From be11e79975a1b5395f8a36c153049f36b88f31eb Mon Sep 17 00:00:00 2001 From: Juergen Daubert Date: Sat, 15 Jan 2022 17:30:51 +0100 Subject: [PATCH 1/3] python3: update to 3.9.10 --- python3/.footprint | 4 ++-- python3/.signature | 8 ++++---- python3/Pkgfile | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/python3/.footprint b/python3/.footprint index 4ef70873..5c851ee5 100644 --- a/python3/.footprint +++ b/python3/.footprint @@ -2307,9 +2307,9 @@ drwxr-xr-x root/root usr/lib/python3.9/lib-dynload/ -rwxr-xr-x root/root usr/lib/python3.9/lib-dynload/zlib.cpython-39-x86_64-linux-gnu.so drwxr-xr-x root/root usr/lib/python3.9/lib2to3/ -rw-r--r-- root/root usr/lib/python3.9/lib2to3/Grammar.txt --rw-r--r-- root/root usr/lib/python3.9/lib2to3/Grammar3.9.9.final.0.pickle +-rw-r--r-- root/root usr/lib/python3.9/lib2to3/Grammar3.9.10.final.0.pickle -rw-r--r-- root/root usr/lib/python3.9/lib2to3/PatternGrammar.txt --rw-r--r-- root/root usr/lib/python3.9/lib2to3/PatternGrammar3.9.9.final.0.pickle +-rw-r--r-- root/root usr/lib/python3.9/lib2to3/PatternGrammar3.9.10.final.0.pickle -rw-r--r-- root/root usr/lib/python3.9/lib2to3/__init__.py -rw-r--r-- root/root usr/lib/python3.9/lib2to3/__main__.py drwxr-xr-x root/root usr/lib/python3.9/lib2to3/__pycache__/ diff --git a/python3/.signature b/python3/.signature index 818f4855..c67e07c2 100644 --- a/python3/.signature +++ b/python3/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqjovYK1lzeUSnaY2XUKapvDrvkYw84WMKhDjn5dt+a8Wi4kjL2LD1A95BIQc0LPrx2pC54CjcUUICrgbXeG26g4= -SHA256 (Pkgfile) = 372c63f92b681ea1d5cd1005ee60d81f0c27da39fac12db16151ac77767a7b13 -SHA256 (.footprint) = 618a87c62a0c126d9d4bf944dbf6858d31dc5b943a39a5704bca87ade80a36bd -SHA256 (Python-3.9.9.tar.xz) = 06828c04a573c073a4e51c4292a27c1be4ae26621c3edc7cf9318418ce3b6d27 +RWRJc1FUaeVeqk0ZFRLW+XSrYLxeZXd79xw2U5MfQP57D+bKH7TfJMIoionIOpeiny4nyglrxJHzAabkwiqVjlpJGSBBkX9XBQo= +SHA256 (Pkgfile) = 053b5b51a2db947fada362ca50d936c02755cac32894b0a2a7b329497ff33b53 +SHA256 (.footprint) = cfe99854e1b4601cd4299115822e1abc42e881cec11e8faff7135af776d636dc +SHA256 (Python-3.9.10.tar.xz) = 0a8fbfb5287ebc3a13e9baf3d54e08fa06778ffeccf6311aef821bb3a6586cc8 SHA256 (mpdecimal-2.5.1.patch) = 8eb389be1babe03a0231001dc16dd2d69a3ea0fbf6b8c976a580787e7ff1594c diff --git a/python3/Pkgfile b/python3/Pkgfile index cb8daf1a..b44b772b 100644 --- a/python3/Pkgfile +++ b/python3/Pkgfile @@ -4,7 +4,7 @@ # Depends on: bzip2 expat gdbm libffi libnsl libtirpc mpdecimal sqlite3 xz name=python3 -version=3.9.9 +version=3.9.10 release=1 source=(https://www.python.org/ftp/python/${version%rc*}/Python-$version.tar.xz mpdecimal-2.5.1.patch) From 255c2ac7275b68a716d24345b6c93fb1acb399da Mon Sep 17 00:00:00 2001 From: Juergen Daubert Date: Sun, 16 Jan 2022 16:44:34 +0100 Subject: [PATCH 2/3] [notify] expat: update to 2.4.3, security fixes see https://github.com/libexpat/libexpat/blob/R_2_4_3/expat/Changes --- expat/.footprint | 6 +++--- expat/.signature | 8 ++++---- expat/Pkgfile | 2 +- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/expat/.footprint b/expat/.footprint index 46853b23..de61674b 100644 --- a/expat/.footprint +++ b/expat/.footprint @@ -8,9 +8,9 @@ drwxr-xr-x root/root usr/include/ drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libexpat.a -rwxr-xr-x root/root usr/lib/libexpat.la -lrwxrwxrwx root/root usr/lib/libexpat.so -> libexpat.so.1.8.2 -lrwxrwxrwx root/root usr/lib/libexpat.so.1 -> libexpat.so.1.8.2 --rwxr-xr-x root/root usr/lib/libexpat.so.1.8.2 +lrwxrwxrwx root/root usr/lib/libexpat.so -> libexpat.so.1.8.3 +lrwxrwxrwx root/root usr/lib/libexpat.so.1 -> libexpat.so.1.8.3 +-rwxr-xr-x root/root usr/lib/libexpat.so.1.8.3 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/expat.pc drwxr-xr-x root/root usr/share/ diff --git a/expat/.signature b/expat/.signature index 924c38bb..a65caa83 100644 --- a/expat/.signature +++ b/expat/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqvQCa0Up8/rYijmK2USfW4sGmYE0IMAvzoQM2Z/vJqEpApMk1OzC+jbrFUCS1tbP+Ic9vNXSPeFrYTzq2ecxhw0= -SHA256 (Pkgfile) = f68d3a6f4e35f16fb1768328456e3d340163ef5fbd614f9920372a2a19d28f7c -SHA256 (.footprint) = d5616eff78d33f11461acb02a37141156ea20dd6938d8ac2f8d5940f2275fa04 -SHA256 (expat-2.4.2.tar.xz) = bc2ff58f49c29aac7bff705a6c167a821f26c512079ff08ac432fd0fdc9bb199 +RWRJc1FUaeVeqll7WRhJl/0jHFCfdSYc9Cabn7iuwQarvstYtDSae1TQSyNy97jmZXLOhzlKLU7bM43D6FpgDogyaaOxQc1wRAA= +SHA256 (Pkgfile) = 11c7f9f2c9ce91c2355d07d5ad3f59a66b64f4799798f71afd472f5178a1ce7b +SHA256 (.footprint) = 8ee4dd6fc230ff1f8b250ab94e7693fd04841cfd6ddbda217946344dd107b8c0 +SHA256 (expat-2.4.3.tar.xz) = b1f9f1b1a5ebb0acaa88c9ff79bfa4e145823b78aa5185e5c5d85f060824778a diff --git a/expat/Pkgfile b/expat/Pkgfile index cd90b481..004878bd 100644 --- a/expat/Pkgfile +++ b/expat/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=expat -version=2.4.2 +version=2.4.3 release=1 source=(http://download.sourceforge.net/$name/$name-$version.tar.xz) From d510256e6efe9543af59f6b81e83b6e2ce4003b7 Mon Sep 17 00:00:00 2001 From: Juergen Daubert Date: Tue, 18 Jan 2022 16:37:23 +0100 Subject: [PATCH 3/3] [notify] vim: update to 8.2.4135, fixes for CVE-2022-0{128,156,158} --- vim/.footprint | 1 - vim/.signature | 8 ++++---- vim/Pkgfile | 2 +- 3 files changed, 5 insertions(+), 6 deletions(-) diff --git a/vim/.footprint b/vim/.footprint index 8355456e..233f321c 100644 --- a/vim/.footprint +++ b/vim/.footprint @@ -424,7 +424,6 @@ drwxr-xr-x root/root usr/share/vim/ftplugin/ -rw-r--r-- root/root usr/share/vim/ftplugin/fstab.vim -rw-r--r-- root/root usr/share/vim/ftplugin/fvwm.vim -rw-r--r-- root/root usr/share/vim/ftplugin/gdb.vim --rw-r--r-- root/root usr/share/vim/ftplugin/git.vim -rw-r--r-- root/root usr/share/vim/ftplugin/gitcommit.vim -rw-r--r-- root/root usr/share/vim/ftplugin/gitconfig.vim -rw-r--r-- root/root usr/share/vim/ftplugin/gitrebase.vim diff --git a/vim/.signature b/vim/.signature index 19b674f8..db69058b 100644 --- a/vim/.signature +++ b/vim/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqgtka71UYDCYHPmJ5dL+3wJNuGxLaWg78Moz23k68fIVdX7RjoUMrTXq77eLNo2aVKIxUxTXdbgkJSD0nta7egM= -SHA256 (Pkgfile) = abaf1d9613ac5825013fbdb27ad5db9ff9ae673e3d907a9870678bd90bf7ea4a -SHA256 (.footprint) = 71ec56ed10ae36651c84c6afd818b18229e426d260c62e6fca32ee72adf16e19 -SHA256 (vim-8.2.3983.tar.gz) = b96348deb1dcac046943d761ab04a268cdd02de214ddf99c3ab7fe820c08668b +RWRJc1FUaeVeqo6n6BJGvzhiR6WmI8Ffa5zS5M/mkkN0isRthg4aPnEOvhKyPQhUNss1Y7UpiyiS+1Q8djj8MIhYsIMNWKYvdgI= +SHA256 (Pkgfile) = 0c60d3360d0bed43ceabbfe72c9a5a98923c9addaf5f055043cc117180150fc5 +SHA256 (.footprint) = cc692d867f971f7346fac21960575dff0514318cc22bbd46a67b1b968c942ee5 +SHA256 (vim-8.2.4135.tar.gz) = 84a3909312b738a740a38f65dff12236a50582e14c7608bfef82a3e48fa00adf diff --git a/vim/Pkgfile b/vim/Pkgfile index 07ea895c..03f4ac87 100644 --- a/vim/Pkgfile +++ b/vim/Pkgfile @@ -4,7 +4,7 @@ # Depends on: ncurses acl name=vim -version=8.2.3983 +version=8.2.4135 release=1 source=(https://github.com/vim/vim/archive/v${version}/$name-$version.tar.gz)