- CRUX - lists.crux.nu

replacing bash with ash.
by fernanbolando 23 Oct '07

23 Oct '07

Hi all I have been using plan9 and plan9port these days, and was wondering If I would break anything in crux, if I where to replace bash with ash to streamline stuff that I dont often use? I am not sure of how to get this info directly, so decided to ask here. thanks and regards Fernan

2 2

ports/opt (2.3): [notify] ck4up: update to 0.2.4
by crux＠crux.nu 20 Oct '07

20 Oct '07

commit 938adb4959f1e1dac37167df27c25d59dd9e86d0 Author: Juergen Daubert <jue(a)jue.li> Date: Sat Oct 20 11:10:09 2007 +0200 [notify] ck4up: update to 0.2.4 New release with two bug-fixes and two improvements. Patches for the later provided by Tilman Sauerbeck. See ChangeLog for details. Unfortunately these changes result in partly different md5 sums for the fetched pages. It's recommended to run ck4up version 0.2.3 before upgrading to the new version. diff --git a/ck4up/.md5sum b/ck4up/.md5sum index b33011c..143f959 100644 --- a/ck4up/.md5sum +++ b/ck4up/.md5sum @@ -1 +1 @@ -ebed48400ec6498d1b4cc86a919f7250 ck4up-0.2.3.tar.gz +2f289ac618c504aec574e272141e9f39 ck4up-0.2.4.tar.gz diff --git a/ck4up/Pkgfile b/ck4up/Pkgfile index 8b63228..358d2ee 100644 --- a/ck4up/Pkgfile +++ b/ck4up/Pkgfile @@ -4,7 +4,7 @@ # Depends on: ruby name=ck4up -version=0.2.3 +version=0.2.4 release=1 source=(http://jue.li/crux/$name/$name-$version.tar.gz)

1 0

futimens compile errors with new glibc-2.6.1
by Clemens Koller 17 Oct '07

17 Oct '07

Hello, I'm just about to bootstrap my system with glibc-2.6.1 to solve some build issues. Ccurrent coreutils-6.9, gzip and tar don't build because of a naming conflict: gcc -std=gnu99 -I. -march=pentium4 -O2 -pipe -fomit-frame-pointer -s -fgnu89-inline -c utimecmp.c In file included from utimecmp.c:33: utimens.h:2: error: conflicting types for 'futimens' /tools/include/sys/stat.h:370: error: previous declaration of 'futimens' was here make[2]: *** [utimecmp.o] Error 1 make[2]: Leaving directory `/mnt/lfs/coreutils-build/coreutils/lib' make[1]: *** [all] Error 2 make[1]: Leaving directory `/mnt/lfs/coreutils-build/coreutils/lib' make: *** [all-recursive] Error 1 For more information and a patch, see: http://www.nabble.com/Error-from-coreutils-CVS-version-t3768812.html Regards, -- Clemens Koller _______________________________ R&D Imaging Devices Anagramm GmbH Rupert-Mayer-Str. 45/1 81379 Muenchen Germany http://www.anagramm-technology.com Phone: +49-89-741518-50 Fax: +49-89-741518-19

2 1

binutils-2.18 texinfo-4.11 build failure
by Clemens Koller 15 Oct '07

15 Oct '07

Hi, There! The latest binutils-2.18 don't build correctly with the latest texinfo-4.11 is installed: make[4]: Leaving directory `/usr/ports/ckcore/binutils-2.18/work/src/build/bfd/doc' ./chew -f ../../../binutils-2.18/bfd/doc/doc.str <../../../binutils-2.18/bfd/doc/../elf.c >elf.tmp /bin/sh ../../../binutils-2.18/bfd/doc/../../move-if-change elf.tmp elf.texi restore=: && backupdir=".am$$" && \ rm -rf $backupdir && mkdir $backupdir && \ if (/usr/ports/ckcore/binutils-2.18/work/src/binutils-2.18/missing makeinfo --split-size=5000000 --spl it-size=5000000 --version) >/dev/null 2>&1; then \ for f in bfd.info bfd.info-[0-9] bfd.info-[0-9][0-9] bfd.i[0-9] bfd.i[0-9][0-9]; do \ if test -f $f; then mv $f $backupdir; restore=mv; else :; fi; \ done; \ else :; fi && \ if /usr/ports/ckcore/binutils-2.18/work/src/binutils-2.18/missing makeinfo --split-size=5000000 --spli t-size=5000000 -I ../../../binutils-2.18/bfd/doc \ -o bfd.info `test -f 'bfd.texinfo' || echo '../../../binutils-2.18/bfd/doc/'`bfd.texinfo; \ then \ rc=0; \ else \ rc=$?; \ $restore $backupdir/* `echo "./bfd.info" | sed 's|[^/]*$||'`; \ fi; \ rm -rf $backupdir; exit $rc WARNING: `makeinfo' is missing on your system. You should only need it if you modified a `.texi' or `.texinfo' file, or any other file indirectly affecting the aspect of the manual. The spurious call might also be the consequence of using a buggy `make' (AIX, DU, IRIX). You might want to install the `Texinfo' package or the `GNU make' package. Grab either from any GNU archive site. make[3]: *** [bfd.info] Error 1 make[3]: Leaving directory `/usr/ports/ckcore/binutils-2.18/work/src/build/bfd/doc' ... ...because binutils it doesn't properly check for the two digit 4.xx version number of makeinfo (which is part of texinfo). For more information and a little patch see: http://sourceware.org/ml/binutils/2007-09/msg00240.html Regards, -- Clemens Koller __________________________________ R&D Imaging Devices Anagramm GmbH Rupert-Mayer-Straße 45/1 Linhof Werksgelände D-81379 München Tel.089-741518-50 Fax 089-741518-19 http://www.anagramm-technology.com

1 1

[PATCH]: Make rc sh-compatible.
by Brett Goulder 15 Oct '07

15 Oct '07

I know it was brought up for 2.4 and reading over the logs for the devel meeting, I saw that the conses was "wait until someone else does it", more or less. Well, I actually wound up doing it last night, attached is a patch against rc with the discussed and approved changes to move syslog handling, making rc sh-compatible. -- ~predatorfreak GnuPG Public key: http://pred.dcaf-security.org/dcafsec-pub-gpgkey.asc

5 8

Ron Paul THE man for our time
by Mike VanRoy 11 Oct '07

11 Oct '07

This is probably the best video I've seen as an introduction for Ron Paul. I am sending it to my entire address book, so if you get it and you consider it spam, I apologize, just delete it. Hopefully you will be able to see it and if you think it important, send it to everyone you can. http://www.youtube.com/watch?v=FG2PUZoukfA

3 2

die happy CRUX
by Matthias-Christian Ott 08 Oct '07

08 Oct '07

Hi, I started using CRUX GNU/Linux in October 2006. I was fascinated by its simplicity and decided to continue using it. I especially liked pkgutils and the ports system. I am exacting regarding package management, because I think it is the main aspect that makes a distribution unique (all distribution provide roughly the same software, but have a different package manager and design philosophy). My first contribution to CRUX was the libarchive support for pkgutils (FS#121). I took a month to get this feature into the git repository. There were some trivial problems with libarchive, but it became apparent to me that CRUX had maintenance problems. I was not really happy about this fact, but I pretended myself that this was not a real problem. At the same time I started maintaining my own ports collection which consists (after a cleanup) over 30 ports. I tried to merge some patches for ports in the opt repository and sent them to the port maintainers, but I never got a reply. Therefore I maintain them now in my own repository. But all these incidents never discouraged me from using and liking CRUX. I was not happy about the situation, but I neither wanted to fork yet another distribution nor I wanted to switch to another. In May 2007 tried to integrate libtre in pkgutils without any success. This was not a matter of great importance to me, but I had real doubts about the organisation of CRUX from that on. I tried to get a developer account and proper e-mail address on the CRUX server in order to be able to participate in development, maintenance and organisation, but nobody replied, my e-mails were rejected. I contacted Per and told him about my plans, but he could not really help me, because he was not a CRUX developer anymore. That was all in the past. Today I think CRUX has reached its zenith. It will die a slow and silent death. Perhaps this will take months or years; it is just a matter of time. CRUX lost its importance, its fans and community. It is hierarchically structured and slowly developing. When I recognised that the C++ version of pkgutils was going to be replaced by a C version, I knew that this would have far reaching consequences for the design and philosophy of CRUX. I think it is not longer the great design philosophy of Per Lidén; it is not longer the thing I liked about CRUX. But generally speaking we (the community) bear the guilt for its death. We did not stop the death, we agreed with the decisions and decided to support this development. Nevertheless it is not to late to stop this process and revitalise CRUX. Everything depends on us! I thought about the future of CRUX and conceived some ideas and demands: * restructuring of the development process (patch queues, better issue tracker, more transparent development and release process, public discussions, development teams, ...) * open ports system (easier updating, submission and maintenance, open to anyone) * entirely public wiki * (perhaps) merge with CRUX-PPC * automatic version, standards and integration tests for Pkgfiles * more precise and stricter packaging standards * no more footprint mismatches (isolated builds, USE flags like system) * complete localisation (no --disable-nls, ...) * (simple) Pkgfile standard library (common mirrors, functions) * multiple architectures * improvement of pkgutils (attribute, hooks/events, pkgutils library) * redesign of prt-get * git repository cleanups * ... Let us (the community) take over the development of CRUX! We are the people, we can change our distribution! The future of CRUX is up to you! You can decide on your own! -- Matthias-Christian Ott

11 39

ports/core (2.4): [notify] openssl: fix for CVE-2007-5135 See http://www.securityfocus.com/bid/25831
by crux＠crux.nu 08 Oct '07

08 Oct '07

commit 9a46286a22116b36846ab8afaef0f31ae7bb03b1 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Oct 8 11:15:39 2007 +0200 [notify] openssl: fix for CVE-2007-5135 See http://www.securityfocus.com/bid/25831 diff --git a/openssl/.md5sum b/openssl/.md5sum index a9a40d3..cc999da 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,4 +1,5 @@ 30ad2995a2668db16ae3083c11a42307 CVE-2007-3108.patch +21119cb0b942c835395d7f57530ba14a CVE-2007-5135.patch 9d0df57845af8acd1027a7df5c18d017 mksslcert.sh 58daa890c3bc19bd6ce3451b2e5e335c openssl-0.9.8b-parallel-build.patch 3a7ff24f6ea5cd711984722ad654b927 openssl-0.9.8e.tar.gz diff --git a/openssl/CVE-2007-5135.patch b/openssl/CVE-2007-5135.patch new file mode 100644 index 0000000..ed3b0fd --- /dev/null +++ b/openssl/CVE-2007-5135.patch @@ -0,0 +1,46 @@ +openssl/ssl/ssl_lib.c 1.133.2.9 -> 1.133.2.10 + +--- ssl_lib.c 2007/08/12 18:59:02 1.133.2.9 ++++ ssl_lib.c 2007/09/19 12:16:21 1.133.2.10 +@@ -1210,7 +1210,6 @@ + char *SSL_get_shared_ciphers(const SSL *s,char *buf,int len) + { + char *p; +- const char *cp; + STACK_OF(SSL_CIPHER) *sk; + SSL_CIPHER *c; + int i; +@@ -1223,20 +1222,21 @@ + sk=s->session->ciphers; + for (i=0; i<sk_SSL_CIPHER_num(sk); i++) + { +- /* Decrement for either the ':' or a '\0' */ +- len--; ++ int n; ++ + c=sk_SSL_CIPHER_value(sk,i); +- for (cp=c->name; *cp; ) ++ n=strlen(c->name); ++ if (n+1 > len) + { +- if (len-- <= 0) +- { +- *p='\0'; +- return(buf); +- } +- else +- *(p++)= *(cp++); ++ if (p != buf) ++ --p; ++ *p='\0'; ++ return buf; + } ++ strcpy(p,c->name); ++ p+=n; + *(p++)=':'; ++ len-=n+1; + } + p[-1]='\0'; + return(buf); + + diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 10c23da..64a90dd 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -4,14 +4,15 @@ name=openssl version=0.9.8e -release=2 +release=3 source=(http://www.openssl.org/source/$name-$version.tar.gz \ mksslcert.sh openssl-0.9.8b-parallel-build.patch \ - CVE-2007-3108.patch) + CVE-2007-3108.patch CVE-2007-5135.patch) build() { cd $name-$version patch -p1 -i $SRC/CVE-2007-3108.patch + patch -p0 -d ssl -i $SRC/CVE-2007-5135.patch patch -p1 -i $SRC/openssl-0.9.8b-parallel-build.patch ./config --prefix=/usr --openssldir=/etc/ssl shared make

1 0

ports/core (2.3): [notify] openssl: fix for CVE-2007-5135 See http://www.securityfocus.com/bid/25831
by crux＠crux.nu 08 Oct '07

08 Oct '07

commit 9a46286a22116b36846ab8afaef0f31ae7bb03b1 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Oct 8 11:15:39 2007 +0200 [notify] openssl: fix for CVE-2007-5135 See http://www.securityfocus.com/bid/25831 diff --git a/openssl/.md5sum b/openssl/.md5sum index a9a40d3..cc999da 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,4 +1,5 @@ 30ad2995a2668db16ae3083c11a42307 CVE-2007-3108.patch +21119cb0b942c835395d7f57530ba14a CVE-2007-5135.patch 9d0df57845af8acd1027a7df5c18d017 mksslcert.sh 58daa890c3bc19bd6ce3451b2e5e335c openssl-0.9.8b-parallel-build.patch 3a7ff24f6ea5cd711984722ad654b927 openssl-0.9.8e.tar.gz diff --git a/openssl/CVE-2007-5135.patch b/openssl/CVE-2007-5135.patch new file mode 100644 index 0000000..ed3b0fd --- /dev/null +++ b/openssl/CVE-2007-5135.patch @@ -0,0 +1,46 @@ +openssl/ssl/ssl_lib.c 1.133.2.9 -> 1.133.2.10 + +--- ssl_lib.c 2007/08/12 18:59:02 1.133.2.9 ++++ ssl_lib.c 2007/09/19 12:16:21 1.133.2.10 +@@ -1210,7 +1210,6 @@ + char *SSL_get_shared_ciphers(const SSL *s,char *buf,int len) + { + char *p; +- const char *cp; + STACK_OF(SSL_CIPHER) *sk; + SSL_CIPHER *c; + int i; +@@ -1223,20 +1222,21 @@ + sk=s->session->ciphers; + for (i=0; i<sk_SSL_CIPHER_num(sk); i++) + { +- /* Decrement for either the ':' or a '\0' */ +- len--; ++ int n; ++ + c=sk_SSL_CIPHER_value(sk,i); +- for (cp=c->name; *cp; ) ++ n=strlen(c->name); ++ if (n+1 > len) + { +- if (len-- <= 0) +- { +- *p='\0'; +- return(buf); +- } +- else +- *(p++)= *(cp++); ++ if (p != buf) ++ --p; ++ *p='\0'; ++ return buf; + } ++ strcpy(p,c->name); ++ p+=n; + *(p++)=':'; ++ len-=n+1; + } + p[-1]='\0'; + return(buf); + + diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 10c23da..64a90dd 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -4,14 +4,15 @@ name=openssl version=0.9.8e -release=2 +release=3 source=(http://www.openssl.org/source/$name-$version.tar.gz \ mksslcert.sh openssl-0.9.8b-parallel-build.patch \ - CVE-2007-3108.patch) + CVE-2007-3108.patch CVE-2007-5135.patch) build() { cd $name-$version patch -p1 -i $SRC/CVE-2007-3108.patch + patch -p0 -d ssl -i $SRC/CVE-2007-5135.patch patch -p1 -i $SRC/openssl-0.9.8b-parallel-build.patch ./config --prefix=/usr --openssldir=/etc/ssl shared make

1 0

ports/opt (2.3): [notify] pidgin: updated to version 2.2.1, see http://pidgin.im/news/security/?id=23
by crux＠crux.nu 30 Sep '07

30 Sep '07

commit 3b4409908dc08c9ad6d1bbd2b358962be71814dc Author: Matt Housh <jaeger(a)crux.nu> Date: Sat Sep 29 20:30:00 2007 -0500 [notify] pidgin: updated to version 2.2.1, see http://pidgin.im/news/security/?id=23 diff --git a/pidgin/.footprint b/pidgin/.footprint index e4719c3..6acbb07 100644 --- a/pidgin/.footprint +++ b/pidgin/.footprint @@ -168,9 +168,9 @@ lrwxrwxrwx root/root usr/lib/libgnt.so -> libgnt.so.0.0.0 lrwxrwxrwx root/root usr/lib/libgnt.so.0 -> libgnt.so.0.0.0 -rwxr-xr-x root/root usr/lib/libgnt.so.0.0.0 -rwxr-xr-x root/root usr/lib/libpurple.la -lrwxrwxrwx root/root usr/lib/libpurple.so -> libpurple.so.0.2.0 -lrwxrwxrwx root/root usr/lib/libpurple.so.0 -> libpurple.so.0.2.0 --rwxr-xr-x root/root usr/lib/libpurple.so.0.2.0 +lrwxrwxrwx root/root usr/lib/libpurple.so -> libpurple.so.0.2.1 +lrwxrwxrwx root/root usr/lib/libpurple.so.0 -> libpurple.so.0.2.1 +-rwxr-xr-x root/root usr/lib/libpurple.so.0.2.1 drwxr-xr-x root/root usr/lib/pidgin/ -rwxr-xr-x root/root usr/lib/pidgin/convcolors.la -rwxr-xr-x root/root usr/lib/pidgin/convcolors.so diff --git a/pidgin/.md5sum b/pidgin/.md5sum index 5932316..6772e9b 100644 --- a/pidgin/.md5sum +++ b/pidgin/.md5sum @@ -1 +1 @@ -d71cd4de6ef1459ba9b504d0c06d8d04 pidgin-2.2.0.tar.bz2 +f1703430d4b8ffc96b493fc36cd46131 pidgin-2.2.1.tar.bz2 diff --git a/pidgin/Pkgfile b/pidgin/Pkgfile index 65f61fa..1727569 100644 --- a/pidgin/Pkgfile +++ b/pidgin/Pkgfile @@ -4,7 +4,7 @@ # Depends on: nss, startup-notification name=pidgin -version=2.2.0 +version=2.2.1 release=1 source=(http://dl.sourceforge.net/sourceforge/$name/$name-$version.tar.bz2)

1 0