- CRUX - lists.crux.nu

port sdl_ttf in opt build error
by Hitoshi Satow 21 Aug '07

21 Aug '07

I am having problems building sdl_ttf in opt. _________________________________________________________________ More photos, more messages, more storageget 2GB with Windows Live Hotmail. http://imagine-windowslive.com/hotmail/?locale=en-us&ocid=TXT_TAGHM_migrati…

4 5

ports/opt (2.3): [notify] opera: updated to 9.23
by crux＠crux.nu 17 Aug '07

17 Aug '07

commit 9c8781a91ba0473d3af57cd47cc064b1f793501f Author: Simone Rota <sip(a)crux.nu> Date: Fri Aug 17 21:25:37 2007 +0200 [notify] opera: updated to 9.23 This release fixes a severe security problem, see: http://www.opera.com/support/search/view/865/ diff --git a/opera/.footprint b/opera/.footprint index 7bf7bce..186a367 100644 --- a/opera/.footprint +++ b/opera/.footprint @@ -6,11 +6,11 @@ drwxr-xr-x root/root usr/bin/ -rwxr-xr-x root/root usr/bin/opera drwxr-xr-x root/root usr/lib/ drwxr-xr-x root/root usr/lib/opera/ -drwxr-xr-x root/root usr/lib/opera/9.22-20070716.6/ --rwxr-xr-x root/root usr/lib/opera/9.22-20070716.6/missingsyms.so --rwxr-xr-x root/root usr/lib/opera/9.22-20070716.6/opera --rwxr-xr-x root/root usr/lib/opera/9.22-20070716.6/spellcheck.so --rwxr-xr-x root/root usr/lib/opera/9.22-20070716.6/works +drwxr-xr-x root/root usr/lib/opera/9.23-20070809.6/ +-rwxr-xr-x root/root usr/lib/opera/9.23-20070809.6/missingsyms.so +-rwxr-xr-x root/root usr/lib/opera/9.23-20070809.6/opera +-rwxr-xr-x root/root usr/lib/opera/9.23-20070809.6/spellcheck.so +-rwxr-xr-x root/root usr/lib/opera/9.23-20070809.6/works drwxr-xr-x root/root usr/lib/opera/plugins/ -rwxr-xr-x root/root usr/lib/opera/plugins/libnpp.so -rwxr-xr-x root/root usr/lib/opera/plugins/operaplugincleaner diff --git a/opera/.md5sum b/opera/.md5sum index cdaa6bb..50b7aa0 100644 --- a/opera/.md5sum +++ b/opera/.md5sum @@ -1 +1 @@ -e125cf9ce197a63f9587279feede27b5 opera-9.22-20070716.6-shared-qt.i386-en.tar.bz2 +8e9cb7d05c7a15d23c77d9eaaf5bbca3 opera-9.23-20070809.6-shared-qt.i386-en.tar.bz2 diff --git a/opera/Pkgfile b/opera/Pkgfile index 259302e..0460442 100644 --- a/opera/Pkgfile +++ b/opera/Pkgfile @@ -5,12 +5,12 @@ # Depends on: qt3 name=opera -version=9.22-20070716.6 +version=9.23-20070809.6 release=1 -source=(http://$name.nsc.no/linux/922/final/en/i386/shared/$name-$version-shared-qt.i386-en.tar.bz2) +source=(http://$name.nsc.no/linux/923/final/en/i386/shared/$name-$version-shared-qt.i386-en.tar.bz2) build() { - cd $name-$version-shared-qt.i386-en-655 + cd $name-$version-shared-qt.i386-en-* sed -i s:share/man:man: install.sh sed -i s:/usr/lib/netscape:/usr/lib/firefox: ini/pluginpath.ini

1 0

Re: bash#3.2.17-1 failed
by fikin 16 Aug '07

16 Aug '07

>>The dependencies of the core packages are not included >>in the core packages. That's CRUX' philosophy. >That's not correct. See [1] for the according CRUX rules. i followed following steps: 1) install core system 2) ports -u 3) prt-get sysup and 3) failed because: a) libarchive failed pkgutils b) bison failed bash (the fix was to first prt-get depinst all of them) so, what is wrong with this use case that it fails out of the box? core deps or prt-get? or the procedure? fikin

3 4

ports/core (2.3): [notify] openssl: added patch for CVE-2007-3108
by crux＠crux.nu 15 Aug '07

15 Aug '07

commit 71ea01fd4b43e4eb89c048427ed2ef8b0e75066f Author: Juergen Daubert <jue(a)jue.li> Date: Wed Aug 15 15:30:53 2007 +0200 [notify] openssl: added patch for CVE-2007-3108 References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3108 http://www.securityfocus.com/bid/25163 diff --git a/openssl/.md5sum b/openssl/.md5sum index 1e9a478..a9a40d3 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,3 +1,4 @@ +30ad2995a2668db16ae3083c11a42307 CVE-2007-3108.patch 9d0df57845af8acd1027a7df5c18d017 mksslcert.sh 58daa890c3bc19bd6ce3451b2e5e335c openssl-0.9.8b-parallel-build.patch 3a7ff24f6ea5cd711984722ad654b927 openssl-0.9.8e.tar.gz diff --git a/openssl/CVE-2007-3108.patch b/openssl/CVE-2007-3108.patch new file mode 100644 index 0000000..abf0196 --- /dev/null +++ b/openssl/CVE-2007-3108.patch @@ -0,0 +1,126 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA1 + +- --- openssl-0.9.8e/crypto/bn/bn_mont.c 2006-06-16 03:01:14.000000000 +0200 ++++ openssl-0.9.8-cvs/crypto/bn/bn_mont.c 2007-06-29 10:13:25.000000000 +0200 +@@ -176,7 +176,6 @@ + + max=(nl+al+1); /* allow for overflow (no?) XXX */ + if (bn_wexpand(r,max) == NULL) goto err; +- - if (bn_wexpand(ret,max) == NULL) goto err; + + r->neg=a->neg^n->neg; + np=n->d; +@@ -228,19 +227,70 @@ + } + bn_correct_top(r); + +- - /* mont->ri will be a multiple of the word size */ +- -#if 0 +- - BN_rshift(ret,r,mont->ri); +- -#else +- - ret->neg = r->neg; +- - x=ri; ++ /* mont->ri will be a multiple of the word size and below code ++ * is kind of BN_rshift(ret,r,mont->ri) equivalent */ ++ if (r->top <= ri) ++ { ++ ret->top=0; ++ retn=1; ++ goto err; ++ } ++ al=r->top-ri; ++ ++# define BRANCH_FREE 1 ++# if BRANCH_FREE ++ if (bn_wexpand(ret,ri) == NULL) goto err; ++ x=0-(((al-ri)>>(sizeof(al)*8-1))&1); ++ ret->top=x=(ri&~x)|(al&x); /* min(ri,al) */ ++ ret->neg=r->neg; ++ + rp=ret->d; +- - ap= &(r->d[x]); +- - if (r->top < x) +- - al=0; +- - else +- - al=r->top-x; ++ ap=&(r->d[ri]); ++ ++ { ++ size_t m1,m2; ++ ++ v=bn_sub_words(rp,ap,np,ri); ++ /* this ----------------^^ works even in al<ri case ++ * thanks to zealous zeroing of top of the vector in the ++ * beginning. */ ++ ++ /* if (al==ri && !v) || al>ri) nrp=rp; else nrp=ap; */ ++ /* in other words if subtraction result is real, then ++ * trick unconditional memcpy below to perform in-place ++ * "refresh" instead of actual copy. */ ++ m1=0-(size_t)(((al-ri)>>(sizeof(al)*8-1))&1); /* al<ri */ ++ m2=0-(size_t)(((ri-al)>>(sizeof(al)*8-1))&1); /* al>ri */ ++ m1|=m2; /* (al!=ri) */ ++ m1|=(0-(size_t)v); /* (al!=ri || v) */ ++ m1&=~m2; /* (al!=ri || v) && !al>ri */ ++ nrp=(BN_ULONG *)(((size_t)rp&~m1)|((size_t)ap&m1)); ++ } ++ ++ /* 'i<ri' is chosen to eliminate dependency on input data, even ++ * though it results in redundant copy in al<ri case. */ ++ for (i=0,ri-=4; i<ri; i+=4) ++ { ++ BN_ULONG t1,t2,t3,t4; ++ ++ t1=nrp[i+0]; ++ t2=nrp[i+1]; ++ t3=nrp[i+2]; ap[i+0]=0; ++ t4=nrp[i+3]; ap[i+1]=0; ++ rp[i+0]=t1; ap[i+2]=0; ++ rp[i+1]=t2; ap[i+3]=0; ++ rp[i+2]=t3; ++ rp[i+3]=t4; ++ } ++ for (ri+=4; i<ri; i++) ++ rp[i]=nrp[i], ap[i]=0; ++# else ++ if (bn_wexpand(ret,al) == NULL) goto err; + ret->top=al; ++ ret->neg=r->neg; ++ ++ rp=ret->d; ++ ap=&(r->d[ri]); + al-=4; + for (i=0; i<al; i+=4) + { +@@ -258,7 +308,7 @@ + al+=4; + for (; i<al; i++) + rp[i]=ap[i]; +- -#endif ++# endif + #else /* !MONT_WORD */ + BIGNUM *t1,*t2; + +@@ -278,10 +328,12 @@ + if (!BN_rshift(ret,t2,mont->ri)) goto err; + #endif /* MONT_WORD */ + ++#if !defined(BRANCH_FREE) || BRANCH_FREE==0 + if (BN_ucmp(ret, &(mont->N)) >= 0) + { + if (!BN_usub(ret,ret,&(mont->N))) goto err; + } ++#endif + retn=1; + bn_check_top(ret); + err: +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.5 (GNU/Linux) + +iQCVAwUBRrGk++6tTP1JpWPZAQJbjwP/W/6mROtxOVU1gvvq/uFHCytNWHVaJfKA +7zh+v4OPQEIYekIBkEpNFgTJbHcyIZoyDNnwOetkRXvI4LDqvV1V5/pA5bzrKqDj +zv7Hj8R7DGqG8ad0Esf3l7SqqirI3curkIzm5/cALJBJxz/Pp7qyXNzzQgp55UPz +iBDdynBpa+s= +=aquq +-----END PGP SIGNATURE----- diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 752362f..10c23da 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -4,13 +4,15 @@ name=openssl version=0.9.8e -release=1 +release=2 source=(http://www.openssl.org/source/$name-$version.tar.gz \ - mksslcert.sh openssl-0.9.8b-parallel-build.patch) + mksslcert.sh openssl-0.9.8b-parallel-build.patch \ + CVE-2007-3108.patch) build() { cd $name-$version - patch -p1 < $SRC/openssl-0.9.8b-parallel-build.patch + patch -p1 -i $SRC/CVE-2007-3108.patch + patch -p1 -i $SRC/openssl-0.9.8b-parallel-build.patch ./config --prefix=/usr --openssldir=/etc/ssl shared make make INSTALL_PREFIX=$PKG MANDIR=/usr/man MANSUFFIX=ssl install

1 0

ntp release update patch
by fikin 14 Aug '07

14 Aug '07

to whom it may concern: contrib/ntp 4.2.4p0 fails is old and fails (due to download link). following patch also adds url-fix which would allow ntp to compile even if it is outdated. fikin fileserver@root:/usr/ports/contrib/ntp (10:05:38) (266): diff -Naur Pkgfile.orig Pkgfile --- Pkgfile.orig 2007-08-14 12:53:19.000000000 +0000 +++ Pkgfile 2007-08-14 12:54:55.000000000 +0000 @@ -6,9 +6,9 @@ # Depends on: openssl name=ntp -version=4.2.4p0 +version=4.2.4p3 release=1 -source=(http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/$name-$version.tar.gz +source=( http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/$name-$version.tar.gz ntpd ntp.conf) fileserver@root:/usr/ports/contrib/ntp (10:05:44) (267):

3 3

bash#3.2.17-1 failed
by fikin 14 Aug '07

14 Aug '07

Differences between installed packages and ports tree: Port Installed Available in the ports tree bash 3.2.10-1 3.2.17-1 fileserver@root:/usr/ports/core/bash (17:49:15) (159): fileserver@root:/usr/ports/core/bash (17:42:32) (159): prt-get update bash prt-get: updating /usr/ports/core/bash ... config.status: executing default commands + make -j1 bison -y -d ./parse.y make: *** [y.tab.c] Segmentation fault =======> ERROR: Building '/usr/ports/core/bash/bash#3.2.17-1.pkg.tar.gz' failed. -- Packages where update failed bash fileserver@root:/usr/ports/core/bash (17:45:11) (160) any ideas why? for bash i found only this: http://article.gmane.org/gmane.linux.distributions.crux.general/2840/match=… does not help. fikin

4 6

problems with EPIA M
by fikin 13 Aug '07

13 Aug '07

i'm trying to cd-install crux2.3-i586 (from contrib dir) and running into very strange problems: 1. # /usr/bin/setup /usr/bin/setup : line 263: syntax error near unexpected token 'else' Problem place is at line 253 though: ' ) > $tmpfile 2>&1' Apparently the piping is not liked by bash ??? Well, I did following: # cp /usr/bin/setup /tmp/ # vi /tmp/setup (removed the piping) # /tmp/setup This allowed package installation to go fine. 2. # setup-chroot # cd /usr/src/linux-2.6.20.3 # make menuconfig Makefile:278: /usr/src/linuc-2.6.20.3/scripts/Kbuild.include: No such file or directory /bin/sh: line 0: [: -lt: unary operator expected make: Warning: File: '/usr/src/linux-2.6.20.3/arch/i386/makefile.cpu' has modification time 8.4e+07 s in the future make: *** No rule to make target '/usr/src/linux- 2.6.20.3/scripts/Kbuild.include'. Stop. Now, the very same iso installs just fine under qemu (cpu emulation as an athlon). http://gentoo-wiki.com/Safe_Cflags#VIA_Processors says that this processor reports wrongly i686, instead should be i586. # cat /proc/cpuinfo processor : 0 vendor_id : CentaurHauls cpu_family : 6 model : 7 model name : VIA Samuel 2 stepping : 3 cpu MHz : 599.90 cache size : 64 KB fdiv_bug : no hlt_bug : no f00f_bug : no coma_bug : no fpu : yes fpu_exception : yes cpuid level : 1 wp : yes flags : fpu de tsc msr cx8 mtrr pge mmx 3dnow bogomips : 1201.07 clflush size : 32 # uname -p i686 Any suggestions are warmly welcome! fikin

4 10

Re: problems with EPIA M
by Clemens Koller 11 Aug '07

11 Aug '07

Hi, Clare, please don't remove the list. Clare Johnstone schrieb: >> Makefile:278: /usr/src/linuc-2.6.20.3/scripts/Kbuild.include > > I hesitate to butt in, but is the above correct? (linuc) There is no such thing as "linuc" in the linux kernel. It's either a cut'n'paste error or something is really broken. Well, the CD isn't broken, Nikolai? Regards, -- Clemens Koller _______________________________ R&D Imaging Devices Anagramm GmbH Rupert-Mayer-Str. 45/1 81379 Muenchen Germany http://www.anagramm-technology.com Phone: +49-89-741518-50 Fax: +49-89-741518-19

2 1

pkgutils-c-1.5
by Anton Vorontsov 10 Aug '07

10 Aug '07

Hi all, It's been a long time from the previous version announcement (1.1). Three versions released silently, so here is version 1.5 of the pkgutils-c: unofficial pkgutils for CRUX, rewritten in C. Few bugs and memory leaks fixed, speed ups and some cosmetic changes. Nothing drastically new, so far. Another news is: in addition to ARM and i686, pkgutils-c now tested to work on PowerPC 32. Here is the link for downloads: ftp://crux-arm.kmeaw.com/pub/crux-arm/depot/pkgutils-c-1.5.tar.gz I'll sync my local branch with remote git repo asap. And finally, thanks to Mark Rosenstand and James Mills for the contributions! -- Anton Vorontsov email: cbou(a)mail.ru backup email: ya-cbou(a)yandex.ru irc://irc.freenode.net/bd2

2 3

handbook - filesystems
by Giorgio Lando 06 Aug '07

06 Aug '07

Hi, I decided to switch all my systems from Archlinux to CRUX and I am very happy. I would like to suggest a small modification to the Handbook (and, secondly, to the CRUX page in distrowatch). In the 3.2 section of the handbook, the following utterance confused me during installation: "Using ReiserFS is recommended, but there is support for Ext2fs/Ext3fs, XFS and JFS as well". In the CRUX page in distrowatch: http://distrowatch.com/table.php?distribution=crux it appears that CRUX supports only two journaled filesystems, i.e. reiserfs and XFS. In the mailing list archives I found that the problem has been discussed in May 2006 and the recommendation of reiserfs was declared by Per Lidén to be a relict of the times where reiserfs was the only journaled filesystem. Nowadays, there is no reason to recommend a journaled filesystem over another and any potential CRUX user should be able to choose the filesystem which is better for his system and which he likes more. Thus I suggest to change the formulation in the handbook to: "CRUX supports all the filesystems supported as root filesystems by the linux kernel: ext2, ext3, JFS, reiserfs, XFS". The indication in distrowatch seems to me just a mistake, since it suggests that one cannot use ext3 or JFS in CRUX. However, I am aware that distrowatch is much less important than the handbook. Giorgio Lando

3 4