- CRUX - lists.crux.nu

ports/opt (3.7): [notify] apache: updated to version 2.5.60
by crux＠crux.nu 01 Jul '24

01 Jul '24

Commit hash: 291356ad9bd3c408cbf8a638254e60eb1a5a8c79 Author: Juergen Daubert <jue(a)jue.li> Date: Mon Jul 01 03:34:01 2024 UTC+02:00 URL: https://git.crux.nu/ports/opt/commit/291356ad9bd3c408cbf8a638254e60eb1a5a8c… Commit message: [notify] apache: updated to version 2.5.60 several security fixes, see https://downloads.apache.org/httpd/CHANGES_2.4.60

1 0

ports/core (3.7): [notify] openssh: updated to version 9.8
by crux＠crux.nu 01 Jul '24

01 Jul '24

Commit hash: 7f845d7f64460926ec2dc2ba001561c43f777ddd Author: Juergen Daubert <jue(a)jue.li> Date: Mon Jul 01 01:32:39 2024 UTC+02:00 URL: https://git.crux.nu/ports/core/commit/7f845d7f64460926ec2dc2ba001561c43f777… Commit message: [notify] openssh: updated to version 9.8 includes security fixes, see https://lists.mindrot.org/pipermail/openssh-unix-announce/2024-July/000158.…

1 0

core: util-linux: could setpriv(1) be included, please?
by Steffen Nurpmeso 20 Jun '24

20 Jun '24

Hello. The last change brought its manual page, but the program as such is missing. It *could* be that -D build-setpriv=enable does it, but i do not really now. setpriv(1) seems to be a cool thing, much better than capsh (from libcap), it would be very nice to have it!! (Especially for newer kernels and especially shall https://lwn.net/ml/all/20240609104355.442002-1-jcalmels@3xx0.net/ make it into it.) Ciao! P.S.: for 3.8, perl now is at 5.40.0. --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)

1 0

ports/contrib (3.7): [notify] nginx: updated to version 1.27.0; security update, fixes multiple CVEs related to HTTP/3
by crux＠crux.nu 11 Jun '24

11 Jun '24

Commit hash: 449978fd18c980ae7644a34ea48868e83dfdffaa Author: Matt Housh <jaeger(a)crux.ninja> Date: Tue Jun 11 01:16:02 2024 UTC-05:00 URL: https://git.crux.nu/ports/contrib/commit/449978fd18c980ae7644a34ea48868e83d… Commit message: [notify] nginx: updated to version 1.27.0; security update, fixes multiple CVEs related to HTTP/3 See the following for details: http://nginx.org/en/security_advisories.html https://www.cve.org/CVERecord?id=CVE-2024-32760 https://www.cve.org/CVERecord?id=CVE-2024-31079 https://www.cve.org/CVERecord?id=CVE-2024-35200 https://www.cve.org/CVERecord?id=CVE-2024-34161

1 0

ports/opt (3.7): [notify] ffmpeg: 6.1.1 -> 7.0.1; check revdep after sysup
by crux＠crux.nu 10 Jun '24

10 Jun '24

Commit hash: 705f7384fd0756f74fca726a6305fee852f05a33 Author: Tim Biermann <tbier(a)posteo.de> Date: Mon Jun 10 11:37:15 2024 UTC+02:00 URL: https://git.crux.nu/ports/opt/commit/705f7384fd0756f74fca726a6305fee852f05a… Commit message: [notify] ffmpeg: 6.1.1 -> 7.0.1; check revdep after sysup

1 0

ports/contrib (3.7): [notify] vte3: updated to version 0.76.3; security update, fixes CVE-2024-37535
by crux＠crux.nu 10 Jun '24

10 Jun '24

Commit hash: ace504387d6f4aa1483ac500a8254af2fc6c985f Author: Matt Housh <jaeger(a)crux.ninja> Date: Mon Jun 10 10:59:31 2024 UTC-05:00 URL: https://git.crux.nu/ports/contrib/commit/ace504387d6f4aa1483ac500a8254af2fc… Commit message: [notify] vte3: updated to version 0.76.3; security update, fixes CVE-2024-37535 See the following for details: https://www.cve.org/CVERecord?id=CVE-2024-37535 https://gitlab.gnome.org/GNOME/vte/-/issues/2786

1 0

ports/contrib (3.7): [notify] go: updated to version 1.22.4; security update for CVE-2024-24789 and CVE-2024-24790
by crux＠crux.nu 04 Jun '24

04 Jun '24

Commit hash: 154c7b4d8eafcd6fcfc59d519822c3a91cb4fe64 Author: Matt Housh <jaeger(a)crux.ninja> Date: Tue Jun 04 05:28:59 2024 UTC-05:00 URL: https://git.crux.nu/ports/contrib/commit/154c7b4d8eafcd6fcfc59d519822c3a91c… Commit message: [notify] go: updated to version 1.22.4; security update for CVE-2024-24789 and CVE-2024-24790 See the following for details: https://go.dev/doc/devel/release#go1.22.4 https://github.com/golang/go/issues/66869 https://github.com/golang/go/issues/67680

1 0

clang: symlink missing
by Steffen Nurpmeso 03 Jun '24

03 Jun '24

Hi. For some time already (.4 at minimum), but i thought i report it ln -s /usr/lib/clang/ccc-analyzer /usr/bin/ ln -s /usr/lib/clang/c++-analyzer /usr/bin/ It is searched there by at least scan-build. (Let me praise Coverity.) --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)

1 0

ports/opt (3.7): [notify] ccache: 4.9.1 -> 4.10; new harddependencies: fmt, xxhash
by crux＠crux.nu 02 Jun '24

02 Jun '24

Commit hash: 10c166b5c8b5d0b579dc1bb4304ae7e0d6696449 Author: Tim Biermann <tbier(a)posteo.de> Date: Sun Jun 02 02:16:27 2024 UTC+02:00 URL: https://git.crux.nu/ports/opt/commit/10c166b5c8b5d0b579dc1bb4304ae7e0d66964… Commit message: [notify] ccache: 4.9.1 -> 4.10; new harddependencies: fmt, xxhash

1 0

ports/xorg (3.7): Revert "[notify] mesa: 24.0.8 -> 24.1.0; iris driver now depends on libclc"
by crux＠crux.nu 01 Jun '24

01 Jun '24

Commit hash: 81fc1f79812ecc3dad481254ed7e22553168f68e Author: Tim Biermann <tbier(a)posteo.de> Date: Sat Jun 01 01:18:23 2024 UTC+02:00 URL: https://git.crux.nu/ports/xorg/commit/81fc1f79812ecc3dad481254ed7e22553168f… Commit message: Revert "[notify] mesa: 24.0.8 -> 24.1.0; iris driver now depends on libclc" This reverts commit d77b2046c2094e8f63a4703eb5328008b1c8dbf9. 24.1.0 needs a bit more work around rust and libclc dependencies.

1 0