Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Florian Franzmann (60ffc594fac758baee1ab46a2316d0c2541ac044)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Florian Franzmann <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Florian Franzmann (60ffc594fac758baee1ab46a2316d0c2541ac044)
  • Date: Mon, 20 Aug 2018 09:32:55 +0000

GIT changes to master grimoire by Florian Franzmann
<siflfran AT hawo.stw.uni-erlangen.de>:

audio-players/mpd/DETAILS | 2 -
audio-players/mpd/HISTORY | 3 ++
editors/vim/DETAILS | 4 +-
editors/vim/HISTORY | 3 ++
graphics-libs/babl/DETAILS | 4 +-
graphics-libs/babl/HISTORY | 3 ++
graphics-libs/gegl/DETAILS | 4 +-
graphics-libs/gegl/HISTORY | 3 ++
haskell/haskell-math-functions/DETAILS | 4 +-
haskell/haskell-math-functions/HISTORY | 3 ++
libs/libqrencode/DETAILS | 4 +-
libs/libqrencode/HISTORY | 3 ++
libs/libsodium/DETAILS | 2 -
libs/libsodium/HISTORY | 3 ++
xorg-app/xdm/DETAILS | 1
xorg-app/xdm/HISTORY | 5 +++
xorg-app/xdm/PRE_BUILD | 1
xorg-app/xdm/xdm-1.1.11-cve-2013-2179.patch | 41
++++++++++++++++++++++++++++
18 files changed, 81 insertions(+), 12 deletions(-)

New commits:
commit 60ffc594fac758baee1ab46a2316d0c2541ac044
Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
Commit: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>

haskell/haskell-math-functions: version 0.3.0.1

commit 05d49d81cd80d8f6dbf9884fcb9560b85a33510a
Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
Commit: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>

editors/vim: version 8.1.0301

commit 2d76341aa6d6cd89d19034738b1e5fadf3cb594e
Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
Commit: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>

graphics-libs/gegl: version 0.4.8

commit bdf9dba35a6af8ef8cdcacd06da08b4dbc73a4a1
Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
Commit: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>

graphics/libs/babl: version 0.1.56

commit 29c37330289f3f94fdaf12496bb61146a87e2d41
Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
Commit: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>

xorg-app/xdm: fix possible null-pointer dereference

commit ee484f641f35fa4ca47c2950c42047509d00e904
Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
Commit: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>

libs/libqrencode: version 4.0.2

commit 3613a3e545b7b2f5f9164e4cc4995b10a8ce2237
Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
Commit: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>

libs/libsodium: version 1.0.16

commit 9c7fb2a7637215e0b04d75fdd019042dbb9187b2
Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
Commit: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>

audio-players/mpd: version 0.20.21

diff --git a/audio-players/mpd/DETAILS b/audio-players/mpd/DETAILS
index e3fb1ed..8902695 100755
--- a/audio-players/mpd/DETAILS
+++ b/audio-players/mpd/DETAILS
@@ -1,5 +1,5 @@
SPELL=mpd
- VERSION=0.20.20
+ VERSION=0.20.21
SOURCE=$SPELL-$VERSION.tar.xz
SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"

SOURCE_URL[0]=http://www.musicpd.org/download/${SPELL}/${VERSION:0:4}/${SOURCE}
diff --git a/audio-players/mpd/HISTORY b/audio-players/mpd/HISTORY
index c2258b9..7314ca8 100644
--- a/audio-players/mpd/HISTORY
+++ b/audio-players/mpd/HISTORY
@@ -1,3 +1,6 @@
+2018-08-19 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * DETAILS: version 0.20.21
+
2018-05-23 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DETAILS: version 0.20.20

diff --git a/editors/vim/DETAILS b/editors/vim/DETAILS
index 830490d..4760e0f 100755
--- a/editors/vim/DETAILS
+++ b/editors/vim/DETAILS
@@ -8,12 +8,12 @@ SOURCE_DIRECTORY=${BUILD_DIRECTORY}/${SPELL}-${VERSION}
SOURCE_URL=hg_http://vim.googlecode.com/hg:${SPELL}-hg
SOURCE_IGNORE=volatile
else
- VERSION=8.1.0296
+ VERSION=8.1.0301
SECURITY_PATCH=4
SOURCE=${SPELL}-${VERSION}.tar.gz
SOURCE_DIRECTORY=${BUILD_DIRECTORY}/${SPELL}-${VERSION}
SOURCE_URL[0]=https://github.com/vim/vim/archive/v${VERSION}.tar.gz
-
SOURCE_HASH=sha512:3a4bd6fcf530e0145901be93074ea4ddf1633df943477995ab4da81fbb4062da20caf24362c50d8143cbdc3405ae8244866dafae394b79f3281cb63cb2491bb5
+
SOURCE_HASH=sha512:26d921c8c07f3d15fdd77c879fcaf906c2179eec657536ca1148e568e8e509a147a5f370c1485b3e94e1c1fcb6a12906980f1e3ab0fa5548f6a995a0db111cf7
fi
WEB_SITE=http://www.vim.org
LICENSE[0]=http://vimdoc.sourceforge.net/htmldoc/uganda.html#license
diff --git a/editors/vim/HISTORY b/editors/vim/HISTORY
index 7aad467..f6a05f6 100644
--- a/editors/vim/HISTORY
+++ b/editors/vim/HISTORY
@@ -1,3 +1,6 @@
+2018-08-20 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * DETAILS: version 8.1.0301
+
2018-08-19 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DETAILS: version 8.1.0296

diff --git a/graphics-libs/babl/DETAILS b/graphics-libs/babl/DETAILS
index b50a15c..6f13ed1 100755
--- a/graphics-libs/babl/DETAILS
+++ b/graphics-libs/babl/DETAILS
@@ -1,7 +1,7 @@
SPELL=babl
- VERSION=0.1.54
+ VERSION=0.1.56
SOURCE="${SPELL}-${VERSION}.tar.bz2"
-
SOURCE_HASH=sha512:91406c4e6f3fc6167ae68760c14e391707177f6e5afde49e09fa90cb70d25cf69e71d1de9cd8e96a6944aa49a44f28deffa86821d93de79cfa3faa95ec5b174e
+
SOURCE_HASH=sha512:e3d6192126df136537ce13b2858a7ec078251093762052bb3edd826a26ab36fee73375ee854bdf423f22fc30f23bcafb3ae46e986ed6555f3ef0809b12c612ba

SOURCE_URL[0]=https://download.gimp.org/pub/${SPELL}/${VERSION%.*}/${SOURCE}
SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELL}-${VERSION}"
WEB_SITE="http://gegl.org/babl/";
diff --git a/graphics-libs/babl/HISTORY b/graphics-libs/babl/HISTORY
index 70a7bc5..8201e23 100644
--- a/graphics-libs/babl/HISTORY
+++ b/graphics-libs/babl/HISTORY
@@ -1,3 +1,6 @@
+2018-08-20 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * DETAILS: version 0.1.56
+
2018-07-23 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DETAILS: version 0.1.54

diff --git a/graphics-libs/gegl/DETAILS b/graphics-libs/gegl/DETAILS
index 78ad615..206caed 100755
--- a/graphics-libs/gegl/DETAILS
+++ b/graphics-libs/gegl/DETAILS
@@ -1,7 +1,7 @@
SPELL=gegl
- VERSION=0.4.6
+ VERSION=0.4.8
SOURCE=$SPELL-$VERSION.tar.bz2
-
SOURCE_HASH=sha512:6df34b6e76318a375820bccac6efeb2792c737e47154902fcc08ef93cb45b978992ee263260c99f8e865964d80cd1fac6dc2d6c8e4453174df64a9044b57325e
+
SOURCE_HASH=sha512:20d2700cc74bce02e3e1b477f5e4dbd6546bb74625de235baaaa31e24f506930927af53de3d0880c0b16f93a10cec993c58a12adba59dec7dda0e389261799aa
SOURCE_URL[0]=https://download.gimp.org/pub/$SPELL/${VERSION%.*}/$SOURCE
SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
WEB_SITE=http://gegl.org/
diff --git a/graphics-libs/gegl/HISTORY b/graphics-libs/gegl/HISTORY
index 1a0221c..7f2f16c 100644
--- a/graphics-libs/gegl/HISTORY
+++ b/graphics-libs/gegl/HISTORY
@@ -1,3 +1,6 @@
+2018-08-20 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * DETAILS: version 0.4.8
+
2018-07-23 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DETAILS: version 0.4.6

diff --git a/haskell/haskell-math-functions/DETAILS
b/haskell/haskell-math-functions/DETAILS
index 5cd434b..7942ae1 100755
--- a/haskell/haskell-math-functions/DETAILS
+++ b/haskell/haskell-math-functions/DETAILS
@@ -1,8 +1,8 @@
SPELL=haskell-math-functions
- VERSION=0.2.1.0
+ VERSION=0.3.0.1
SOURCE="math-functions-${VERSION}.tar.gz"

SOURCE_URL[0]=https://hackage.haskell.org/package/math-functions-${VERSION}/${SOURCE}
-
SOURCE_HASH=sha512:8124ec1c10791d54ed7420770311d83bcaed0829a29bda79a2f963cfa42e50c21d5e79d3d9480795ee59ab5a461bf04b64fedf30955e8fef6593004c4137b7f4
+
SOURCE_HASH=sha512:ebaf8b967cd7c2c0da1662f361d077c44da4a1375e50f90db5f49151a4f9009429a4bd34d8a44052a6a42a553226717e3b95b52974bcd209ea3042c15746d868
SOURCE_DIRECTORY="${BUILD_DIRECTORY}/math-functions-${VERSION}"
WEB_SITE="https://github.com/bos/math-functions";
LICENSE[0]=BSD
diff --git a/haskell/haskell-math-functions/HISTORY
b/haskell/haskell-math-functions/HISTORY
index 96c2632..f464803 100644
--- a/haskell/haskell-math-functions/HISTORY
+++ b/haskell/haskell-math-functions/HISTORY
@@ -1,3 +1,6 @@
+2018-08-20 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * DETAILS: version 0.3.0.1
+
2018-01-25 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DEPENDS, DETAILS: spell created

diff --git a/libs/libqrencode/DETAILS b/libs/libqrencode/DETAILS
index aeee127..7678041 100755
--- a/libs/libqrencode/DETAILS
+++ b/libs/libqrencode/DETAILS
@@ -1,9 +1,9 @@
SPELL=libqrencode
SPELLX=qrencode
- VERSION=4.0.0
+ VERSION=4.0.2
SOURCE="${SPELLX}-${VERSION}.tar.bz2"
SOURCE_URL[0]=https://fukuchi.org/works/qrencode/${SOURCE}
-
SOURCE_HASH=sha512:d4140d77fce3a1c39735cc3e98e3a19018daaa08c870644f71727d27ffb17711e76b4ed4e51718d90d812e78df75fe575617580ea9b1bf210438f8fd1734204e
+
SOURCE_HASH=sha512:2429c7938e32eacbaf327c029c7745ba33259f879661a8b6470cc617c780daf5bd1d5689599151df62e84badd2568eccab6c12f157331e512ab24a3899e0f002
SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELLX}-${VERSION}"
WEB_SITE=https://fukuchi.org/works/qrencode/
LICENSE[0]=LGPL
diff --git a/libs/libqrencode/HISTORY b/libs/libqrencode/HISTORY
index 97f3600..ea104e7 100644
--- a/libs/libqrencode/HISTORY
+++ b/libs/libqrencode/HISTORY
@@ -1,3 +1,6 @@
+2018-08-19 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * DETAILS: version 4.0.2
+
2018-03-18 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 4.0.0

diff --git a/libs/libsodium/DETAILS b/libs/libsodium/DETAILS
index 675f361..c08a673 100755
--- a/libs/libsodium/DETAILS
+++ b/libs/libsodium/DETAILS
@@ -1,5 +1,5 @@
SPELL=libsodium
- VERSION=1.0.10
+ VERSION=1.0.16
SOURCE="${SPELL}-${VERSION}.tar.gz"
SOURCE2="${SOURCE}.sig"
SOURCE_URL[0]=https://download.libsodium.org/${SPELL}/releases/${SOURCE}
diff --git a/libs/libsodium/HISTORY b/libs/libsodium/HISTORY
index 02b22b4..a1b6368 100644
--- a/libs/libsodium/HISTORY
+++ b/libs/libsodium/HISTORY
@@ -1,3 +1,6 @@
+2018-08-19 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * DETAILS: version 1.0.16
+
2016-04-07 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DETAILS: version 1.0.10

diff --git a/xorg-app/xdm/DETAILS b/xorg-app/xdm/DETAILS
index 1f011fc..0196d92 100755
--- a/xorg-app/xdm/DETAILS
+++ b/xorg-app/xdm/DETAILS
@@ -1,5 +1,6 @@
SPELL=xdm
VERSION=1.1.11
+ PATCHLEVEL=1
SOURCE=$SPELL-$VERSION.tar.bz2

SOURCE_URL[0]=http://xorg.freedesktop.org/releases/individual/app/${SOURCE}

SOURCE_HASH=sha512:fe6f2b7817c0f7f07a1f5f497edcdfa15b93986fd87f314daa472dac8625327ef46ebbf40d27fe8d4a8a2f8d5af8a01c4438a29356740e0eb350f2bd0c7ec0d5
diff --git a/xorg-app/xdm/HISTORY b/xorg-app/xdm/HISTORY
index cb6cf31..fa17a10 100644
--- a/xorg-app/xdm/HISTORY
+++ b/xorg-app/xdm/HISTORY
@@ -1,3 +1,8 @@
+2018-08-19 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * PRE_BUILD, xdm-1.1.11-cve-2013-2179.patch: fix potential
null-pointer dereference,
+ patch from gentoo
+ * DETAILS: PATCHLEVEL++
+
2018-02-06 Treeve Jelbert <treeve AT sourcemage.org>
* DEPENDS: use xorgproto

diff --git a/xorg-app/xdm/PRE_BUILD b/xorg-app/xdm/PRE_BUILD
index 2680a14..258c0f6 100755
--- a/xorg-app/xdm/PRE_BUILD
+++ b/xorg-app/xdm/PRE_BUILD
@@ -2,6 +2,7 @@ default_pre_build &&
cd "${SOURCE_DIRECTORY}" &&

patch -p1 <
"${SPELL_DIRECTORY}/0001-use-X-s-default-authentication-mechanism-instead-of-.patch"
&&
+patch -p1 < "${SPELL_DIRECTORY}/xdm-1.1.11-cve-2013-2179.patch"
&&

if [[ $XDM_XCONSOLE == "n" ]]; then
patch -p1 < "$SPELL_DIRECTORY/0001-do-not-start-xconsole.patch"
diff --git a/xorg-app/xdm/xdm-1.1.11-cve-2013-2179.patch
b/xorg-app/xdm/xdm-1.1.11-cve-2013-2179.patch
new file mode 100644
index 0000000..34ae7ce
--- /dev/null
+++ b/xorg-app/xdm/xdm-1.1.11-cve-2013-2179.patch
@@ -0,0 +1,41 @@
+From 8d1eb5c74413e4c9a21f689fc106949b121c0117 Mon Sep 17 00:00:00 2001
+From: mancha <mancha1 AT hush.com>
+Date: Wed, 22 May 2013 14:20:26 +0000
+Subject: Handle NULL returns from glibc 2.17+ crypt().
+
+Starting with glibc 2.17 (eglibc 2.17), crypt() fails with EINVAL
+(w/ NULL return) if the salt violates specifications. Additionally,
+on FIPS-140 enabled Linux systems, DES/MD5-encrypted passwords
+passed to crypt() fail with EPERM (w/ NULL return).
+
+If using glibc's crypt(), check return value to avoid a possible
+NULL pointer dereference.
+
+Reviewed-by: Matthieu Herrb <matthieu AT herrb.eu>
+Signed-off-by: Alan Coopersmith <alan.coopersmith AT oracle.com>
+---
+diff --git a/greeter/verify.c b/greeter/verify.c
+index db3cb7d..b009e2b 100644
+--- a/greeter/verify.c
++++ b/greeter/verify.c
+@@ -329,6 +329,7 @@ Verify (struct display *d, struct greet_info *greet,
struct verify_info *verify)
+ struct spwd *sp;
+ # endif
+ char *user_pass = NULL;
++ char *crypted_pass = NULL;
+ # endif
+ # ifdef __OpenBSD__
+ char *s;
+@@ -464,7 +465,9 @@ Verify (struct display *d, struct greet_info *greet,
struct verify_info *verify)
+ # if defined(ultrix) || defined(__ultrix__)
+ if (authenticate_user(p, greet->password, NULL) < 0)
+ # else
+- if (strcmp (crypt (greet->password, user_pass), user_pass))
++ crypted_pass = crypt (greet->password, user_pass);
++ if ((crypted_pass == NULL)
++ || (strcmp (crypted_pass, user_pass)))
+ # endif
+ {
+ if(!greet->allow_null_passwd || strlen(p->pw_passwd) > 0) {
+--
+cgit v0.9.0.2-2-gbebe



  • [SM-Commit] GIT changes to master grimoire by Florian Franzmann (60ffc594fac758baee1ab46a2316d0c2541ac044), Florian Franzmann, 08/20/2018

Archive powered by MHonArc 2.6.24.

Top of Page