- CRUX - lists.crux.nu

ports/opt (2.3): [notify] fetchmail: security fix for CVE-2007-4565
by crux＠crux.nu 06 Sep '07

06 Sep '07

commit 04a53c23f68ce8aca5ada72edcf6a06657c2933b Author: Juergen Daubert <jue(a)jue.li> Date: Thu Sep 6 10:09:25 2007 +0200 [notify] fetchmail: security fix for CVE-2007-4565 http://securitytracker.com/alerts/2007/Aug/1018627.html diff --git a/fetchmail/.md5sum b/fetchmail/.md5sum index 454b49a..9935c36 100644 --- a/fetchmail/.md5sum +++ b/fetchmail/.md5sum @@ -1 +1,2 @@ 66b97500b0a1e3c0916b3b5314f597f5 fetchmail-6.3.8.tar.bz2 +e266c2e4f91f4a028481c87c7b005bb0 fetchmail-SA-2007-02.txt diff --git a/fetchmail/Pkgfile b/fetchmail/Pkgfile index e8383f3..6f8b2eb 100644 --- a/fetchmail/Pkgfile +++ b/fetchmail/Pkgfile @@ -5,11 +5,13 @@ name=fetchmail version=6.3.8 -release=1 -source=(http://download2.berlios.de/$name/$name-$version.tar.bz2) +release=2 +source=(http://download.berlios.de/$name/$name-$version.tar.bz2 + http://www.fetchmail.info/fetchmail-SA-2007-02.txt) build() { cd $name-$version + patch -p0 -i $SRC/$name-SA-2007-02.txt ./configure --prefix=/usr \ --mandir=/usr/man \ --with-ssl=/usr \

1 0

OpenSSL 0.9.8 with gcc 4.2.X.
by Brett Goulder 05 Sep '07

05 Sep '07

Since CRUX 2.4 is around the corner, I figured I'd tell everyone that OpenSSL 0.9.8 will cause illegal hardware instruction errors without this patch: http://pred.dcaf-security.org/openssl-0.9.8-gcc42.patch. I would suggest adding this to the 2.4 branch, otherwise any app depending on openssl will fail to run ;) -- ~predatorfreak GnuPG Public key: http://pred.dcaf-security.org/dcafsec-pub-gpgkey.asc

2 2

Apache & PHP
by kevin.schenker＠tu-ilmenau.de 03 Sep '07

03 Sep '07

I have recently installed the apache web server and the mod_php module to be able to parse php files. In the documentation of php I found out that apache needs to be configured in the following way: 1) Load the libphp5.so using LoadModule 2) Insert line "AddType application/x-httpd-php .php" 3) Insert line "AddHandler cgi-script .cgi .php" However, the web server won't parse any php files, even though execution of CGI is allowed in the whole document root. Trying to access a php file causes my browser to show up a "save file" dialogue. If I remove the line "AddHandler cgi-script .cgi .php" php files located other than in the cgi-bin directory get executed. I have no explanation for this. As described in the httpd.conf file this line is needed whenever scripts should be executed which are not located in the cgi-bin directory. Im not sure if this is really related to Crux but maybe some others encountered similar problems. For the installation of the packages I used: prt-get depinst apache php4 mod_php Hope that someone can help me! Greets Kevin Schenker ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

2 2

Sound in Crux
by Wawrzyniec Niewodniczański 02 Sep '07

02 Sep '07

Hi, I'm using Crux quite long but still has problems with allowing sound for firefox, mplayer and other Xapps in the same time. I'm using ThinkPad T21 and have Sound Fusion CS46xx. After some time decide that maybe esd would solve my problems. But it's seems not. I have proper modules. start esd with: /usr/bin/esd -nobeeps -trust & After setting -ao esd mplayer works fine (I have sound), but cannot get sound in flash and I can have sound in mplayer plugin in Firefox or in Mplayer. I've made some many tries that is quite hard to send all of setting related to sound and I think is better to start once more from scratch. Would you like to share your 'crux sound' settings/experience? I'm using fluxbox and have no special sound needs, have it in firefox (flash), mplayer and any mp3/ogg player. Regards, Wawrzek -- Wawrzyniec Niewodniczański (in some countries know as Larry) vel LarryN E-MAIL: wawrzyniec.niewodniczanski(a)pwr.wroc.pl PhD student @ JID: larryn(a)chrome.pl Wroclaw University of Technology TEL: +48(071)320-2894

3 5

ports/opt (2.3): [notify] mod_php: update to 5.2.4
by crux＠crux.nu 02 Sep '07

02 Sep '07

commit f0d73178115b56af72cbf718d11db4ef4a1a7377 Author: Juergen Daubert <jue(a)jue.li> Date: Sun Sep 2 11:01:33 2007 +0200 [notify] mod_php: update to 5.2.4 Security fixes, see http://www.php.net/releases/5_2_4.php diff --git a/mod_php/.footprint b/mod_php/.footprint index 6cf9547..4a01571 100644 --- a/mod_php/.footprint +++ b/mod_php/.footprint @@ -108,15 +108,13 @@ drwxr-xr-x root/root usr/include/php/ext/libxml/ -rw-r--r-- root/root usr/include/php/ext/libxml/php_libxml.h drwxr-xr-x root/root usr/include/php/ext/pcre/ drwxr-xr-x root/root usr/include/php/ext/pcre/pcrelib/ +-rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/config.h -rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/pcre.h -rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/pcre_internal.h --rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/pcre_scanner.h --rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/pcre_stringpiece.h --rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/pcrecpp.h --rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/pcrecpparg.h -rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/pcreposix.h -rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/ucp.h -rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/ucpinternal.h +-rw-r--r-- root/root usr/include/php/ext/pcre/pcrelib/ucptable.h -rw-r--r-- root/root usr/include/php/ext/pcre/php_pcre.h drwxr-xr-x root/root usr/include/php/ext/session/ -rw-r--r-- root/root usr/include/php/ext/session/mod_files.h diff --git a/mod_php/.md5sum b/mod_php/.md5sum index 3715582..ac9bdce 100644 --- a/mod_php/.md5sum +++ b/mod_php/.md5sum @@ -1 +1 @@ -eb50b751c8e1ced05bd012d5a0e4dec3 php-5.2.3.tar.bz2 +55c97a671fdabf462cc7a82971a656d2 php-5.2.4.tar.bz2 diff --git a/mod_php/Pkgfile b/mod_php/Pkgfile index a20e000..92827f4 100644 --- a/mod_php/Pkgfile +++ b/mod_php/Pkgfile @@ -5,7 +5,7 @@ # Group: apache name=mod_php -version=5.2.3 +version=5.2.4 release=1 source=(http://www.php.net/distributions/php-$version.tar.bz2)

1 0

ports/opt (2.3): [notify] sylpheed: update to 2.4.5
by crux＠crux.nu 02 Sep '07

02 Sep '07

commit dc409ea5d1896ab24f52c731460864c87b2b010b Author: Juergen Daubert <jue(a)jue.li> Date: Sun Sep 2 10:58:59 2007 +0200 [notify] sylpheed: update to 2.4.5 Security fix, see http://secunia.com/advisories/26550/ diff --git a/sylpheed/.md5sum b/sylpheed/.md5sum index f6a2da5..f933cba 100644 --- a/sylpheed/.md5sum +++ b/sylpheed/.md5sum @@ -1 +1 @@ -79225738189e78e9a9f2a47a3ee4f3d6 sylpheed-2.4.4.tar.bz2 +27e7c802f9af3e3c58e4457aadd36a91 sylpheed-2.4.5.tar.bz2 diff --git a/sylpheed/Pkgfile b/sylpheed/Pkgfile index 5bb46b1..4512097 100644 --- a/sylpheed/Pkgfile +++ b/sylpheed/Pkgfile @@ -4,7 +4,7 @@ # Depends on: gtk, openssl name=sylpheed -version=2.4.4 +version=2.4.5 release=1 source=(http://sylpheed.sraoss.jp/sylpheed/v2.4/$name-$version.tar.bz2)

1 0

buildling pkgutils on debian
by Matthias Pfeifer 29 Aug '07

29 Aug '07

Hi, i am planning to use pkgutils 5.30.0 in my debian/etch system to maintain installation of some programs/libraries, etc under $HOME. up to now i was only trying to build but got following error: g++ -DNDEBUG -O2 -Wall -pedantic -D_GNU_SOURCE -DVERSION=\"5.30.0\" -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -c -o pkgutil.o pkgutil.cc pkgutil.cc: In member function 'std::pair<std::basic_string<char, std::char_traits<char>, std::allocator<char> >, pkgutil::pkginfo_t> pkgutil::pkg_open(const std::string&) const': pkgutil.cc:354: error: 'archive_read_open_filename' was not declared in this scope pkgutil.cc: In member function 'void pkgutil::pkg_install(const std::string&, const std::set<std::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::less<std::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&, const std::set<std::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::less<std::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) const': pkgutil.cc:393: error: 'archive_read_open_filename' was not declared in this scope pkgutil.cc: In member function 'void pkgutil::pkg_footprint(std::string&) const': pkgutil.cc:508: error: 'archive_read_open_filename' was not declared in this scope pkgutil.cc:535: error: 'archive_read_open_filename' was not declared in this scope make: *** [pkgutil.o] Fehler 1 it it at all possible to build pkgutils on a debian system? Where am i doing wrong? matthias

6 9

[Fwd: Binutils 2.18 available]
by Clemens Koller 28 Aug '07

28 Aug '07

Well... here it is. -------- Original-Nachricht -------- Betreff: Binutils 2.18 available Datum: Tue, 28 Aug 2007 18:08:01 -0400 Von: Daniel Jacobowitz <drow(a)false.org> An: binutils(a)sourceware.org I have placed binutils 2.18 on sourceware.org and ftp.gnu.org in the usual places, e.g. ftp://ftp.gnu.org/gnu/binutils/. 9d22ee4dafa3a194457caf4706f9cf01 binutils-2.18.tar.bz2 d71b23b4fb91e66802ca2b8f576629f4 binutils-2.18.tar.gz As usual, thanks to everyone who helped prepare this release. The branch remains open for bug fixes; if there are enough to justify it, I'll prepare a point release in one or two months. I built and tested the release for a selection of 38 ELF-based targets; the most popular platforms had no failures, and the others had only a small assortment of problems. Well, with one exception: the ARC disassembler appears to be broken, which messes up the gas testsuite awfully. -- Daniel Jacobowitz CodeSourcery -- Clemens Koller _______________________________ R&D Imaging Devices Anagramm GmbH Rupert-Mayer-Str. 45/1 81379 Muenchen Germany http://www.anagramm-technology.com Phone: +49-89-741518-50 Fax: +49-89-741518-19

1 0

ports/core (2.3): [notify] rsync: fix for CVE-2007-4091
by crux＠crux.nu 24 Aug '07

24 Aug '07

commit 4222576ab7fac83dd98447a2f9efb0fe7b9bc272 Author: Juergen Daubert <jue(a)jue.li> Date: Fri Aug 24 08:33:40 2007 +0200 [notify] rsync: fix for CVE-2007-4091 http://www.securityfocus.com/bid/25336 http://c-skills.blogspot.com/2007/08/cve-2007-4091.html diff --git a/rsync/.md5sum b/rsync/.md5sum index 5eeb02b..651c4f0 100644 --- a/rsync/.md5sum +++ b/rsync/.md5sum @@ -1,3 +1,4 @@ +46fcea1ac64c9e075d0338f8e35b1af6 rsync-2.6.9-fname-obo.diff 996d8d8831dbca17910094e56dcb5942 rsync-2.6.9.tar.gz f8dcfe5cf2afef1ea90107a6ff4540cd rsync.driver a71995f22768c931c5649a1336d25ffb rsyncd diff --git a/rsync/Pkgfile b/rsync/Pkgfile index 5bac4bd..39a8c5b 100644 --- a/rsync/Pkgfile +++ b/rsync/Pkgfile @@ -5,18 +5,22 @@ name=rsync version=2.6.9 -release=1 +release=2 source=(http://rsync.samba.org/ftp/$name/$name-$version.tar.gz \ - rsyncd.conf rsyncd rsync.driver) + rsyncd.conf rsyncd rsync.driver \ + $name-$version-fname-obo.diff) build () { cd $name-$version + + patch -p1 -i $SRC/$name-$version-fname-obo.diff + ./configure --prefix=/usr \ --mandir=/usr/man \ --with-rsh=ssh make make DESTDIR=$PKG install - + mkdir -p $PKG/etc/{rc.d,ports/drivers} $PKG/var/log install -m 755 $SRC/rsyncd $PKG/etc/rc.d install -m 644 $SRC/rsyncd.conf $PKG/etc diff --git a/rsync/rsync-2.6.9-fname-obo.diff b/rsync/rsync-2.6.9-fname-obo.diff new file mode 100644 index 0000000..2fa0113 --- /dev/null +++ b/rsync/rsync-2.6.9-fname-obo.diff @@ -0,0 +1,60 @@ +--- rsync-2.6.9.orig/sender.c 2006-09-20 03:53:32.000000000 +0200 ++++ rsync-2.6.9/sender.c 2007-07-25 15:33:05.000000000 +0200 +@@ -123,6 +123,7 @@ + char fname[MAXPATHLEN]; + struct file_struct *file; + unsigned int offset; ++ size_t l = 0; + + if (ndx < 0 || ndx >= the_file_list->count) + return; +@@ -133,6 +134,20 @@ + file->dir.root, "/", NULL); + } else + offset = 0; ++ ++ l = offset + 1; ++ if (file) { ++ if (file->dirname) ++ l += strlen(file->dirname); ++ if (file->basename) ++ l += strlen(file->basename); ++ } ++ ++ if (l >= sizeof(fname)) { ++ rprintf(FERROR, "Overlong pathname\n"); ++ exit_cleanup(RERR_FILESELECT); ++ } ++ + f_name(file, fname + offset); + if (remove_source_files) { + if (do_unlink(fname) == 0) { +@@ -224,6 +239,7 @@ + enum logcode log_code = log_before_transfer ? FLOG : FINFO; + int f_xfer = write_batch < 0 ? batch_fd : f_out; + int i, j; ++ size_t l = 0; + + if (verbose > 2) + rprintf(FINFO, "send_files starting\n"); +@@ -259,6 +275,20 @@ + fname[offset++] = '/'; + } else + offset = 0; ++ ++ l = offset + 1; ++ if (file) { ++ if (file->dirname) ++ l += strlen(file->dirname); ++ if (file->basename) ++ l += strlen(file->basename); ++ } ++ ++ if (l >= sizeof(fname)) { ++ rprintf(FERROR, "Overlong pathname\n"); ++ exit_cleanup(RERR_FILESELECT); ++ } ++ + fname2 = f_name(file, fname + offset); + + if (verbose > 2)

1 0

[patch] bash: don't link against obsoloete termcap
by Clemens Koller 23 Aug '07

23 Aug '07

Hi! Well, just in case you have termcap installed, bash will link against it, which is propably not what you want. The attached patch avoids that. ./configure says: --with-curses: This causes bash to be linked against the curses library instead of the default termcap library which is becoming obsolete. -- Clemens Koller __________________________________ R&D Imaging Devices Anagramm GmbH Rupert-Mayer-Straße 45/1 Linhof Werksgelände D-81379 München Tel.089-741518-50 Fax 089-741518-19 http://www.anagramm-technology.com --- Pkgfile.old 2007-05-29 17:24:38.000000000 +0200 +++ Pkgfile 2007-05-29 17:34:00.000000000 +0200 @@ -5,7 +5,7 @@ name=bash version=3.2.17 -release=1 +release=2 source=(http://ftp.gnu.org/gnu/$name/$name-3.2.tar.gz \ $name-3.2-001-017.patch \ $name-3.2-doc.patch \ @@ -21,7 +21,8 @@ build() { ./configure --prefix=/usr \ --exec-prefix= \ --mandir=/usr/man \ - --disable-nls + --disable-nls \ + --with-curses make -j1 make DESTDIR=$PKG install

2 1