April 2025 - CRUX - lists.crux.nu

perl 5.36.3 CVE patch
by Steffen Nurpmeso 29 Apr '25

29 Apr '25

Hello. This was posted on ossec, and applies with lots of offset. From 87f42aa0e0096e9a346c9672aa3a0bd3bef8c1dd Mon Sep 17 00:00:00 2001 From: Karl Williamson <khw(a)cpan.org> Date: Wed, 18 Dec 2024 18:25:29 -0700 Subject: [PATCH] CVE-2024-56406: Heap-buffer-overflow with tr// This was due to underallocating needed space. If the translation forces something to become UTF-8 that is initially bytes, that UTF-8 could now require two bytes where previously a single one would do. (cherry picked from commit f93109c8a6950aafbd7488d98e112552033a3686) --- op.c | 1 + 1 file changed, 1 insertion(+) diff --git a/op.c b/op.c index 69ff030e88eb..298b2926338a 100644 --- a/op.c +++ b/op.c @@ -6881,6 +6881,7 @@ S_pmtrans(pTHX_ OP *o, OP *expr, OP *repl) * same time. But otherwise one crosses before the other */ if (t_cp < 256 && r_cp_end > 255 && r_cp != t_cp) { can_force_utf8 = TRUE; + max_expansion = MAX(2, max_expansion); } } --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)

1 1

CruxEX 3.8 Linux Live System based on CRUX 3.8 released 250421 :: Build 250427
by C A Exton 29 Apr '25

29 Apr '25

*CruxEX 2025 64 bit Linux Live System* is based on CRUX 3.8 (latest version, released 250421). CruxEX 3.8 2025 uses the LXDE Desktop environment. I have replaced the original CRUX kernel with “my” special kernel 6.14.2-amd64-exton with support for “extra everything”. UNIQUE CruxEX 3.8 Build 250427 is – as my previous CRUX-remasters – unique in the world. I.e. there is no other CRUX Live CD/USB (as far as I know). In any case, not for downloading. The good thing with CruxEX is that it is a live system (which CRUX original isn’t) and that you can run CruxEX super fast from RAM. Also that you can install CruxEX to hard drive in about 5 minutes and then have a ready-to-go CRUX desktop system. You can after that install any (extra) desktop environment you like. NOTE also: To make CRUX original ready for everyday use will normally take 2 – 3 days! ABOUT Refracta Snapshot With Refracta Snapshot you can very easy create you own CRUX Live Installable System. I mean change everything to your liking and then create a new ISO. That can be done after a hard drive installation using Refracta Installer. If you have plenty of RAM you can even create a new ISO while running CruxEX live! Study ALL INSTALLED packages in CruxEX 3.8: https://cruxex.exton.se/cruxex-3.8-installed-packages-250427.txt <https://cruxex.exton.se/cruxex-3.8-installed-packages-250427.txt> Watch this enthusiastic YouTube VIDEO ABOUT CruxEX 3.7: https://www.youtube.com/watch?v=EYV59WBWXps <https://www.youtube.com/watch?v=EYV59WBWXps> SCREENSHOTS 1. The LXDE Desktop for the live user in Build 250427: https://cruxex.exton.se/cruxex-3.8-vbox-250427.jpg <https://cruxex.exton.se/cruxex-3.8-vbox-250427.jpg> 2. The LXDE Desktop for root in Build 250427: https://cruxex.exton.se/cruxex-3.8-root-fullscreen-vbox-250427.jpg <https://cruxex.exton.se/cruxex-3.8-root-fullscreen-vbox-250427.jpg> 3. Installing Grub in VirtualBox: https://cruxex.exton.se/cruxex-3.8-vbox-grub-install-250427.jpg <https://cruxex.exton.se/cruxex-3.8-vbox-grub-install-250427.jpg> 4. The Live boot screen: https://cruxex.exton.se/cruxex-3.8-live-boot.jpg <https://cruxex.exton.se/cruxex-3.8-live-boot.jpg> READ MORE: https://cruxex.exton.se/ <https://cruxex.exton.se/>

1 0

[ANN] CRUX 3.8 released
by Tim Biermann 21 Apr '25

21 Apr '25

Greetings, everybody, we are pleased to announce the final CRUX 3.8 release. Noteable changes include glibc 2.40, gcc 14.2.0 and binutils 2.43.1. Release notes: https://crux.nu/Main/ReleaseNotes3-8 Handbook: https://crux.nu/Main/Handbook3-8 Changelog: https://git.crux.nu/system/iso/src/commit/8f8f0cf3c27b87bbf154a5c4381aecd33… For download links see: http://crux.nu/Main/Download The ISO is available via BitTorrent: http://crux.nu/files/crux-3.8.torrent The HTTP/FTP mirrors will take some time to update. Please enjoy! Best regards, Tim (for the CRUX team)

1 0

[ANN] CRUX 3.8-rc5 available for testing
by Tim Biermann 07 Apr '25

07 Apr '25

Greetings, all, There is a new test ISO available for the upcoming CRUX version 3.8. One noteable change is on the infrastructure side of things. We used giteas CI/CD system to build the iso.[1] If this goes well we will consider to keep exploring this option. It can be found here: https://git.crux.nu/system/iso/releases/tag/3.8-rc5 Additionally, there is one more repository striving to be an ongoing action. A fork of CRUX-ARM Release[2] called crux-rootfs[3], which allows builds for both x86_64 and ARM64 currently. It has a CI/CD pipeline integrated which tries to build a current version every week. Besides that it will also create LXC/LXD images as well as ready to deploy docker containers.[4] On a short note: A lot of appreciation for sepen and pitillo that created and maintain the CRUX-ARM release repository! rootfs and LXC/LXD images: https://git.crux.nu/system/crux-rootfs/releases/tag/3.8 OCI/Docker containers: https://git.crux.nu/system/crux-rootfs/packages According to how it goes, this will be the final rc, so please keep sharing your experience with it. Regards, Tim (for the CRUX team) [1] https://git.crux.nu/system/iso/actions/runs/6 [2] https://github.com/crux-arm/crux-arm-release [3] https://git.crux.nu/system/crux-rootfs [4] https://git.crux.nu/system/crux-rootfs/actions

1 0