- CRUX - lists.crux.nu

ports/opt (2.3): [notify] mplayer: added patch for cddb stack overflow (CVE-2007-2948)
by crux＠crux.nu 13 Jun '07

13 Jun '07

commit c19e875161a3d0a04e88a10ff610260cb1de57ac Author: Matt Housh <jaeger(a)crux.nu> Date: Wed Jun 13 17:57:48 2007 -0500 [notify] mplayer: added patch for cddb stack overflow (CVE-2007-2948) diff --git a/mplayer/.md5sum b/mplayer/.md5sum index db63f7e..2a043a5 100644 --- a/mplayer/.md5sum +++ b/mplayer/.md5sum @@ -1,4 +1,5 @@ 18c05d88e22c3b815a43ca8d7152ccdc MPlayer-1.0rc1.tar.bz2 f0b71c38b1207c1d604be091876ac051 asmrules_fix_20061231.diff +bd8a233ea31c6686a956387ad28c5c5c cddb_fix_20070605.diff 1ecd31d17b51f16332b1fcc7da36b312 font-arial-iso-8859-1.tar.bz2 c64631601912913f3e5dfbecc3b79d44 mplayer.conf diff --git a/mplayer/Pkgfile b/mplayer/Pkgfile index b85741a..70e28f4 100644 --- a/mplayer/Pkgfile +++ b/mplayer/Pkgfile @@ -11,9 +11,10 @@ name=mplayer version=1.0rc1 -release=2 +release=3 source=(http://www1.mplayerhq.hu/MPlayer/releases/MPlayer-$version.tar.bz2 \ http://www1.mplayerhq.hu/MPlayer/patches/asmrules_fix_20061231.diff \ + http://www1.mplayerhq.hu/MPlayer/patches/cddb_fix_20070605.diff \ http://www1.mplayerhq.hu/MPlayer/releases/fonts/font-arial-iso-8859-1.tar.b… \ mplayer.conf) @@ -23,6 +24,9 @@ build() { # fix for asmrp buffer overflow patch -p0 -i $SRC/asmrules_fix_20061231.diff + # fix for cddb stack overflow + patch -p0 -i $SRC/cddb_fix_20070605.diff + # mplayer decides optimizations at configure time, don't use CRUX's unset CFLAGS ./configure --prefix=/usr \

1 0

RE: crux86_64
by William Lewis 11 Jun '07

11 Jun '07

> Hi,> > I have created a x86_64 version of crux.> It is a pure 64bit version and works with the normal filestructure.> I think the most crux ports are compatible with crux86_64, but at the moment i > haven't checked all ports in opt and contrib. > Only the core of glibc, gcc, binutils and some extra packages are modified.> I have greated an ISO Image with the normal set of precompiled packages. > You can download the iso file at http://ecarux.de/crux86_64/> If the crux developers are interested in merge crux86_64 in the normal crux, > just contact me.> > regards> HannesI've been waiting for one of these since 2.1 (a belated thanks to Dan Mueller as well). Now the thanks goes to you, Hannes, because going through toolchain upgrades is scary (and somewhat painful). Now if only there were a Flash implementation that would work... Will _________________________________________________________________ Live Earth is coming. Learn more about the hottest summer event - only on MSN. http://liveearth.msn.com?source=msntaglineliveearthwlm

1 0

a simple CRUX prt-get question
by arnuld 08 Jun '07

08 Jun '07

now i am sure this is CRUX specific. i am very much hungry on getting an answer to this question as it is revolving in my brain since beginning. prt-get is a front-end to pkgutils, the CRUX ports-system, and it handles dependencies automatically while installing packages. i want to know why it does not handle dependencies while remove that specific package which is quite opposite to apt-get. i know we have "pkgfoster" available but why that "removal dependency-handling" was not built into prt-get when we have built "installation using dependencies". may be because of KISS approach but myself, being a newbie failed to see a connection. may you explain please ? -- http://arnuld.blogspot.com/

5 4

Updated xorg-xf86-video-i810 port problem
by Chris Pemberton 06 Jun '07

06 Jun '07

Just a word of caution for those of you upgrading this port: Version 2.0.0 of the Intel driver, among other things, fixes a problem with video bios screen resolutions, but,in my case on a laptop, makes full screen 3D crash the machine. I have to revert back to the i810 driver that Crux 2.3 shipped with to get things working again. In addition, upgrading this port gives you two video drivers: the "i810" driver you'd expect and a new driver called "intel". They are in fact the exact same driver and both cause loss of full screen 3D (at least for me). They still include a "i810" driver so people don't have to update their xorg.conf. I don't know how the new driver behaves on a desktop machine with a CRT attached; I hope better! Chris

3 4

"opt" ports problem
by arnuld 04 Jun '07

04 Jun '07

from last 2 days i am trying to download "x11-fonts-corefonts" from "opt" ports but download hangs/freezez at this place: connecting to kyz.uklinux.net | 80.84.64.291 |:80... i can download everything else but not these corefonts. any problem with download-site ? -- http://arnuld.blogspot.com/

5 7

disabling IPv6
by arnuld 04 Jun '07

04 Jun '07

i have added these 2 lines in my "/etc/modprobe.conf": alias net-pf-10 off alias ipv6 off but even after reboot i am getting IPv6 address in my "/sbin/ifconfig": [arnuld@crux ~]$ /sbin/ifconfig eth0 Link encap:Ethernet HWaddr 00:13:D4:C4:BA:F3 inet addr:192.168.0.2 Bcast:192.168.0.255 Mask:255.255.255.0 inet6 addr: fe80::213:d4ff:fec4:baf3/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:2635 errors:0 dropped:0 overruns:0 frame:0 TX packets:2593 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:3288258 (3.1 Mb) TX bytes:295006 (288.0 Kb) Interrupt:17 Base address:0x8000 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) how can i disable IPv6 in CRUX ? -- http://arnuld.blogspot.com/

4 5

X terminal problem
by arnuld 03 Jun '07

03 Jun '07

i use Windowmaker and both X-Terminal and URXVT give nasty problems when i play any audio file using Ogg123: ------------- start playing file ----------- [arnuld@crux Classic-Rock]$ ogg123 IRON\ MAIDEN-03\ Brave\ new\ world.ogg Audio Device: Advanced Linux Sound Architecture (ALSA) output Playing: IRON MAIDEN-03 Brave new world.ogg Ogg Vorbis stream: 2 channel, 44100 Hz Comment: CD'n'Go! Suite 2.00.945 Transcoded: mp3;128 Title: 03 Brave new world Artist: IRON MAIDEN Date: 2003 Track number: 3/10 Time: 00:00.02 [06:18.94] of 06:18.96 (194.7 kbps) Output Buffer 100 Time: 00:00.16 [06:18.80] of 06:18.96 (128.5 kbps) Output Buffer 100 Time: 00:00.30 [06:18.66] of 06:18.96 (134.4 kbps) Output Buffer 100 Time: 00:00.44 [06:18.52] of 06:18.96 (123.4 kbps) Output Buffer 100 Time: 00:00.58 [06:18.38] of 06:18.96 (136.7 kbps) Output Buffer 100 Time: 00:00.72 [06:18.24] of 06:18.96 (157.6 kbps) Output Buffer 96 Time: 00:00.86 [06:18.10] of 06:18.96 (166.9 kbps) Output Buffer 96 Time: 00:01.00 [06:17.96] of 06:18.96 (146.4 kbps) Output Buffer 96 this is output i get and it keeps on scrolling down for unlimited number of times. sound file plays fine but that output keeps on coming and coming. I don't understand this behaviour because Terminal, the command line, does not suffer from this problem. only in X i have this problem. any solutions ? -- http://arnuld.blogspot.com/

2 1

Gnome 2.18 Cannot mount volume
by Joshua Higgins 03 Jun '07

03 Jun '07

Hello, Just a quick question, I'm bored of KDE so I thought I'd have a look at Gnome. Its great, but when I plug in a USB Disk, I get the following error: Cannot mount volume. Error org.freedesktop.DBus.Error.AccessDenied. A security policy in place prevents this sender from sending this message to this recipient, see message configuration file (rejected message had interface "org.freedesktop.Hal.Device.Volume" member "Mount" error name "(unset)" destination "org.freedesktop.Hal") I'd really like to use the automounting function. I've looked at the FAQ and Gnome Ports pages on the crux site and found nothing about the so-called "security policy" that s preventing it from working. Any help would be really apprechiated, thanks in advance. Joshua Higgins -- >>>>>>------

2 6

ports/opt (2.3): [notify] mutt: added patch to fix CVE-2007-2683
by crux＠crux.nu 02 Jun '07

02 Jun '07

commit 1f93883f6f19e832c2edc31a320d77ca25c595f0 Author: Juergen Daubert <jue(a)jue.li> Date: Sat Jun 2 10:14:45 2007 +0200 [notify] mutt: added patch to fix CVE-2007-2683 See http://securitytracker.com/alerts/2007/May/1018066.html diff --git a/mutt/.md5sum b/mutt/.md5sum index e0daee1..7722aa9 100644 --- a/mutt/.md5sum +++ b/mutt/.md5sum @@ -1 +1,2 @@ b2c1eb45fd958f6589ee52a98f2a3ce1 mutt-1.5.15.tar.gz +d66caec79185a19a55f14a23ad6866e5 mutt_gecos_name.patch diff --git a/mutt/Pkgfile b/mutt/Pkgfile index bfa31d6..b134707 100644 --- a/mutt/Pkgfile +++ b/mutt/Pkgfile @@ -5,12 +5,14 @@ name=mutt version=1.5.15 -release=1 -source=(http://mirrors.sunsite.dk/$name/devel/$name-$version.tar.gz) +release=2 +source=(http://mirrors.sunsite.dk/$name/devel/$name-$version.tar.gz \ + mutt_gecos_name.patch) build () { cd $name-$version + patch -p1 -i $SRC/mutt_gecos_name.patch ./configure --prefix=/usr \ --mandir=/usr/man \ --with-docdir=/usr/share/mutt \ diff --git a/mutt/mutt_gecos_name.patch b/mutt/mutt_gecos_name.patch new file mode 100644 index 0000000..5f36fba --- /dev/null +++ b/mutt/mutt_gecos_name.patch @@ -0,0 +1,12 @@ +diff -Nru mutt-1.5.15.orig/muttlib.c mutt-1.5.15/muttlib.c +--- mutt-1.5.15.orig/muttlib.c 2007-05-27 19:17:55.000000000 +0200 ++++ mutt-1.5.15/muttlib.c 2007-05-27 19:26:39.000000000 +0200 +@@ -540,7 +540,7 @@ + if (dest[idx] == '&') + { + memmove (&dest[idx + pwnl], &dest[idx + 1], +- MAX(destlen - idx - pwnl - 1, 0)); ++ MAX((ssize_t)(destlen - idx - pwnl - 1), 0)); + memcpy (&dest[idx], pw->pw_name, MIN(destlen - idx - 1, pwnl)); + dest[idx] = toupper ((unsigned char) dest[idx]); + }

1 0

ports/opt (2.3): [notify] mod_php: update to 5.2.3
by crux＠crux.nu 01 Jun '07

01 Jun '07

commit 7f964cf3b236f8e6cee64835914a4e8483e7a7bc Author: Juergen Daubert <jue(a)jue.li> Date: Fri Jun 1 15:08:39 2007 +0200 [notify] mod_php: update to 5.2.3 Security fixes, see http://www.php.net/releases/5_2_3.php diff --git a/mod_php/.md5sum b/mod_php/.md5sum index 0580e37..3715582 100644 --- a/mod_php/.md5sum +++ b/mod_php/.md5sum @@ -1 +1 @@ -d084337867d70b50a10322577be0e44e php-5.2.2.tar.bz2 +eb50b751c8e1ced05bd012d5a0e4dec3 php-5.2.3.tar.bz2 diff --git a/mod_php/Pkgfile b/mod_php/Pkgfile index 25a41a0..a20e000 100644 --- a/mod_php/Pkgfile +++ b/mod_php/Pkgfile @@ -5,7 +5,7 @@ # Group: apache name=mod_php -version=5.2.2 +version=5.2.3 release=1 source=(http://www.php.net/distributions/php-$version.tar.bz2)

1 0