- CRUX - lists.crux.nu

ports/opt (2.3): [notify] postgresql: updated to 8.2.5
by crux＠crux.nu 18 Sep '07

18 Sep '07

commit 0f6e3cc76ad7e034ed7764555306f96fbb4ab648 Author: Simone Rota <sip(a)crux.nu> Date: Tue Sep 18 19:26:24 2007 +0200 [notify] postgresql: updated to 8.2.5 Fixes a privilege escalation vulnerability, see: http://www.postgresql.org/about/news.791 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2138 diff --git a/postgresql/.footprint b/postgresql/.footprint index 9b56e04..5deca73 100644 --- a/postgresql/.footprint +++ b/postgresql/.footprint @@ -771,6 +771,7 @@ drwxr-xr-x root/root usr/share/postgresql/timezone/America/Indiana/ -rw-r--r-- root/root usr/share/postgresql/timezone/America/Indiana/Knox -rw-r--r-- root/root usr/share/postgresql/timezone/America/Indiana/Marengo -rw-r--r-- root/root usr/share/postgresql/timezone/America/Indiana/Petersburg +-rw-r--r-- root/root usr/share/postgresql/timezone/America/Indiana/Tell_City -rw-r--r-- root/root usr/share/postgresql/timezone/America/Indiana/Vevay -rw-r--r-- root/root usr/share/postgresql/timezone/America/Indiana/Vincennes -rw-r--r-- root/root usr/share/postgresql/timezone/America/Indiana/Winamac diff --git a/postgresql/.md5sum b/postgresql/.md5sum index b56d7c1..0d2b6c3 100644 --- a/postgresql/.md5sum +++ b/postgresql/.md5sum @@ -1,2 +1,2 @@ f5eeff17dd7117175794459f7097ad1a postgresql -af7ec100a33c41bfb8d87b5e0ec2f44a postgresql-8.2.4.tar.bz2 +bb1cd309ea72f070cb964736f5755847 postgresql-8.2.5.tar.bz2 diff --git a/postgresql/Pkgfile b/postgresql/Pkgfile index 32e6c7d..5d669eb 100644 --- a/postgresql/Pkgfile +++ b/postgresql/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=postgresql -version=8.2.4 +version=8.2.5 release=1 source=(ftp://ftp9.de.postgresql.org/unix/databases/postgresql/source/v$ver… postgresql)

1 0

rsysnc
by Chuck Foreman 18 Sep '07

18 Sep '07

Hi All, I haven't been active with ports lately... but recently I needed a gnome port. I thought the rsync was the easiest way to get just the few ports I needed. I added the small script to the /etc/ports but I get an error message "link_stat .. no file found etc." I then updated the scripts for core just to test it and I get the same error... I never edited my rsync.conf file ..but it worked before What am I doing wrong .. or what have I overlooked? I appreciate your help!! Thanks

1 0

Move sysklogd starting from rc to /etc/rc.d/sysklogd
by Brett Goulder 17 Sep '07

17 Sep '07

Attached is a patch to remove the lines which start syslogd and klogd from /etc/rc and move this function to /etc/rc.d/sysklogd, the patch applies to the rc ports directory. Additionally, I've attached a tarball of the sysklogd ports directory with a /etc/rc.d/sysklogd init script, complete with modified Pkgfile and updated md5sums/footprint. -- ~predatorfreak GnuPG Public key: http://pred.dcaf-security.org/dcafsec-pub-gpgkey.asc

3 7

Xorg 7.3 in ports
by Tilman Sauerbeck 11 Sep '07

11 Sep '07

Hi, I just pushed Xorg 7.3 to the xorg ports repository. Here's a few hints: * upgrade xorg-inputproto before you try to build the new xorg-server * install xorg-libpixman (new dependency for xorg-server) * after you upgraded everything, rebuild your video and input drivers against the new server. At the moment, xorg-server does not depend on dbus/hal, so if you don't have these two packages, you won't get input hotplug support in X. So far I think this is nicer than forcing everybody to install dbus/hal for X. Regards, Tilman -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing on usenet and in e-mail?

3 3

Adding to CD vendor list
by CD-DVD-LINUX-BSD.COM 11 Sep '07

11 Sep '07

Hello, I wish to inform you that we propose on the site http://www.cd-dvd-linux-bsd.com the distribution of Crux on CD-ROM. The link to access towards the products is : http://www.cd-dvd-linux-bsd.com/index.php?cPath=21_70 We can deliver the products to any country in the world. Our customers can ask for exchange or refunding if they are not satisfied. The conditions of exchange and refunding are available to http://www.cd-dvd-linux-bsd.com/shipping.php and http://www.cd-dvd-linux-bsd.com/conditions.php . Our customers can also write to us at boutique(a)cd-dvd-linux-bsd.com . ALIBAWEB SARL is French company located at PARIS, registered at the official company and trade register under number 479 701 039. We would most appreciate our appearing in your CD Vendor list ( http://crux.nu/Main/Links) Remaining at your disposal for any further information, Cordially, Thibaud BENNET.

2 1

ports/opt (2.3): [notify] lighttpd: updated to 1.4.18
by crux＠crux.nu 10 Sep '07

10 Sep '07

commit f90eeb589e1fc50f87a4d4e50d2795bbf46a62a5 Author: Simone Rota <sip(a)crux.nu> Date: Mon Sep 10 11:44:19 2007 +0200 [notify] lighttpd: updated to 1.4.18 Fixes a remote vulnerability with fastcgi, see: http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt http://secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ diff --git a/lighttpd/.footprint b/lighttpd/.footprint index 897647c..f2f2725 100644 --- a/lighttpd/.footprint +++ b/lighttpd/.footprint @@ -80,6 +80,7 @@ drwxr-xr-x root/root usr/man/man1/ -rw-r--r-- root/root usr/man/man1/spawn-fcgi.1.gz drwxr-xr-x root/root usr/sbin/ -rwxr-xr-x root/root usr/sbin/lighttpd +-rwxr-xr-x root/root usr/sbin/lighttpd-angel drwxr-xr-x root/root var/ drwxr-xr-x root/root var/run/ -rw-r--r-- root/root var/run/lighttpd.pid (EMPTY) diff --git a/lighttpd/.md5sum b/lighttpd/.md5sum index 5514712..aa49094 100644 --- a/lighttpd/.md5sum +++ b/lighttpd/.md5sum @@ -1,3 +1,3 @@ -04988067026e93ccb46e19fa8c17ae97 lighttpd-1.4.16.tar.gz +5db3204d57436a032f899ff9dbce793f lighttpd-1.4.18.tar.gz 0ca699210055a3e137ffefdcd5441c09 lighttpd.conf acf07b7bf297e76923511abff24859b9 lighttpd.rc diff --git a/lighttpd/Pkgfile b/lighttpd/Pkgfile index b554e9e..defc16a 100644 --- a/lighttpd/Pkgfile +++ b/lighttpd/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=lighttpd -version=1.4.16 +version=1.4.18 release=1 source=(http://www.$name.net/download/$name-$version.tar.gz \ $name.conf \

1 0

ports/opt (2.3): [notify] apache: update to 2.2.6
by crux＠crux.nu 09 Sep '07

09 Sep '07

commit 6a8ef23eb87cc70104545ff5a323d069595718f5 Author: Juergen Daubert <jue(a)jue.li> Date: Sun Sep 9 10:25:21 2007 +0200 [notify] apache: update to 2.2.6 Security fixes, see http://www.apache.org/dist/httpd/Announcement2.2.html diff --git a/apache/.md5sum b/apache/.md5sum index 1893239..132824f 100644 --- a/apache/.md5sum +++ b/apache/.md5sum @@ -1,4 +1,4 @@ e0514e5840c0e58cc4e7982a7e14fc4b apache -cdbbe8679f97b93b1d5f9767976b0cb8 apache-ssl_cert.patch +75a919be7ff65f443287b094eaf6a162 apache-ssl_cert.patch bd931fee9d102c361e95ad318d199674 crux.layout -536c86c7041515a25dd8bad3611da9a3 httpd-2.2.4.tar.bz2 +203bea91715064f0c787f6499d33a377 httpd-2.2.6.tar.bz2 diff --git a/apache/Pkgfile b/apache/Pkgfile index ad4bc1e..2b43146 100644 --- a/apache/Pkgfile +++ b/apache/Pkgfile @@ -5,7 +5,7 @@ # Group: apache name=apache -version=2.2.4 +version=2.2.6 release=1 source=(http://www.apache.org/dist/httpd/httpd-$version.tar.bz2 \ $name-ssl_cert.patch crux.layout apache) @@ -35,5 +35,5 @@ build(){ sed -ri '/^(User|Group)/s/daemon/www/' $PKG/etc/apache/httpd.conf sed -i '1s|local/||' $PKG/var/www/cgi-bin/printenv rm -R $PKG/{var/www/htdocs/*,usr/bin} - rm $PKG/var/www/{error,icons,icons/small}/README* + rm $PKG/var/www/{error,icons}/README* } diff --git a/apache/apache-ssl_cert.patch b/apache/apache-ssl_cert.patch index 0ba6a83..a5ac874 100644 --- a/apache/apache-ssl_cert.patch +++ b/apache/apache-ssl_cert.patch @@ -1,21 +1,21 @@ -diff -Nru httpd-2.2.3.orig/docs/conf/extra/httpd-ssl.conf.in httpd-2.2.3/docs/conf/extra/httpd-ssl.conf.in ---- httpd-2.2.3.orig/docs/conf/extra/httpd-ssl.conf.in 2006-11-25 10:10:32.723767703 +0100 -+++ httpd-2.2.3/docs/conf/extra/httpd-ssl.conf.in 2006-11-25 10:11:26.143767703 +0100 +diff -Nru httpd-2.2.6.orig/docs/conf/extra/httpd-ssl.conf.in httpd-2.2.6/docs/conf/extra/httpd-ssl.conf.in +--- httpd-2.2.6.orig/docs/conf/extra/httpd-ssl.conf.in 2007-09-07 16:24:03.000000000 +0200 ++++ httpd-2.2.6/docs/conf/extra/httpd-ssl.conf.in 2007-09-07 16:27:15.000000000 +0200 @@ -96,7 +96,7 @@ # in mind that if you have both an RSA and a DSA certificate you # can configure both in parallel (to also allow the use of DSA # ciphers, etc.) --SSLCertificateFile @exp_sysconfdir@/server.crt -+SSLCertificateFile /etc/ssl/certs/apache.crt - #SSLCertificateFile @exp_sysconfdir@/server-dsa.crt +-SSLCertificateFile "@exp_sysconfdir@/server.crt" ++SSLCertificateFile "/etc/ssl/certs/apache.crt" + #SSLCertificateFile "@exp_sysconfdir@/server-dsa.crt" # Server Private Key: @@ -104,7 +104,7 @@ # directive to point at the key file. Keep in mind that if # you've both a RSA and a DSA private key you can configure # both in parallel (to also allow the use of DSA ciphers, etc.) --SSLCertificateKeyFile @exp_sysconfdir@/server.key -+SSLCertificateKeyFile /etc/ssl/keys/apache.key - #SSLCertificateKeyFile @exp_sysconfdir@/server-dsa.key +-SSLCertificateKeyFile "@exp_sysconfdir@/server.key" ++SSLCertificateKeyFile "/etc/ssl/keys/apache.key" + #SSLCertificateKeyFile "@exp_sysconfdir@/server-dsa.key" # Server Certificate Chain:

1 0

klogd 1.5 takes an excessively long time to fork.
by Brett Goulder 08 Sep '07

08 Sep '07

This causes my system to hang on boot when using sysklogd 1.5 for excessively long amounts of time to the point that it's faster to restart my system into a livecd and edit the init scripts to subvert the problem. Attached is a workaround rc, which does klogd -c 4 & disown to subvert the problem of it-taking-forever-to-fork by forking it to the background, I'm not sure if klogd actually does it's proper work after being forked, but this at least makes the system bootable. -- ~predatorfreak GnuPG Public key: http://pred.dcaf-security.org/dcafsec-pub-gpgkey.asc

3 4

Request to replace sysklogd with rsyslog for 2.4
by Brett Goulder 08 Sep '07

08 Sep '07

With 2.4, it'd be nice to move away from the older sysklogd to the newer rsyslog, which provides some useful new features over sysklogd, such as remote logging over TCP. In addition, it is also actively maintained (sysklogd technically is, but development is slow). It is also a drop-in replacement, so long as the patch in my former e-mail about moving syslog-daemon starting to init scripts is applied, as all that would be required is to put "rsyslog" the SERVICES array in /etc/rc.conf. It also has the nice side-effect here of working every time I rebuild it, which sysklogd 1.5 has given me much grief over (klogd either works fine or segfaults on start and I can't seem to pin down exactly why, I know it's not my memory though, I've ran it through memtest a number of times). -- ~predatorfreak GnuPG Public key: http://pred.dcaf-security.org/dcafsec-pub-gpgkey.asc

2 2

Sun video drivers in Xorg
by Jason Williams 08 Sep '07

08 Sep '07

Tilman, I am curious as to the presence of the Sun video drivers in CRUX. They are xorg-xf86-video-sunbw2, suncg14, suncg3, suncg6, sunffb, sunleo, and suntcx. They are installed by default on the install cd when Xorg is selected for installation. With them installed, X -configure and xorgcfg hangs when probing drivers requiring a reboot. Uninstalling those drivers allows those commands to function. There are also xorg-applewmproto, xorg-windowswmproto, xorg-libapplewm, and xorg-libwindowswm in the Xorg repo as well. I am just wondering if these packages are needed in x86 Linux. Thanks in advance for your time. Jason Williams

2 1