December 2020 - CRUX - lists.crux.nu

ports/opt (3.5): [notify] geeqie: update to 1.6, changed dependency gtk -> gtk3
by crux＠crux.nu 05 Dec '20

05 Dec '20

commit 0c6719fb24ee4ec5e9f43eb331431b4a86f14a09 Author: Juergen Daubert <jue(a)jue.li> Date: Sat Dec 5 16:35:55 2020 +0100 [notify] geeqie: update to 1.6, changed dependency gtk -> gtk3 diff --git a/geeqie/.footprint b/geeqie/.footprint index 48d934bd1..e9013508f 100644 --- a/geeqie/.footprint +++ b/geeqie/.footprint @@ -14,6 +14,7 @@ drwxr-xr-x root/root usr/lib/geeqie/ -rwxr-xr-x root/root usr/lib/geeqie/geeqie-tethered-photography-hook-script -rwxr-xr-x root/root usr/lib/geeqie/geeqie-ufraw -rwxr-xr-x root/root usr/lib/geeqie/geocode-parameters.awk +-rwxr-xr-x root/root usr/lib/geeqie/lensID drwxr-xr-x root/root usr/share/ drwxr-xr-x root/root usr/share/applications/ -rw-r--r-- root/root usr/share/applications/geeqie.desktop diff --git a/geeqie/.signature b/geeqie/.signature index 5f2624106..6d719f447 100644 --- a/geeqie/.signature +++ b/geeqie/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/QwBBYiOrVytyXY+VllAVT3FOLBrIGLNT1EGuJ698r6XUn73g9V3l3rmRYRx0qb28gAlSPra1CwSx8y3WB4tZAs= -SHA256 (Pkgfile) = 05b24c44b8702828a232a58d3e36f9e865872187b42322979bc188fa15a0b8f2 -SHA256 (.footprint) = a8ffe8d4d84794f18e6a6c17c7b354488d815248db9dd21c0acc72e8d3db3969 -SHA256 (geeqie-1.5.1.tar.xz) = 4854d5d323c31f8f4068fd73ab2c454ff91e826c4ca4d37b22c246ad14dea10a +RWSE3ohX2g5d/YtZThSYS0/mJvYVCKJ+8FCAaw1fK0UmSmPzU7Sjve6IrJRj09SJrILs+5lZZ9fbCLHl32F8CikIvck/r+dZnAY= +SHA256 (Pkgfile) = 6a31666fb135e714376cd7b2d795a23ae7791c3738bf84fb57954e4bc8c5a3d4 +SHA256 (.footprint) = 469afb95884653a76296d0ef654c372597be129f23417517e200ae645c2cefaa +SHA256 (geeqie-1.6.tar.xz) = 48f8a4474454d182353100e43878754b76227f3b8f30cfc258afc9d90a4e1920 diff --git a/geeqie/Pkgfile b/geeqie/Pkgfile index 5dc63a664..178215d75 100644 --- a/geeqie/Pkgfile +++ b/geeqie/Pkgfile @@ -1,20 +1,19 @@ # Description: Gtk+ based image viewer # URL: http://geeqie.org/ # Maintainer: Juergen Daubert, jue at crux dot nu -# Depends on: gtk +# Depends on: gtk3 name=geeqie -version=1.5.1 +version=1.6 release=1 source=(http://geeqie.org/$name-$version.tar.xz) build() { - cd $name-$version - - export LINGUAS=" " - ./configure --prefix=/usr - - make - make DESTDIR=$PKG install - rm -r $PKG/usr/share/doc + cd $name-$version + export LINGUAS=" " + export CFLAGS+=" -Wno-deprecated-declarations" + ./configure --prefix=/usr + make + make DESTDIR=$PKG install + rm -r $PKG/usr/share/{doc,metainfo} }

1 0

ports/opt (3.5): [notify] thunderbird-bin: 78.5.1. Fix for CVE-2020-26970
by crux＠crux.nu 04 Dec '20

04 Dec '20

commit be9241f49b8a7f2c8823e2552dedc48556627854 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Fri Dec 4 03:03:48 2020 +0100 [notify] thunderbird-bin: 78.5.1. Fix for CVE-2020-26970 diff --git a/thunderbird-bin/.signature b/thunderbird-bin/.signature index 42f80aadd..3b7997558 100644 --- a/thunderbird-bin/.signature +++ b/thunderbird-bin/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/TfuGop364cBn+GIBGtPuqefrmu7Dlqpl9/PCPJHxQoQggQRycr/hO3JYxuk3623q8gzf/JK3h0brxwxU5A8tAQ= -SHA256 (Pkgfile) = c427d7751e5c95f8850ee2d44a1b8937f2e78a0b0c5220203bc950a6459f8861 +RWSE3ohX2g5d/fERcZq3Tfmeu2vl9JiGtj/Ua6kqpSwHSxYszKnGfYwRFMYx/jPztshb40da/dEp9KRdLRZ8qt4YZ9z/b1doiA8= +SHA256 (Pkgfile) = d2842f1289aa77a87166419e7279556eea56dc0a693a5f5e572bb9028a161f92 SHA256 (.footprint) = caf9005cb9de0d6ba0efe5220ab8ef3eba29687acbaf95eb542c4b82df85f03b -SHA256 (thunderbird-78.5.0.tar.bz2) = 297429aff3f10ab7c2859a37ec351b6b0a478495b8a34e8b492ae3473f052c7f +SHA256 (thunderbird-78.5.1.tar.bz2) = 4363d8fd759ac4f4783eeb76726c8cf22e5afb3c171f26fe5cca5ab194ab6959 SHA256 (policies.json) = cf856011307f7831d74cdacb4e80b6dceaa49882b8dcba008d527a78764903f4 diff --git a/thunderbird-bin/Pkgfile b/thunderbird-bin/Pkgfile index 4e1dba2ca..243de5db5 100644 --- a/thunderbird-bin/Pkgfile +++ b/thunderbird-bin/Pkgfile @@ -4,7 +4,7 @@ # Depends on: gtk3, dbus-glib name=thunderbird-bin -version=78.5.0 +version=78.5.1 release=1 source=(http://ftp.mozilla.org/pub/thunderbird/releases/$version/linux-x86_… \ policies.json)

1 0

ports/opt (3.5): [notify] unbound: update to 1.13.0
by crux＠crux.nu 03 Dec '20

03 Dec '20

commit 0cf3fd1548215b3e00bfb6fb358e639e67511bc2 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Dec 3 13:42:28 2020 +0100 [notify] unbound: update to 1.13.0 includes a security fix for CVE-2020-28935, see https://nlnetlabs.nl/downloads/nsd/CVE-2020-28935.txt diff --git a/unbound/.signature b/unbound/.signature index 73445acdd..6fe9c2ad8 100644 --- a/unbound/.signature +++ b/unbound/.signature @@ -1,8 +1,8 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/V22x71D6mdfFPe3cLKbI1djIKksWH4jNN2iDxRurFg4hhajQMTFpa0mnSM/KCcrM4gYhk8pcbcSOWCjYOX4gw0= -SHA256 (Pkgfile) = edba828fc6128fecd8f1dee2676cdeb20b42886d399157a400046eb619613207 +RWSE3ohX2g5d/fbvt61PE0gek7PcFiUePK5K8YzYTMXCYumBHF501bWcODqLfwtu4oxhPFBGkMGYrtlG4H2oVZGtJwNhLlCA9gQ= +SHA256 (Pkgfile) = d93ea20a989b4ed5043ec92b741f69752493ca47e233d48fc756c5ed952cb625 SHA256 (.footprint) = 55dae6262dda05e002b80b843c0e57553a93a9e770d86630d104c04e3efaced7 -SHA256 (unbound-1.12.0.tar.gz) = 5b9253a97812f24419bf2e6b3ad28c69287261cf8c8fa79e3e9f6d3bf7ef5835 +SHA256 (unbound-1.13.0.tar.gz) = a954043a95b0326ca4037e50dace1f3a207a0a19e9a4a22f4c6718fc623db2a1 SHA256 (unbound) = 54c94f1813c00c7faac51bde904b879b73d043e87c49cf8aff63de565368a095 SHA256 (README) = df6c339bdb1dcb173ec13cfdb37c28ea2d47a2700334aea3c503ef96f955f043 SHA256 (pre-install) = ec1d006e0ec4dca5b83fb0364ae2a591a9ffad7c41bac0c45f22f32a9d55f2c5 diff --git a/unbound/Pkgfile b/unbound/Pkgfile index 40707921f..b15a8b46c 100644 --- a/unbound/Pkgfile +++ b/unbound/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl expat name=unbound -version=1.12.0 +version=1.13.0 release=1 source=(https://unbound.net/downloads/$name-$version.tar.gz unbound

1 0

ports/opt (3.5): [notify] nsd: update to 4.3.4
by crux＠crux.nu 03 Dec '20

03 Dec '20

commit 05b699e1ca25f5b3a03f50e3f25f2a7bd4947dd7 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Dec 3 13:40:31 2020 +0100 [notify] nsd: update to 4.3.4 includes a fix for CVE-2020-28935, see https://nlnetlabs.nl/downloads/nsd/CVE-2020-28935.txt diff --git a/nsd/.signature b/nsd/.signature index 6798bde96..9fd6fefc3 100644 --- a/nsd/.signature +++ b/nsd/.signature @@ -1,7 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/a5JcQt6BieNlFv5Fi90c9jAQe38HLrEDCQXMRL2LKTjBRZFkvCnUPxq5JAurllT43OZ1bjRWmwFJuSz8lNqXAk= -SHA256 (Pkgfile) = b31d7691cbe2b67a8d5f9779fde8784e0daa810e71770e760410afb72e4fed1c +RWSE3ohX2g5d/Yd5IW0scOo6gUJ9NE3AhuTV0RW7pwcoPIDVib+KSEUtMg61c+eb2B7gSirqzLfgW+ibY1WLpaZadogWydbjzwQ= +SHA256 (Pkgfile) = bc8a04d93b5adee8626b54e389dc125808db4f9ec95081c25121d4788d2f27f7 SHA256 (.footprint) = e7c1c5de89399eb933cfdad3ceff7b6500a1726c7d8388d9ee9dfabcef8545bf -SHA256 (nsd-4.3.3.tar.gz) = 5fc6d81a977c0246b741da691acaab5c62830a8b38ce696021c26f372d8eed51 +SHA256 (nsd-4.3.4.tar.gz) = 3be834a97151a7ba8185e46bc37ff12c2f25f399755ae8a2d0e3711801528b50 SHA256 (README) = 0dcc9d869c404b81deb9713e40f5d60e9b1e144c8f59b0ce4c633f3f1139eb8e SHA256 (pre-install) = 3082d6ae0dc1d1e60942e91a2db33019b2b53c62a06d12db2be52b2a1524ea27 diff --git a/nsd/Pkgfile b/nsd/Pkgfile index 063f5d522..609b9bfd0 100644 --- a/nsd/Pkgfile +++ b/nsd/Pkgfile @@ -4,7 +4,7 @@ # Depends on: openssl name=nsd -version=4.3.3 +version=4.3.4 release=1 source=(http://www.nlnetlabs.nl/downloads/nsd/$name-$version.tar.gz README pre-install)

1 0

ports/xorg (3.5): [notify] xorg-server: 1.20.10. Fixes for CVE-2020-14360, CVE-2020-25712
by crux＠crux.nu 01 Dec '20

01 Dec '20

commit d139c538191733ae53cbd8d28ce3275f95aabcdc Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Tue Dec 1 19:02:53 2020 +0100 [notify] xorg-server: 1.20.10. Fixes for CVE-2020-14360, CVE-2020-25712 Multiple input validation failures in X server XKB extension ============================================================ These issues can lead to privileges elevations for authorized clients on systems where the X server is running privileged. * CVE-2020-14360 / ZDI CAN 11572 XkbSetMap Out-Of-Bounds Access Insufficient checks on the lengths of the XkbSetMap request can lead to out of bounds memory accesses in the X server. * CVE-2020-25712 / ZDI-CAN-11839 XkbSetDeviceInfo Heap-based Buffer Overflow Insufficient checks on input of the XkbSetDeviceInfo request can lead to a buffer overflow on the head in the X server. diff --git a/xorg-server/.signature b/xorg-server/.signature index b16c38d7..7e6329ea 100644 --- a/xorg-server/.signature +++ b/xorg-server/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/xorg.pub -RWTSGWF5Q7TndLiXG/Mse5mSkOO2Qzva0uXLVaAem+/I1MX/GcGGnjNs2okLKyzG3wB5Yffqou//IE6o6W/IQ9jld2nVIqqATQQ= -SHA256 (Pkgfile) = 5e27a4794eae50de0b5ed40522481ba0889d31016808f081cc50b16aee5a0b83 +RWTSGWF5Q7TndGMXoWb+WtrcCadowj6ixbUkX1TOFZ+ysPp8DAjN6UvkF+9DZlb3fulCIF8Oe3YAI+gG02W3ayt3glv/hreengk= +SHA256 (Pkgfile) = ed42a86d4d3166f51df11f3e82373fd8e52a10056620a818986e19a45d870083 SHA256 (.footprint) = d159a275a4868001332954580ab4f70976c97a80334b157023935b36722e50cd -SHA256 (xorg-server-1.20.9.tar.bz2) = e219f2e0dfe455467939149d7cd2ee53b79b512cc1d2094ae4f5c9ed9ccd3571 +SHA256 (xorg-server-1.20.10.tar.bz2) = 977420c082450dc808de301ef56af4856d653eea71519a973c3490a780cb7c99 diff --git a/xorg-server/Pkgfile b/xorg-server/Pkgfile index 66cf40f5..abb39b04 100644 --- a/xorg-server/Pkgfile +++ b/xorg-server/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libepoxy xorg-bdftopcf xorg-font-util xorg-libdmx xorg-libxaw xorg-libxcomposite xorg-libxcursor xorg-libxfont2 xorg-libxft xorg-libxinerama xorg-libxkbfile xorg-libxres xorg-libxtst xorg-libxxf86dga xorg-mkfontscale xorg-xcb-util-keysyms name=xorg-server -version=1.20.9 +version=1.20.10 release=1 source=(https://www.x.org/releases/individual/xserver/$name-$version.tar.bz…

1 0