- CRUX - lists.crux.nu

ports/contrib (3.7): [notify] nextcloud-client: 3.13.3 -> 3.14.0; now uses qt6, see changed dependencies
by crux＠crux.nu 15 Sep '24

15 Sep '24

Commit hash: 35c068741d764094219c11e79e39633199a6c52f Author: Tim Biermann <tbier(a)posteo.de> Date: Sun Sep 15 10:15:07 2024 UTC+02:00 URL: https://git.crux.nu/ports/contrib/commit/35c068741d764094219c11e79e39633199… Commit message: [notify] nextcloud-client: 3.13.3 -> 3.14.0; now uses qt6, see changed dependencies

1 0

ports/core (3.7): [notify] libarchive: updated to version 3.7.5
by crux＠crux.nu 14 Sep '24

14 Sep '24

Commit hash: 5006368602922d279c6764b026fa6004ef5875e5 Author: Juergen Daubert <jue(a)jue.li> Date: Sat Sep 14 02:01:34 2024 UTC+02:00 URL: https://git.crux.nu/ports/core/commit/5006368602922d279c6764b026fa6004ef587… Commit message: [notify] libarchive: updated to version 3.7.5 several security fixes, see https://github.com/libarchive/libarchive/releases/tag/v3.7.5

1 0

ports/opt (3.7): [notify] samba: updated to version 4.21.0
by crux＠crux.nu 11 Sep '24

11 Sep '24

Commit hash: 1fe17ea455db5ab9f6fbc522e5f10a67a157e263 Author: Juergen Daubert <jue(a)jue.li> Date: Wed Sep 11 03:44:56 2024 UTC+02:00 URL: https://git.crux.nu/ports/opt/commit/1fe17ea455db5ab9f6fbc522e5f10a67a157e2… Commit message: [notify] samba: updated to version 4.21.0 as of version 4.21.0 of samba it's no longer possible to install ldb as a standalone package [1]. Remove ldb before the samba update. [1] https://www.samba.org/samba/history/samba-4.21.0.html

1 0

ports/contrib (3.7): [notify] runc: updated to version 1.1.14; security update
by crux＠crux.nu 06 Sep '24

06 Sep '24

Commit hash: 7da2991be61175ee79bb1eeacae275bb57ebda04 Author: Matt Housh <jaeger(a)crux.ninja> Date: Fri Sep 06 06:37:47 2024 UTC-05:00 URL: https://git.crux.nu/ports/contrib/commit/7da2991be61175ee79bb1eeacae275bb57… Commit message: [notify] runc: updated to version 1.1.14; security update Fixes CVE-2024-45310, see the following for details: https://github.com/advisories/GHSA-jfvp-7x6p-h2pv https://www.cve.org/CVERecord?id=CVE-2024-45310

1 0

pkgmk: overlay support
by Steffen Nurpmeso 29 Aug '24

29 Aug '24

Hello. In the past there was someone who had pretty thoughtful overlay support. If you read this, please have a look. The thing is to me, the overlays start to produce quite a workload, and signatures cannot (easily) be used without proper overlay support. And without md5sum there is *no* verification that tarball checksums match etc etc. People, it would be *very* nice if pkgmk would gain a simple overlay support. This is really easy, i thought this: - pkgmk.conf: new $PKGMK_OVERLAY_DIR. Defaults to empty. - pkgmk: . new empty function stub "overlay() { ; }". . check existance of "$PKGMK_OVERLAY_DIR/$name/Overlay" if $PKGMK_OVERLAY_DIR is set, otherwise check for "Overlay" where we look for "Pkgfile". . if there is a match, source that, after Pkgfile. + optionally check whether overlay() is a shell function (as is done for build() of Pkgfile). . invoke "(set -e -x; overlay; build)" instead of "(set -e -x; build)". Like this Overlay can append to sources and renames, can overwrite build etc, but is otherwise not in the way. 'Seems to me, signature verification will still work (new files are simply not checked). The above should cumulate to a very small patch, add some for documentation. I will implement it and try it out, i also still have (and use) the zst support patch, so an overlay, anyway. If it works it is an easy way to allow overlays again; in the past it was easy, with md5sum (just replace Pkgfile entry me thinks), but with signatures it is all or nothing, so, in real life, it is nothing. Please, consider adding regular support for overlays. Thanks for your consideration. --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)

1 0

ports/xorg (3.7): [notify] mesa: 24.1.6 -> 24.2.1; new dependency: python3-pyyaml
by crux＠crux.nu 29 Aug '24

29 Aug '24

Commit hash: cd8dc54d95aaeb476795cf1527940f843d83c0c5 Author: Tim Biermann <tbier(a)posteo.de> Date: Thu Aug 29 08:12:52 2024 UTC+02:00 URL: https://git.crux.nu/ports/xorg/commit/cd8dc54d95aaeb476795cf1527940f843d83c… Commit message: [notify] mesa: 24.1.6 -> 24.2.1; new dependency: python3-pyyaml

1 0

ports/contrib (3.7): [notify] nginx: updated to version 1.27.1; security update, fixes CVE-2024-7347
by crux＠crux.nu 18 Aug '24

18 Aug '24

Commit hash: bbe7b14207e89e436815e80ed5a0d090318042c5 Author: Matt Housh <jaeger(a)crux.ninja> Date: Sun Aug 18 02:17:44 2024 UTC-05:00 URL: https://git.crux.nu/ports/contrib/commit/bbe7b14207e89e436815e80ed5a0d09031… Commit message: [notify] nginx: updated to version 1.27.1; security update, fixes CVE-2024-7347 See the following for details: https://nginx.org/en/security_advisories.html https://www.cve.org/CVERecord?id=CVE-2024-7347

1 0

intel-ucode: signature mismatch
by Steffen Nurpmeso 17 Aug '24

17 Aug '24

Hello! =======> ERROR: Signature mismatch found: MISMATCH microcode-20240813.tar.gz =======> ERROR: Building '/usr/ports/built/intel-ucode#20240813-1.pkg.tar.zst' failed. --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)

1 0

Weird bug in recent installers
by Steve Volumetric 15 Aug '24

15 Aug '24

Hello all, While not official, I've been finding that the crux.ninja ISOs seem to have an issue in the installer where if I select core, opt and xorg together, the installer tries to progress, but it throws up "Abort install?" and the only answer it lets me choose is yes, selecting no just leaves the message on the screen. My workaround has been to only select core and opt together, which seems to work fine. Then I go back and "upgrade" the install. anyone else seeing this?

3 7

ports/opt (3.7): [notify] polkit: 124 -> 125; new dependency: consolekit
by crux＠crux.nu 10 Aug '24

10 Aug '24

Commit hash: d91cb7da6c125ba2a3884391d1295cb5cb60f4b1 Author: Tim Biermann <tbier(a)posteo.de> Date: Sat Aug 10 12:23:05 2024 UTC+02:00 URL: https://git.crux.nu/ports/opt/commit/d91cb7da6c125ba2a3884391d1295cb5cb60f4… Commit message: [notify] polkit: 124 -> 125; new dependency: consolekit

1 0