkyaBRPC9aBV0yFzobEYGLuDSfkJYgLgwHdMYytUaBBXPQcljhyZYWo/96UXwg= -SHA256 (Pkgfile) = 5145b9b45db66998d9cf24f38a44a6e66a7908f7fe2ccc75abeaff9fec43d3d7 +RWSE3ohX2g5d/e1nF2fdVOL8itz29Jm259umRgEUAxMTaFwml9VPd5ByTDNIMAhqGhyakaHS8ltAs/hcdK6nKyRaSzxt+Id45QI= +SHA256 (Pkgfile) = ea085310daeb63ac7c0663d75f01d58d1547b1459dbc6a617f4385e8ffe91865 SHA256 (.footprint) = e626528b1bc2b3ce187cc979172f24c489075e0bc584aeb1d082b2f7197d6e49 -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/php-sqlite3/Pkgfile b/php-sqlite3/Pkgfile index cf17bc5e9..f13f76f24 100644 --- a/php-sqlite3/Pkgfile +++ b/php-sqlite3/Pkgfile @@ -4,7 +4,7 @@ # Depends on: sqlite3 name=php-sqlite3 -version=8.0.10 +version=8.0.11 release=1 source=(https://php.net/distributions/php-$version.tar.xz) diff --git a/php-zip/.signature b/php-zip/.signature index dd5cede43..9d301fa25 100644 --- a/php-zip/.signature +++ b/php-zip/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/dYNqjAx2sSygDKGgqjPMRgCOGVapBYSuN6Mt9NVOz2wsXuE8x3MbLRFaxZPOF5g+GpK3TN2vUT9A8CSBxxbdAY= -SHA256 (Pkgfile) = 2737c8a494f152b25b47d8b4a4ec119d5a46cc359f46cc063cf5789a05d34ece +RWSE3ohX2g5d/c271h3+r60YEc+x/rDuHINoGZ2BK3VPy9wvl2HcOZAhiiXlV3n5eiscYbmgTJwM3xGOY0cFAHJy6ti2EIyHfQA= +SHA256 (Pkgfile) = 0b85c1fed6dc71a7242c0681f181f0fc5dbe7dc8bbf211884e997c3c4c2f6bb3 SHA256 (.footprint) = 0ba08044c2d47be4c86015de875a10f15dfee8367b932c5466a0212da28e4203 -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/php-zip/Pkgfile b/php-zip/Pkgfile index 6204c28d9..90f86209f 100644 --- a/php-zip/Pkgfile +++ b/php-zip/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libzip name=php-zip -version=8.0.10 +version=8.0.11 release=1 source=(https://www.php.net/distributions/php-$version.tar.xz) diff --git a/php/.signature b/php/.signature index e888d83e0..ef1e777d5 100644 --- a/php/.signature +++ b/php/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/Rs9olAPXl4WMDO/t6ZoSaL71Ia9j4Qnz+QYhQ8j2jaMxGx38kX8xby0pDfwJknxRVbRdEbWpumuQD5hPMtpqw8= -SHA256 (Pkgfile) = 131ca8ebc4253519fae6d06f77f5c5d810d23a993da74ecaa1204cdf56bfb6dc +RWSE3ohX2g5d/RaVR7dM95kRlZh8HlXihRokGh8BUuvkJ89Qy6eFhLCNq8qCaZytKfrmEN4laicHjHt/NdjA2d+w3684ZRR4ogQ= +SHA256 (Pkgfile) = 98caf8b3ac0926c4d1ee1194c5beb57effe81dd6c2741002ca710163229520a3 SHA256 (.footprint) = b9886c1be197b61c9899615eacc7ff77b0e1b6be62a6f0892d2e6d73cda5d0b0 -SHA256 (php-8.0.10.tar.xz) = 66dc4d1bc86d9c1bc255b51b79d337ed1a7a035cf71230daabbf9a4ca35795eb +SHA256 (php-8.0.11.tar.xz) = e3e5f764ae57b31eb65244a45512f0b22d7bef05f2052b23989c053901552e16 diff --git a/php/Pkgfile b/php/Pkgfile index 0559baf34..42b0cb847 100644 --- a/php/Pkgfile +++ b/php/Pkgfile @@ -4,7 +4,7 @@ # Depends on: bzip2 libpcre2 libxml2 curl db gdbm name=php -version=8.0.10 +version=8.0.11 release=1 source=(https://php.net/distributions/php-$version.tar.xz)

1 0

ports/contrib (3.6): [notify] crypto++: 8.5.0 -> 8.6.0 security update CVE-2021-40530 plaintext recovery attack on OpenPGP ciphertexts encrypted with ElGamal. Only certain combinations of sender and receiver software are exposed. We found that GPG (via Libgcrypt) and Crypto++ are affected when acting as sender, while Go is not. https://ibm.github.io/system-security-research-updates/2021/07/20/insecurity-elgamal-pt1#faq
by crux＠crux.nu 25 Sep '21

25 Sep '21

commit bbc19c9988a8b5afede2abb2c2ac4b497eec79fb Author: Danny Rawlins <contact(a)romster.me> Date: Sat Sep 25 10:44:41 2021 +1000 [notify] crypto++: 8.5.0 -> 8.6.0 security update CVE-2021-40530 plaintext recovery attack on OpenPGP ciphertexts encrypted with ElGamal. Only certain combinations of sender and receiver software are exposed. We found that GPG (via Libgcrypt) and Crypto++ are affected when acting as sender, while Go is not. https://ibm.github.io/system-security-research-updates/2021/07/20/insecurit… diff --git a/crypto++/.footprint b/crypto++/.footprint index d45d138a3..386d1b0a4 100644 --- a/crypto++/.footprint +++ b/crypto++/.footprint @@ -96,6 +96,7 @@ drwxr-xr-x root/root usr/include/cryptopp/ -rw-r--r-- root/root usr/include/cryptopp/kalyna.h -rw-r--r-- root/root usr/include/cryptopp/keccak.h -rw-r--r-- root/root usr/include/cryptopp/lea.h +-rw-r--r-- root/root usr/include/cryptopp/lsh.h -rw-r--r-- root/root usr/include/cryptopp/lubyrack.h -rw-r--r-- root/root usr/include/cryptopp/luc.h -rw-r--r-- root/root usr/include/cryptopp/mars.h @@ -193,8 +194,8 @@ drwxr-xr-x root/root usr/include/cryptopp/ -rw-r--r-- root/root usr/include/cryptopp/zinflate.h -rw-r--r-- root/root usr/include/cryptopp/zlib.h drwxr-xr-x root/root usr/lib/ -lrwxrwxrwx root/root usr/lib/libcryptopp.so -> libcryptopp.so.8.5.0 -lrwxrwxrwx root/root usr/lib/libcryptopp.so.8 -> libcryptopp.so.8.5.0 --rwxr-xr-x root/root usr/lib/libcryptopp.so.8.5.0 +lrwxrwxrwx root/root usr/lib/libcryptopp.so -> libcryptopp.so.8.6.0 +lrwxrwxrwx root/root usr/lib/libcryptopp.so.8 -> libcryptopp.so.8.6.0 +-rwxr-xr-x root/root usr/lib/libcryptopp.so.8.6.0 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libcryptopp.pc diff --git a/crypto++/.signature b/crypto++/.signature index a7f9148b3..5f5484119 100644 --- a/crypto++/.signature +++ b/crypto++/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF37dKKtHkQmEXqz2npoRq0wKJsjaber4qjUFFKr+QQz/xJ2mVYhtocCVTKtnw3N4HX2e5/o1R2zmPMZi2pnJ5KQE= -SHA256 (Pkgfile) = bb4ba5f181fdf59914a4309b015bce27bdb29edd31dfbc9ca0edcf9a391263d5 -SHA256 (.footprint) = 10db39e078e4f89a01ccc4e9aec652eb88dc7273fe792e61d362491c913aa3c6 -SHA256 (cryptopp850.zip) = 95fc50d59488ebf61a735cce2b2ec2c2561fc682077c7b496273d65a1ed93d9e +RWSagIOpLGJF3zt91CFRdDDBwKuFMTJkU5ly2GEBhMYyLQdNGkr6P2rjA7O0WoyGWv9SzGtMbUbbykTGltYQslVT+r+giYhxUQI= +SHA256 (Pkgfile) = bb1345fb0769f0006f614abb65739e562a4400e1eef8cb90ad3c3662ac88a5fb +SHA256 (.footprint) = bb802f25fc40dde765471d18343ca1406de088fb804937929353c98b0d395ccc +SHA256 (cryptopp860.zip) = 20aa413957d9c8ae353ee2f7747bd7ac392f933c60a53e3fd1e41cadbc48d193 diff --git a/crypto++/Pkgfile b/crypto++/Pkgfile index 9275c2369..721001eca 100644 --- a/crypto++/Pkgfile +++ b/crypto++/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Danny Rawlins, crux at romster dot me name=crypto++ -version=8.5.0 +version=8.6.0 release=1 source=(https://www.cryptopp.com/${name//++/pp}${version//./}.zip)

1 0

Wayland support on CRUX
by tbier＠posteo.de 23 Sep '21

23 Sep '21

Hi everybody, this might have been overdue, as the changes have been made already. With the recent commits to mainly xorg repository, CRUX supports Wayland as a modern replacement for X11! The default is still X11, Wayland is purely optional at this point. If you want to try it out, I have imported contrib/sway as a i3 compatible Wayland alternative. This means you can carry over your i3 config to sway, if you have that. To my knowledge, tsaops kf5 repo should work fine, and jaegers mate repository should work too. If there are any questions/problems/hints/.., please post them here or preferably open a ticket on flyspray to make it easier to track. Personally I have been using wayland with sway for soon 2 years and have been more than happy with it. Best regards, Tim

3 4

no X anymore
by Erich Eckner 22 Sep '21

22 Sep '21

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Good morning, fellow CRUXers! After yesterday's update, today my X refused to start without any obvious errors: `slim -d` does nothing without any errors and with 0 exit code, when omitting the `-d`, I get exit code 1 and the error "/usr/bin/xauth: file /var/run/slim.auth does not exist" although the file exists (owned by root with rw-------). I uploaded the output of `strace slim` to https://eckner.net/log - maybe, someone of you has an idea, what's going on, here? regards, Erich -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE3p92iMrPBP64GmxZCu7JB1Xae1oFAmFKq8kACgkQCu7JB1Xa e1rUghAAtUXtW79P66INnlxDH6p/GEDZr3sITHJFbDm1U6fsNoeKciSVTXLoSwZy np4Rio8keBzyDo/Y0QVq4+zlJv9YeTt7EWt5+n23XH4YlMnYs3sLUlH78wj2Oi2I MCeT7cL0cyNgYuxW/wuQWH+YPr7tfQguI0P5xllNZ8PM+89RgEOdYdlBlJ/lD2cz JtWRmURV/ziT8a7OiRjOeitYlDQr5eqjXemFJ3h15HfSgvPftpS4Wpqzwz9stvB4 yeKdp2oHYRclvtjwBM9SqjwLCLDPjvxCGf4oOpQ8MJQ4+E622V1SHXloNIH8wdu7 hIjacG+peLgB0GkEiD3uRST8BXO2I08dc8b3aoM+fwYzFcWtLO2o7ULk/8k9LZ7y GmFWDs0ZJSaQga3uMPXdoCdspHOUTAi5iJXg6F+awNO538sPHeVBkpe3XDBLLWlB FGEt5lcDIZOJ/RZczd5o5x6SMvJcfCJryysN6buw8kU3NMI/ucrSJNf5D1W+J7Hj MrsMVWkyaX+bUx9ZeWAoEKJEhzJ4IsT+o6wHyxsDfQinIPTTEM7CmDLGKVtbw9q+ kwgcPFG/ZE1G30AWEhcun5m8wIFU0vbzXwTAtncjNn5Ic8nmB+ZHqm9NilppEiE6 xn9XO+e+F/QYD2Wdc/gNHCTj1JAd/lDSjtZfA5BHGbvaeTatDHw= =xWLu -----END PGP SIGNATURE-----

4 5

xorg-server 1.20.13-4 fixed my problem
by Xavier 22 Sep '21

22 Sep '21

The latest xorg-server 1.20.13-4 fixed the problem I had. Thanks for your hard work, Xavier

1 0