From d9fed023e7f13092d9b8b8df4e9e0c961a985eff Mon Sep 17 00:00:00 2001 From: Thomas Penteker Date: Sat, 18 May 2019 18:19:58 +0200 Subject: [PATCH 1/5] bind: 9.14.0 -> 9.14.2 fixes CVE-2018-5743 and CVE-2019-6467 --- bind/.signature | 6 +++--- bind/Pkgfile | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/bind/.signature b/bind/.signature index 5fe048eac..9b41305df 100644 --- a/bind/.signature +++ b/bind/.signature @@ -1,8 +1,8 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF30ZuaUhSOFmInJjKVI+o3CdtPJmU/4120pP+faGpp9IvFux32WsoHXFUrQQ55ewNHqva6EpVNjJHBMMdGigFfQw= -SHA256 (Pkgfile) = 2f445e5c7f4f4f0809bbdeec8a711f16273712cb9a9f84fa932b72c5054806f6 +RWSagIOpLGJF35OQo2TsuWQCBHK3vE4IHQTPx7rf5/daQmhxptld0pUwphviX96nWJO1kC/gf8II0el0RD4lsJC8rPnTi+K1jgI= +SHA256 (Pkgfile) = 44e062f0e80b91229bfda89a37514ce2ac7aba5957da86b207355466a835217f SHA256 (.footprint) = d4c5a812fe52f2cd50abef8fa6f48aa47ed1619210c91eaec5b15dc74531ed85 -SHA256 (bind-9.14.0.tar.gz) = 4edd459830bb97f749e25a5d42a2a4a093d7800e9962fca4300996cf7ea680af +SHA256 (bind-9.14.2.tar.gz) = 0e4027573726502ec038db3973a086c02508671723a4845e21da1769a5c27f0c SHA256 (named.root) = 9fe5d2aa2e0537e30d370ca76c62982acfeb13c292d52e40e6e70a486b373d25 SHA256 (db.0.0.127) = 6c82640080a1c311005e7a264a2abbaabb7198f39430389b3ddf37cf22f42ff5 SHA256 (db.localhost) = 1a61cc85da0581a784c06535b2462f027bc850270ac7287c1152b8479dc7a053 diff --git a/bind/Pkgfile b/bind/Pkgfile index 498eab72d..b55456f5e 100644 --- a/bind/Pkgfile +++ b/bind/Pkgfile @@ -5,7 +5,7 @@ # Depends on: python-ply name=bind -version=9.14.0 +version=9.14.2 release=1 source=(ftp://ftp.isc.org/isc/bind9/$version/$name-$version.tar.gz \ named.root db.0.0.127 db.localhost db.ip6.arpa named named.conf) From bbb898ce6a8e1e7f7b2fe6cf2fad8e7c75ec6a0e Mon Sep 17 00:00:00 2001 From: Danny Rawlins Date: Sun, 19 May 2019 02:38:37 +1000 Subject: [PATCH 2/5] cbindgen: 0.8.6 -> 0.8.7 --- cbindgen/.signature | 6 +++--- cbindgen/Pkgfile | 5 +++-- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/cbindgen/.signature b/cbindgen/.signature index 05aa778a8..26e1ad175 100644 --- a/cbindgen/.signature +++ b/cbindgen/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF32MpzMWeeARCxu1BajtDMQhwvijGJmsTGv5qk/hPsSIfq+F/psi1es5XMe5O36b4wj5UIKvEr3nUbAHeNM7LBA8= -SHA256 (Pkgfile) = 9872a4d02fff6e9ab82274a2478c5e27901bbe5e3d96e3e259c12266c1b6e224 +RWSagIOpLGJF3xpepJ1BGYUmqblH6UecNPnUti6QNZ5RxN9DOiArB714zcQAaUDBbW5ryXK25gLHwl5wGopeJwJlzYK2FW6jRg4= +SHA256 (Pkgfile) = dd247bec41098b4483fdf7c3ba8175f7da5e6de82caeabdfda143d474b095aea SHA256 (.footprint) = fd60992957bd0010460d49684c69464200651af797acdb98547f4847fc9f3f3c -SHA256 (cbindgen-v0.8.6.tar.gz) = 456a8ee9ab872cdb31f829fb06294c08b5e238f1390f9f4a5b7908a6346cbbf2 +SHA256 (cbindgen-v0.8.7.tar.gz) = 6034b954a709a0041111445aa2e5656f747165eb9da0915e21b94b23f1a719f0 diff --git a/cbindgen/Pkgfile b/cbindgen/Pkgfile index 00e89b884..09f231804 100644 --- a/cbindgen/Pkgfile +++ b/cbindgen/Pkgfile @@ -5,7 +5,7 @@ # Optional: sccache name=cbindgen -version=0.8.6 +version=0.8.7 release=1 source=(https://github.com/eqrion/cbindgen/archive/v$version/$name-v$version.tar.gz) @@ -13,7 +13,8 @@ build() { cd $name-$version prt-get isinst sccache && export RUSTC_WRAPPER=/usr/bin/sccache - export CARGO_HOME="$PKGMK_SOURCE_DIR" + mkdir "$PKGMK_SOURCE_DIR/rust" || true + export CARGO_HOME="$PKGMK_SOURCE_DIR/rust" cargo build --release cargo install --root $PKG/usr From a4b1a6dfc9002cd192e5769bcb3a75578b30cefa Mon Sep 17 00:00:00 2001 From: Danny Rawlins Date: Sun, 19 May 2019 22:17:04 +1000 Subject: [PATCH 3/5] thunderbird: 60.6.1 -> 60.7.0 --- thunderbird/.signature | 6 +++--- thunderbird/Pkgfile | 9 ++++----- 2 files changed, 7 insertions(+), 8 deletions(-) diff --git a/thunderbird/.signature b/thunderbird/.signature index cb80ac951..9362dfc2d 100644 --- a/thunderbird/.signature +++ b/thunderbird/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF372F+QmPxbGE7lHrKbzcztPYxCn0WOtsipBV1ei9OxjFLXJ2PQ/rLGw0JG2QA4e1aUfhOiqQ13vlf0PKtnclfgM= -SHA256 (Pkgfile) = 065e809947374c1a1c928e4b6f0a2a99a9266676beaf1eae2bac6d20b3ba97e1 +RWSagIOpLGJF38PFEdGmhJ6e5jPCBlgh3WS7YtYcsQ89tkpZl/WFnpg8wkPLDr1GkBIdtX1Z5M2e+40IlCDLPH6vG+rBq2luvAs= +SHA256 (Pkgfile) = 4ad2908193f6bc8e768c1805da013fa13aa2d3c5d28f11036ae41d0ffdb037c9 SHA256 (.footprint) = 42a88545775e207a9d590a342e94721967f77114a2e72c79a92cf7cafd750cf0 -SHA256 (thunderbird-60.6.1.source.tar.xz) = 17aef9232a76bdc812422883c02b01b4ecb7633c3ee9870da5e4ec0e20ba5f67 +SHA256 (thunderbird-60.7.0.source.tar.xz) = 377ca762624df103dd768dc36b7632537b46aa83ddc9d336a157cadcde8bb51d SHA256 (thunderbird.desktop) = c6bc6a66f16951c4f7560d019dad48968169aef6587cef4e98380a300078299a diff --git a/thunderbird/Pkgfile b/thunderbird/Pkgfile index bc1e49d8f..f1069e393 100644 --- a/thunderbird/Pkgfile +++ b/thunderbird/Pkgfile @@ -5,7 +5,7 @@ # Optional: sccache name=thunderbird -version=60.6.1 +version=60.7.0 release=1 source=(http://ftp.mozilla.org/pub/thunderbird/releases/$version/source/$name-$version.source.tar.xz $name.desktop) @@ -13,9 +13,9 @@ source=(http://ftp.mozilla.org/pub/thunderbird/releases/$version/source/$name-$v build() { cd $name-$version - if [ -n "$(pkginfo -i | grep '^sccache ')" ]; then - export RUSTC_WRAPPER=/usr/bin/sccache - fi + prt-get isinst sccache && export RUSTC_WRAPPER=/usr/bin/sccache + mkdir "$PKGMK_SOURCE_DIR/rust" || true + export CARGO_HOME="$PKGMK_SOURCE_DIR/rust" cat <<- EOF > .mozconfig ac_add_options --enable-application=comm/mail @@ -48,7 +48,6 @@ EOF export MOZ_MAKE_FLAGS="-j ${JOBS-1}" export MOZBUILD_STATE_PATH="$PKGMK_SOURCE_DIR/.mozbuild" - export CARGO_HOME="$PKGMK_SOURCE_DIR" ./mach build DESTDIR=$PKG ./mach install From 088b9ae42af3169d03afccad7ee14603468d35bb Mon Sep 17 00:00:00 2001 From: Thomas Penteker Date: Mon, 20 May 2019 01:00:06 +0200 Subject: [PATCH 4/5] postgresql: 11.2 -> 11.3 --- postgresql/.signature | 6 +++--- postgresql/Pkgfile | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/postgresql/.signature b/postgresql/.signature index 93d40c584..1e5467b19 100644 --- a/postgresql/.signature +++ b/postgresql/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF30ZnaopMUf/qhFOLL24c5eJSpuRApRh+3zGoit4/qLyCc+M45AHu6LgscgamyO7iH21hBCpWEoT3709OFHT9SAA= -SHA256 (Pkgfile) = acf0077e9779a961765858600bf678bbc285998bd312c2b0bef1058c73bfe160 +RWSagIOpLGJF3x3GatgAOx2NFKMAkuK8lrI22QL3ChM2osaYJpbGmJ+mNwveMWTmyI2GrKwDv4O5SMeCCCDYOr0RZ34SUGmF0gQ= +SHA256 (Pkgfile) = a45fb80d9c05133d5c899deb034821dbe10baea43112eb616c9cc59ded7d005e SHA256 (.footprint) = c89a92e7a0ce595979f628480f7811a987449b8f5e1c56a82e340532d22c15be -SHA256 (postgresql-11.2.tar.bz2) = 2676b9ce09c21978032070b6794696e0aa5a476e3d21d60afc036dc0a9c09405 +SHA256 (postgresql-11.3.tar.bz2) = 2a85e082fc225944821dfd23990e32dfcd2284c19060864b0ad4ca537d30522d SHA256 (postgresql) = 2c5ed04d159081774b2518c67b4bd95671154828a5bca23b68c7c7a05ec40078 diff --git a/postgresql/Pkgfile b/postgresql/Pkgfile index 7c3e84abe..19518a018 100644 --- a/postgresql/Pkgfile +++ b/postgresql/Pkgfile @@ -5,7 +5,7 @@ # Depends on: openssl name=postgresql -version=11.2 +version=11.3 release=1 source=(https://ftp.postgresql.org/pub/source/v$version/postgresql-$version.tar.bz2 postgresql) From 14e16e597eb984259ef55cfab63f5f64e73105bf Mon Sep 17 00:00:00 2001 From: Danny Rawlins Date: Mon, 20 May 2019 20:42:46 +1000 Subject: [PATCH 5/5] openjpeg2: 2.3.0 -> 2.3.1 --- openjpeg2/.footprint | 4 ++-- openjpeg2/.signature | 8 ++++---- openjpeg2/Pkgfile | 6 ++---- 3 files changed, 8 insertions(+), 10 deletions(-) diff --git a/openjpeg2/.footprint b/openjpeg2/.footprint index eaa075a1e..9a164955a 100644 --- a/openjpeg2/.footprint +++ b/openjpeg2/.footprint @@ -11,8 +11,8 @@ drwxr-xr-x root/root usr/include/openjpeg-2.3/ drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libopenjp2.a lrwxrwxrwx root/root usr/lib/libopenjp2.so -> libopenjp2.so.7 --rwxr-xr-x root/root usr/lib/libopenjp2.so.2.3.0 -lrwxrwxrwx root/root usr/lib/libopenjp2.so.7 -> libopenjp2.so.2.3.0 +-rwxr-xr-x root/root usr/lib/libopenjp2.so.2.3.1 +lrwxrwxrwx root/root usr/lib/libopenjp2.so.7 -> libopenjp2.so.2.3.1 drwxr-xr-x root/root usr/lib/openjpeg-2.3/ -rw-r--r-- root/root usr/lib/openjpeg-2.3/OpenJPEGConfig.cmake -rw-r--r-- root/root usr/lib/openjpeg-2.3/OpenJPEGTargets-release.cmake diff --git a/openjpeg2/.signature b/openjpeg2/.signature index 9dfc237f8..da8d0bd79 100644 --- a/openjpeg2/.signature +++ b/openjpeg2/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/contrib.pub -RWSagIOpLGJF3zA5F4HcrukgA3fq2nv1grqdeILBrIviQJJUlLUfOtPYSzur1Yj3Zojl2SdBjBv4p0PkTWrvgZ3yedWPqa4hyAQ= -SHA256 (Pkgfile) = adbb2d849761077ff070725adc304fe7c5e59abb2e1fe35272963bd79361a40a -SHA256 (.footprint) = 813a671bdfc31461a6ff5132488a5bbd2c61d49c807d844077bb9da3d10643c9 -SHA256 (openjpeg-2.3.0.tar.gz) = 3dc787c1bb6023ba846c2a0d9b1f6e179f1cd255172bde9eb75b01f1e6c7d71a +RWSagIOpLGJF3zn2Au+HNiV6xN+RrIQFxhhdhgaOJCcuVStJCqscFctaXCA50H+/m3bJe5sLGLCfo40uP/lhRv6t+tCo7LLWXQA= +SHA256 (Pkgfile) = 4362276cdc9c32f7b76307e2c332f39260e6a972794621e6ff8172e8cf4b4173 +SHA256 (.footprint) = 765d8e0bf55e17997af756206951427620277fd1f6bb5ea17f5a0b1b18a3f8b5 +SHA256 (openjpeg-2.3.1.tar.gz) = 63f5a4713ecafc86de51bfad89cc07bb788e9bba24ebbf0c4ca637621aadb6a9 diff --git a/openjpeg2/Pkgfile b/openjpeg2/Pkgfile index 757480fea..7571a574f 100644 --- a/openjpeg2/Pkgfile +++ b/openjpeg2/Pkgfile @@ -4,9 +4,9 @@ # Depends on: lcms2 libpng name=openjpeg2 -version=2.3.0 +version=2.3.1 release=1 -source=(https://github.com/uclouvain/openjpeg/archive/$version/openjpeg-$version.tar.gz) +source=(https://github.com/uclouvain/openjpeg/archive/v$version/openjpeg-$version.tar.gz) build() { cd openjpeg-$version @@ -20,6 +20,4 @@ build() { make make DESTDIR=$PKG install - -# rm -r $PKG/usr/share/doc }