From 09838439c042827adfa17b7cf387729c9bc03f71 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Sun, 28 Mar 2010 19:27:11 +0000 Subject: [PATCH 01/17] main/zlib: upgrade to 1.2.4 --- main/zlib/APKBUILD | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/main/zlib/APKBUILD b/main/zlib/APKBUILD index 037819dfec1..adf584ea97a 100644 --- a/main/zlib/APKBUILD +++ b/main/zlib/APKBUILD @@ -1,17 +1,19 @@ # Maintainer: Natanael Copa pkgname=zlib -pkgver=1.2.3.9 +pkgver=1.2.4 pkgrel=0 pkgdesc="A compression/decompression Library" license=custom:zlib -url="http://www.gzip.org/zlib" +url="http://zlib.net" depends= -source="ftp://ftp.archlinux.org/other/$pkgname/$pkgname-$pkgver.tar.gz" +source="http://zlib.net/$pkgname-$pkgver.tar.gz" subpackages="$pkgname-dev $pkgname-doc" _builddir="$srcdir/$pkgname-$pkgver" build() { cd "$_builddir" + # we trade size for a little more speed. + export CFLAGS="$CFLAGS -O2" ./configure --prefix=/usr --libdir=/lib --shared make || return 1 } @@ -29,4 +31,4 @@ dev() { mv "$pkgdir"/lib/libz.a "$subpkgdir"/lib/libz.a } -md5sums="e63390cc6cbd0722f70729307d4dd01d zlib-1.2.3.9.tar.gz" +md5sums="47f6ed51b3c83a8534f9228531effa18 zlib-1.2.4.tar.gz" From 64bce71141d9562664c0a852dd096978579ea5f8 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Mon, 29 Mar 2010 12:28:31 +0000 Subject: [PATCH 02/17] main/postgresql: depend on client. added pg-restore init.d script New feature to restore backe up databases on bootup. Helps when you run postgresql databases from tmpfs. --- main/postgresql/APKBUILD | 20 ++++++++++++++------ main/postgresql/pg-restore.confd | 16 ++++++++++++++++ main/postgresql/pg-restore.initd | 31 +++++++++++++++++++++++++++++++ main/postgresql/postgresql.confd | 4 ++++ main/postgresql/postgresql.initd | 5 ++++- 5 files changed, 69 insertions(+), 7 deletions(-) create mode 100644 main/postgresql/pg-restore.confd create mode 100644 main/postgresql/pg-restore.initd diff --git a/main/postgresql/APKBUILD b/main/postgresql/APKBUILD index 625998e89da..00841fb1aac 100644 --- a/main/postgresql/APKBUILD +++ b/main/postgresql/APKBUILD @@ -1,17 +1,19 @@ # Maintainer: Natanael Copa pkgname=postgresql pkgver=8.4.2 -pkgrel=0 +pkgrel=1 pkgdesc="A sophisticated object-relational DBMS" url="http://www.postgresql.org/" license="BSD" -depends="bbsuid" +depends="bbsuid postgresql-client" install="$pkgname.pre-upgrade" makedepends="readline-dev openssl-dev zlib-dev" subpackages="$pkgname-dev $pkgname-doc libpq $pkgname-client" source="ftp://ftp.$pkgname.org/pub/source/v$pkgver/$pkgname-$pkgver.tar.bz2 $pkgname.initd $pkgname.confd + pg-restore.initd + pg-restore.confd " build() { @@ -30,9 +32,13 @@ package() { make DESTDIR="$pkgdir" install || return 1 install -D -m755 "$srcdir"/postgresql.initd \ - "$pkgdir"/etc/init.d/postgresql + "$pkgdir"/etc/init.d/postgresql || return 1 install -D -m644 "$srcdir"/postgresql.confd \ - "$pkgdir"/etc/conf.d/postgresql || return 1 + "$pkgdir"/etc/conf.d/postgresql || return 1 + install -D -m755 "$srcdir"/pg-restore.initd \ + "$pkgdir"/etc/init.d/pg-restore || return 1 + install -D -m644 "$srcdir"/pg-restore.confd \ + "$pkgdir"/etc/conf.d/pg-restore || return 1 } libpq() { @@ -51,5 +57,7 @@ client() { md5sums="d738227e2f1f742d2f2d4ab56496c5c6 postgresql-8.4.2.tar.bz2 -e1ac78f216a8969a46e4486270b85a9b postgresql.initd -6218755fde294b7d17b77d280a9c9106 postgresql.confd" +740bc8414ee27b4c81dee1690c32679f postgresql.initd +d6b58fc2411fdadcb9b762464c5bee7d postgresql.confd +e64d0ab26b077ed80d883c0c40704ff4 pg-restore.initd +8d1b69ac56a1a0d1cfd7da337bf6c5e2 pg-restore.confd" diff --git a/main/postgresql/pg-restore.confd b/main/postgresql/pg-restore.confd new file mode 100644 index 00000000000..18bff4c2a3a --- /dev/null +++ b/main/postgresql/pg-restore.confd @@ -0,0 +1,16 @@ + +# Enable this to dump databases on shutdown and restore on boot +# +#PGDUMP="/var/lib/postgresql/backup/databases.pgdump" + +# The dump file will be deleted once restored unless KEEP_DUMP is set. +# This is to avoid accidental restoring of running database. If you know what +# you are doing and want keep the dump, then enable the KEEP_DUMP option +# below. +# +#KEEP_DUMP=yes + +# If you enable the KEEP_DUMP bove you probably also want the --clean option +# the the pg_dumpall command. +#PG_DUMPALL_OPTS="--clean" + diff --git a/main/postgresql/pg-restore.initd b/main/postgresql/pg-restore.initd new file mode 100644 index 00000000000..aaf07cbe7d9 --- /dev/null +++ b/main/postgresql/pg-restore.initd @@ -0,0 +1,31 @@ +#!/sbin/runscript + +opts="${opts} dump restore" + +depend() { + need postgresql +} + +restore() { + [ -z "$PGDUMP" ] && return 0 + ebegin "Restoring PostgreSQL $PGDUMP" + psql -U ${PG_USER:-postgres} ${PSQL_OPTS} -f "$PGDUMP" + eend $? + if [ -z "$KEEP_DUMP" ]; then + rm -f "$PGDUMP" + fi +} + +dump() { + [ -z "$PGDUMP" ] && return 0 + pg_dumpall -U ${PG_USER:-postgres} ${PG_DUMPALL_OPTS} -f "$PGDUMP" +} + +start() { + restore +} + +stop() { + dump +} + diff --git a/main/postgresql/postgresql.confd b/main/postgresql/postgresql.confd index 22ff61cd37d..4fe28a45840 100644 --- a/main/postgresql/postgresql.confd +++ b/main/postgresql/postgresql.confd @@ -50,3 +50,7 @@ WAIT_FOR_START="-w" # # Example: # export R_HOME="/usr/lib/R" + +# Automatically set up a new database if missing on startup +#AUTO_SETUP=yes + diff --git a/main/postgresql/postgresql.initd b/main/postgresql/postgresql.initd index e7941648c3a..23b0acff4c1 100644 --- a/main/postgresql/postgresql.initd +++ b/main/postgresql/postgresql.initd @@ -11,12 +11,15 @@ depend() { } checkconfig() { - if [ ! -d "$PGDATA" ] ; then + [ -d "$PGDATA" ] && return 0 + + if [ -z "$AUTO_SETUP" ] || [ "$AUTO_SETUP" = "no" ]; then eerror "Directory not found: $PGDATA" eerror "Please make sure that PGDATA points to the right path." eerror "You can run '/etc/init.d/postgresql setup' to setup a new database cluster." return 1 fi + setup } start() { From 2e40800ebadab12089a9f17958ff97078661a0b3 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 06:28:47 +0000 Subject: [PATCH 03/17] main/mdadm: upgrade to 3.1.2 --- main/mdadm/APKBUILD | 14 +++++++++----- main/mdadm/mdadm-uclibc.patch | 13 +++++++------ 2 files changed, 16 insertions(+), 11 deletions(-) diff --git a/main/mdadm/APKBUILD b/main/mdadm/APKBUILD index f6efdc58daf..ed49a4c6a27 100644 --- a/main/mdadm/APKBUILD +++ b/main/mdadm/APKBUILD @@ -1,8 +1,8 @@ # Contributor: Carlo Landmeter # Maintainer: Natanael Copa pkgname=mdadm -pkgver=3.1.1 -pkgrel=2 +pkgver=3.1.2 +pkgrel=0 pkgdesc="a tool for managing Linux Software RAID arrays" url="http://neil.brown.name/blog/mdadm" license="GPL-2" @@ -16,9 +16,13 @@ source="http://www.kernel.org/pub/linux/utils/raid/${pkgname}/${pkgname}-${pkgve mdadm-uclibc.patch " -build() { +prepare() { cd "$srcdir/$pkgname-$pkgver" patch -p1 -i ../mdadm-uclibc.patch || return 1 +} + +build() { + cd "$srcdir/$pkgname-$pkgver" make } @@ -32,8 +36,8 @@ package() { install -m644 -D mdadm.conf-example "$pkgdir"/etc/mdadm.conf } -md5sums="8bfeea282d21b5ef8e825122fb359457 mdadm-3.1.1.tar.gz +md5sums="15c0112467df486b5805b18c7e51401f mdadm-3.1.2.tar.gz ce57e798431f7ab89f9b07a7daaa4852 mdadm.initd 16d2b8eb2e17184357db503470fdd8eb mdadm.confd af5bb6e1479bf1d27cf50521af82dae1 mdadm-raid.initd -aa601f072096fb8bae8b8946f59a561f mdadm-uclibc.patch" +bca76ff25366bd1b70654b0cf4814236 mdadm-uclibc.patch" diff --git a/main/mdadm/mdadm-uclibc.patch b/main/mdadm/mdadm-uclibc.patch index abc9969ca80..a7b01a08d56 100644 --- a/main/mdadm/mdadm-uclibc.patch +++ b/main/mdadm/mdadm-uclibc.patch @@ -1,6 +1,8 @@ ---- a/platform-intel.c Mon Nov 9 15:58:52 2009 -+++ b/platform-intel.c Mon Nov 9 16:01:47 2009 -@@ -87,7 +87,9 @@ +diff --git a/platform-intel.c b/platform-intel.c +index 30f7914..1e62e87 100644 +--- a/platform-intel.c ++++ b/platform-intel.c +@@ -91,7 +91,9 @@ struct sys_dev *find_driver_devices(const char *bus, const char *driver) /* generate canonical path name for the device */ sprintf(path, "/sys/bus/%s/drivers/%s/%s", bus, driver, de->d_name); @@ -11,13 +13,12 @@ list->next = NULL; } closedir(driver_dir); -@@ -203,9 +205,10 @@ +@@ -207,9 +209,9 @@ const struct imsm_orom *find_imsm_orom(void) char *devt_to_devpath(dev_t dev) { - char device[40]; + char device[46]; - + char *tmp = malloc(PATH_MAX); -+ sprintf(device, "/sys/dev/block/%d:%d/device", major(dev), minor(dev)); - return canonicalize_file_name(device); + return tmp ? realpath(device, tmp) : NULL; From a17455ed76b7e68d47d23461ae741dc57f73236a Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 06:35:29 +0000 Subject: [PATCH 04/17] main/bind: upgrade to 9.7.0_p1 --- main/bind/APKBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main/bind/APKBUILD b/main/bind/APKBUILD index 19dd241f42b..f56c7e879b1 100644 --- a/main/bind/APKBUILD +++ b/main/bind/APKBUILD @@ -1,7 +1,7 @@ # Contributor: Carlo Landmeter # Maintainer: Natanael Copa pkgname=bind -pkgver=9.6.1_p3 +pkgver=9.7.0_p1 _ver=${pkgver%_p*} _p=${pkgver#*_p} pkgrel=0 @@ -92,7 +92,7 @@ tools() { done } -md5sums="a0952d589b3051538033387be4c983f9 bind-9.6.1-P3.tar.gz +md5sums="78e3e38c6252e41ded1afa1aeb183622 bind-9.7.0-P1.tar.gz f270a5b0a28ab6e818840c5c368ddbcc bind.so_bsdcompat.patch 92914193cc603d8d81ef00534ce9c1c9 bind.initd 8b05a287976d66d51c18b73ee7523671 bind.confd From 2765bc9d5159f67b92404c120173cea2091b2adb Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 06:53:25 +0000 Subject: [PATCH 05/17] main/linux-grsec: r8169 fixes --- main/linux-grsec/APKBUILD | 6 +- ...1cd-r8169-fix-broken-register-writes.patch | 51 ++++++++ ...-CVE-2009-4537-overlength-frame-DMAs.patch | 119 ++++++++++++++++++ 3 files changed, 175 insertions(+), 1 deletion(-) create mode 100644 main/linux-grsec/net-git-78f1cd-r8169-fix-broken-register-writes.patch create mode 100644 main/linux-grsec/net-git-c0cd88-r8169-offical-fix-for-CVE-2009-4537-overlength-frame-DMAs.patch diff --git a/main/linux-grsec/APKBUILD b/main/linux-grsec/APKBUILD index f54026e0b3b..4d3765468da 100644 --- a/main/linux-grsec/APKBUILD +++ b/main/linux-grsec/APKBUILD @@ -4,7 +4,7 @@ _flavor=grsec pkgname=linux-${_flavor} pkgver=2.6.32.10 _kernver=2.6.32 -pkgrel=0 +pkgrel=1 pkgdesc="Linux kernel with grsecurity" url=http://grsecurity.net depends="mkinitfs linux-firmware" @@ -19,6 +19,8 @@ source="ftp://ftp.kernel.org/pub/linux/kernel/v2.6/linux-$_kernver.tar.bz2 ip_gre2.patch arp.patch xfrm-cache-size-revert.patch + net-git-78f1cd-r8169-fix-broken-register-writes.patch + net-git-c0cd88-r8169-offical-fix-for-CVE-2009-4537-overlength-frame-DMAs.patch kernelconfig.x86 " subpackages="$pkgname-dev linux-firmware:firmware" @@ -129,4 +131,6 @@ a1959ececf64be61488ed84d0252c053 grsecurity-2.1.14-2.6.32.10-201003211638.patch 13ca9e91700e459da269c957062bbea7 ip_gre2.patch 4c39a161d918e7f274292ecfd168b891 arp.patch 329fcab881425e001d3243caa4648478 xfrm-cache-size-revert.patch +21ed38773d846097b7315e1e0801d87a net-git-78f1cd-r8169-fix-broken-register-writes.patch +962a6dd7c639612fc8bdaeb836388b0b net-git-c0cd88-r8169-offical-fix-for-CVE-2009-4537-overlength-frame-DMAs.patch 7f442049b29ab749180e54ff8f20f1d0 kernelconfig.x86" diff --git a/main/linux-grsec/net-git-78f1cd-r8169-fix-broken-register-writes.patch b/main/linux-grsec/net-git-78f1cd-r8169-fix-broken-register-writes.patch new file mode 100644 index 00000000000..f5f72acc4ba --- /dev/null +++ b/main/linux-grsec/net-git-78f1cd-r8169-fix-broken-register-writes.patch @@ -0,0 +1,51 @@ +From 78f1cd02457252e1ffbc6caa44a17424a45286b8 Mon Sep 17 00:00:00 2001 +From: Francois Romieu +Date: Sat, 27 Mar 2010 19:35:46 -0700 +Subject: [PATCH] r8169: fix broken register writes +MIME-Version: 1.0 +Content-Type: text/plain; charset=utf8 +Content-Transfer-Encoding: 8bit + +This is quite similar to b39fe41f481d20c201012e4483e76c203802dda7 +though said registers are not even documented as 64-bit registers +- as opposed to the initial TxDescStartAddress ones - but as single +bytes which must be combined into 32 bits at the MMIO read/write +level before being merged into a 64 bit logical entity. + +Credits go to Ben Hutchings for the MAR +registers (aka "multicast is broken for ages on ARM) and to +Timo Teräs for the MAC registers. + +Signed-off-by: Francois Romieu +Signed-off-by: David S. Miller +--- + drivers/net/r8169.c | 4 ++-- + 1 files changed, 2 insertions(+), 2 deletions(-) + +diff --git a/drivers/net/r8169.c b/drivers/net/r8169.c +index b93fd23..7193afc 100644 +--- a/drivers/net/r8169.c ++++ b/drivers/net/r8169.c +@@ -2820,8 +2820,8 @@ static void rtl_rar_set(struct rtl8169_private *tp, u8 *addr) + spin_lock_irq(&tp->lock); + + RTL_W8(Cfg9346, Cfg9346_Unlock); +- RTL_W32(MAC0, low); + RTL_W32(MAC4, high); ++ RTL_W32(MAC0, low); + RTL_W8(Cfg9346, Cfg9346_Lock); + + spin_unlock_irq(&tp->lock); +@@ -4747,8 +4747,8 @@ static void rtl_set_rx_mode(struct net_device *dev) + mc_filter[1] = swab32(data); + } + +- RTL_W32(MAR0 + 0, mc_filter[0]); + RTL_W32(MAR0 + 4, mc_filter[1]); ++ RTL_W32(MAR0 + 0, mc_filter[0]); + + RTL_W32(RxConfig, tmp); + +-- +1.7.0.3 + diff --git a/main/linux-grsec/net-git-c0cd88-r8169-offical-fix-for-CVE-2009-4537-overlength-frame-DMAs.patch b/main/linux-grsec/net-git-c0cd88-r8169-offical-fix-for-CVE-2009-4537-overlength-frame-DMAs.patch new file mode 100644 index 00000000000..250c85d6788 --- /dev/null +++ b/main/linux-grsec/net-git-c0cd88-r8169-offical-fix-for-CVE-2009-4537-overlength-frame-DMAs.patch @@ -0,0 +1,119 @@ +From c0cd884af045338476b8e69a61fceb3f34ff22f1 Mon Sep 17 00:00:00 2001 +From: Neil Horman +Date: Mon, 29 Mar 2010 13:16:02 -0700 +Subject: [PATCH] r8169: offical fix for CVE-2009-4537 (overlength frame DMAs) + +Official patch to fix the r8169 frame length check error. + +Based on this initial thread: +http://marc.info/?l=linux-netdev&m=126202972828626&w=1 +This is the official patch to fix the frame length problems in the r8169 +driver. As noted in the previous thread, while this patch incurs a performance +hit on the driver, its possible to improve performance dynamically by updating +the mtu and rx_copybreak values at runtime to return performance to what it was +for those NICS which are unaffected by the ideosyncracy (if there are any). + +Summary: + + A while back Eric submitted a patch for r8169 in which the proper +allocated frame size was written to RXMaxSize to prevent the NIC from dmaing too +much data. This was done in commit fdd7b4c3302c93f6833e338903ea77245eb510b4. A +long time prior to that however, Francois posted +126fa4b9ca5d9d7cb7d46f779ad3bd3631ca387c, which expiclitly disabled the MaxSize +setting due to the fact that the hardware behaved in odd ways when overlong +frames were received on NIC's supported by this driver. This was mentioned in a +security conference recently: +http://events.ccc.de/congress/2009/Fahrplan//events/3596.en.html + +It seems that if we can't enable frame size filtering, then, as Eric correctly +noticed, we can find ourselves DMA-ing too much data to a buffer, causing +corruption. As a result is seems that we are forced to allocate a frame which +is ready to handle a maximally sized receive. + +This obviously has performance issues with it, so to mitigate that issue, this +patch does two things: + +1) Raises the copybreak value to the frame allocation size, which should force +appropriately sized packets to get allocated on rx, rather than a full new 16k +buffer. + +2) This patch only disables frame filtering initially (i.e., during the NIC +open), changing the MTU results in ring buffer allocation of a size in relation +to the new mtu (along with a warning indicating that this is dangerous). + +Because of item (2), individuals who can't cope with the performance hit (or can +otherwise filter frames to prevent the bug), or who have hardware they are sure +is unaffected by this issue, can manually lower the copybreak and reset the mtu +such that performance is restored easily. + +Signed-off-by: Neil Horman +Signed-off-by: David S. Miller +--- + drivers/net/r8169.c | 29 ++++++++++++++++++++++++----- + 1 files changed, 24 insertions(+), 5 deletions(-) + +diff --git a/drivers/net/r8169.c b/drivers/net/r8169.c +index 7193afc..9674005 100644 +--- a/drivers/net/r8169.c ++++ b/drivers/net/r8169.c +@@ -186,7 +186,12 @@ static DEFINE_PCI_DEVICE_TABLE(rtl8169_pci_tbl) = { + + MODULE_DEVICE_TABLE(pci, rtl8169_pci_tbl); + +-static int rx_copybreak = 200; ++/* ++ * we set our copybreak very high so that we don't have ++ * to allocate 16k frames all the time (see note in ++ * rtl8169_open() ++ */ ++static int rx_copybreak = 16383; + static int use_dac; + static struct { + u32 msg_enable; +@@ -3217,9 +3222,13 @@ static void __devexit rtl8169_remove_one(struct pci_dev *pdev) + } + + static void rtl8169_set_rxbufsize(struct rtl8169_private *tp, +- struct net_device *dev) ++ unsigned int mtu) + { +- unsigned int max_frame = dev->mtu + VLAN_ETH_HLEN + ETH_FCS_LEN; ++ unsigned int max_frame = mtu + VLAN_ETH_HLEN + ETH_FCS_LEN; ++ ++ if (max_frame != 16383) ++ printk(KERN_WARNING "WARNING! Changing of MTU on this NIC" ++ "May lead to frame reception errors!\n"); + + tp->rx_buf_sz = (max_frame > RX_BUF_SIZE) ? max_frame : RX_BUF_SIZE; + } +@@ -3231,7 +3240,17 @@ static int rtl8169_open(struct net_device *dev) + int retval = -ENOMEM; + + +- rtl8169_set_rxbufsize(tp, dev); ++ /* ++ * Note that we use a magic value here, its wierd I know ++ * its done because, some subset of rtl8169 hardware suffers from ++ * a problem in which frames received that are longer than ++ * the size set in RxMaxSize register return garbage sizes ++ * when received. To avoid this we need to turn off filtering, ++ * which is done by setting a value of 16383 in the RxMaxSize register ++ * and allocating 16k frames to handle the largest possible rx value ++ * thats what the magic math below does. ++ */ ++ rtl8169_set_rxbufsize(tp, 16383 - VLAN_ETH_HLEN - ETH_FCS_LEN); + + /* + * Rx and Tx desscriptors needs 256 bytes alignment. +@@ -3884,7 +3903,7 @@ static int rtl8169_change_mtu(struct net_device *dev, int new_mtu) + + rtl8169_down(dev); + +- rtl8169_set_rxbufsize(tp, dev); ++ rtl8169_set_rxbufsize(tp, dev->mtu); + + ret = rtl8169_init_ring(dev); + if (ret < 0) +-- +1.7.0.3 + From f92da0c594b754a4a3c7b101227b6d21959034bd Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:21:37 +0000 Subject: [PATCH 06/17] main/cmake: upgrade to 2.8.1 --- main/cmake/APKBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main/cmake/APKBUILD b/main/cmake/APKBUILD index 07653b89192..bc6331b58e6 100644 --- a/main/cmake/APKBUILD +++ b/main/cmake/APKBUILD @@ -1,6 +1,6 @@ # Maintainer: Natanael Copa pkgname=cmake -pkgver=2.8.0 +pkgver=2.8.1 pkgrel=0 pkgdesc="CMake is a cross-platform open-source make system" url="http://www.cmake.org" @@ -42,4 +42,4 @@ package() { make DESTDIR="$pkgdir" install } -md5sums="3b3679b8a6afaedc38a8c15dd7ff4fcf cmake-2.8.0.tar.gz" +md5sums="a92ad653f9ccc1595d16cd9707f49acc cmake-2.8.1.tar.gz" From a756f85cf08259a8431f6a0e81352ed8dc4b0ba2 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:22:21 +0000 Subject: [PATCH 07/17] main/git: upgrade to 1.7.0.3 --- main/git/APKBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main/git/APKBUILD b/main/git/APKBUILD index da1fa0127f3..d3823194972 100644 --- a/main/git/APKBUILD +++ b/main/git/APKBUILD @@ -1,6 +1,6 @@ # Maintainer: Natanael Copa pkgname=git -pkgver=1.7.0.2 +pkgver=1.7.0.3 pkgrel=0 pkgdesc="GIT - the stupid content tracker" url="http://git.or.cz/" @@ -42,5 +42,5 @@ perl() { } -md5sums="76518fa774b36de81d160b85fa4f19c1 git-1.7.0.2.tar.bz2 +md5sums="1a449b84dd60a066ea491a54346843e6 git-1.7.0.3.tar.bz2 e63a201556c4f089de790805c09a2e5b bb-tar.patch" From 190bb4b5a6ff69bdbed2b5ad4246ba6a874cd218 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:29:15 +0000 Subject: [PATCH 08/17] main/openssl: upgrade to 0.9.8n --- main/openssl/APKBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main/openssl/APKBUILD b/main/openssl/APKBUILD index 8efcefea757..22dc63397c7 100644 --- a/main/openssl/APKBUILD +++ b/main/openssl/APKBUILD @@ -1,6 +1,6 @@ # Maintainer: Natanael Copa pkgname=openssl -pkgver=0.9.8m +pkgver=0.9.8n pkgrel=0 pkgdesc="Toolkit for SSL v2/v3 and TLS v1" url=http://openssl.org @@ -48,7 +48,7 @@ libcrypto() { mv "$pkgdir"/usr/lib/engines "$subpkgdir"/usr/lib/ } -md5sums="898bf125370926d5f692a2201124f8ec openssl-0.9.8m.tar.gz +md5sums="076d8efc3ed93646bd01f04e23c07066 openssl-0.9.8n.tar.gz 04a6a88c2ee4badd4f8649792b73eaf3 openssl-0.9.8g-fix_manpages-1.patch c6a9857a5dbd30cead0404aa7dd73977 openssl-bb-basename.patch 86b7f1bf50e1f3ba407ec62001a51a0d openssl-0.9.8k-padlock-sha.patch" From 2d4359cbc605cddaee36bf948fb280f0f8fbd862 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:32:01 +0000 Subject: [PATCH 09/17] main/dbus: upgrade to 1.2.24 --- main/dbus/APKBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main/dbus/APKBUILD b/main/dbus/APKBUILD index bf6edc6d415..4c92c67bc7b 100644 --- a/main/dbus/APKBUILD +++ b/main/dbus/APKBUILD @@ -1,6 +1,6 @@ # Maintainer: Natanael Copa pkgname=dbus -pkgver=1.2.20 +pkgver=1.2.24 pkgrel=0 pkgdesc="Freedesktop.org message bus system" url="http://www.freedesktop.org/Software/dbus" @@ -37,5 +37,5 @@ package() { make DESTDIR="$pkgdir" install install -Dm755 "$srcdir"/dbus.initd "$pkgdir"/etc/init.d/dbus } -md5sums="63f4e2412f6599a5e7b10281b9ddc0ac dbus-1.2.20.tar.gz +md5sums="565346cecd9cfecf1463540c6086cc2c dbus-1.2.24.tar.gz 58356b4db650a89312a670c02804c540 dbus.initd" From fea406b997fdfcee8e4fcb4dcc2daef825c0e2f1 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:35:24 +0000 Subject: [PATCH 10/17] main/bind: build fix needs perl to build --- main/bind/APKBUILD | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/main/bind/APKBUILD b/main/bind/APKBUILD index f56c7e879b1..946af90e8ac 100644 --- a/main/bind/APKBUILD +++ b/main/bind/APKBUILD @@ -9,7 +9,7 @@ pkgdesc="BIND - Berkeley Internet Name Domain - Name Server and tools" url="http://www.isc.org" license="as-is" depends= -makedepends="openssl-dev" +makedepends="openssl-dev perl" install="$pkgname.pre-install $pkgname.post-install" subpackages="$pkgname-doc $pkgname-dev $pkgname-libs $pkgname-tools" source="http://ftp.isc.org/isc/bind9/${_ver}-P${_p}/bind-${_ver}-P${_p}.tar.gz From 6351ceff598a724eabae5c47d79758b58d22b849 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:40:33 +0000 Subject: [PATCH 11/17] main/e2fsprogs: upgrade to 1.41.11 --- main/e2fsprogs/APKBUILD | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/main/e2fsprogs/APKBUILD b/main/e2fsprogs/APKBUILD index 12d09086dfa..e0360aacf35 100644 --- a/main/e2fsprogs/APKBUILD +++ b/main/e2fsprogs/APKBUILD @@ -1,6 +1,6 @@ # Maintainer: Natanael Copa pkgname=e2fsprogs -pkgver=1.41.10 +pkgver=1.41.11 pkgrel=0 pkgdesc="Standard Ext2/3/4 filesystem utilities" url="http://e2fsprogs.sourceforge.net" @@ -9,15 +9,13 @@ depends= install="$pkgname.post-upgrade" makedepends="util-linux-ng-dev pkgconfig" subpackages="$pkgname-dev $pkgname-doc libcom_err" -source="http://downloads.sourceforge.net/sourceforge/e2fsprogs/e2fsprogs-$pkgver.tar.gz - 0001-implement-com_right_r.patch" +source="http://downloads.sourceforge.net/sourceforge/e2fsprogs/e2fsprogs-$pkgver.tar.gz" depends_dev="util-linux-ng-dev" _builddir="$srcdir"/$pkgname-$pkgver prepare() { cd "$_builddir" - patch -p1 -i "$srcdir"/0001-implement-com_right_r.patch } build () { @@ -48,5 +46,4 @@ libcom_err() { mv "$pkgdir"/lib/libcom_err* "$subpkgdir"/lib/ } -md5sums="f9c7bb5c036a119453ce02fa871038da e2fsprogs-1.41.10.tar.gz -600bedf9a85cd197c39715b0be5cc5f7 0001-implement-com_right_r.patch" +md5sums="fb507a40c2706bc38306f150d069e345 e2fsprogs-1.41.11.tar.gz" From b41ae81f97bf7fa22796a74d5001c3cddfc54ca0 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:45:02 +0000 Subject: [PATCH 12/17] main/gnutls: upgrade to 2.8.6 --- main/gnutls/APKBUILD | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/main/gnutls/APKBUILD b/main/gnutls/APKBUILD index d04571aa9f1..160f0155b04 100644 --- a/main/gnutls/APKBUILD +++ b/main/gnutls/APKBUILD @@ -1,8 +1,8 @@ # Contributor: Michael Mason # Maintainer: Natanael Copa pkgname=gnutls -pkgver=2.8.5 -pkgrel=1 +pkgver=2.8.6 +pkgrel=0 pkgdesc="A library which provides a secure connection" url="http://www.gnu.org/software/gnutls/" license="GPL" @@ -30,4 +30,4 @@ package() { make -j1 DESTDIR="$pkgdir" install } -md5sums="e3b2788b79bfc82acbe717e3c54d4e92 gnutls-2.8.5.tar.bz2" +md5sums="eb0a6d7d3cb9ac684d971c14f9f6d3ba gnutls-2.8.6.tar.bz2" From 99f811d60a678264d74bc29b3ada5e88fa594e9f Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:48:32 +0000 Subject: [PATCH 13/17] main/mtools: upgrade to 4.0.13 --- main/mtools/APKBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main/mtools/APKBUILD b/main/mtools/APKBUILD index 83a590779bb..bc738e00320 100644 --- a/main/mtools/APKBUILD +++ b/main/mtools/APKBUILD @@ -1,6 +1,6 @@ # Maintainer: Natanael Copa pkgname=mtools -pkgver=4.0.12 +pkgver=4.0.13 pkgrel=0 pkgdesc="A collection of utilities to access MS-DOS disks from Unix without mounting them" url="http://www.gnu.org/software/mtools/" @@ -25,4 +25,4 @@ package() { make -j1 install DESTDIR="$pkgdir" } -md5sums="0ee77a14e5f113ad8136a867f8ed4c3a mtools-4.0.12.tar.bz2" +md5sums="334fe1580d6e3f4b5c904ce097267477 mtools-4.0.13.tar.bz2" From 6c6479009d3d6d1c50e59aa839edf620d7cba6f3 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:51:31 +0000 Subject: [PATCH 14/17] main/pcre: upgrade to 8.02 --- main/pcre/APKBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main/pcre/APKBUILD b/main/pcre/APKBUILD index a872a6d8878..f46c34268c1 100644 --- a/main/pcre/APKBUILD +++ b/main/pcre/APKBUILD @@ -1,6 +1,6 @@ # Maintainer: Natanael Copa pkgname=pcre -pkgver=8.01 +pkgver=8.02 pkgrel=0 pkgdesc="Perl-compatible regular expression library" url="http://pcre.sourceforge.net" @@ -27,4 +27,4 @@ package() { make DESTDIR="$pkgdir" install || return 1 } -md5sums="413be1c23dabe91f637fb3770f640006 pcre-8.01.tar.bz2" +md5sums="27948c1b5f5c1eabc23cba1ebe4c316f pcre-8.02.tar.bz2" From 93e9fc2933360102961acd648b4c92c5babd48a7 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:52:35 +0000 Subject: [PATCH 15/17] main/mpd: upgrade to 0.15.9 --- main/mpd/APKBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main/mpd/APKBUILD b/main/mpd/APKBUILD index b055588c89b..a66295913fd 100644 --- a/main/mpd/APKBUILD +++ b/main/mpd/APKBUILD @@ -1,7 +1,7 @@ # Contributor: Sebastian Wicki # Maintainer: Natanael Copa pkgname=mpd -pkgver=0.15.8 +pkgver=0.15.9 pkgrel=0 pkgdesc="Music daemon that plays MP3, FLAC, and Ogg Vorbis files" url="http://musicpd.org" @@ -47,6 +47,6 @@ package() { "$pkgdir"/var/lib/mpd/playlists \ "$pkgdir"/var/lib/mpd/music } -md5sums="824e1ce46c0f468865d9e5e403cdaf5d mpd-0.15.8.tar.bz2 +md5sums="88f7bc0b17eac81d03b24929d12b8aa1 mpd-0.15.9.tar.bz2 31d1515232d688d610d1664a0fb2a6a0 mpd.initd dbd301041953a5cf9c2b9de8f23eb6bb mpd.confd" From 3430a97294c289c113beee6f50c43965ceb152f6 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 07:58:36 +0000 Subject: [PATCH 16/17] main/mysql: upgrade to 5.1.45 --- main/mysql/APKBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main/mysql/APKBUILD b/main/mysql/APKBUILD index 2a956aec7de..bc4f7428467 100644 --- a/main/mysql/APKBUILD +++ b/main/mysql/APKBUILD @@ -1,7 +1,7 @@ # Contributor: Carlo Landmeter # Maintainer: Natanael Copa pkgname=mysql -pkgver=5.1.44 +pkgver=5.1.45 pkgrel=0 pkgdesc="A fast SQL database server" url="http://www.mysql.com/" @@ -77,6 +77,6 @@ client() { done } -md5sums="a16fa6d6c7f40a963919cbc1c5e86111 mysql-5.1.44.tar.gz +md5sums="06b5deb3a13c7600c38ba65b9f7e42c4 mysql-5.1.45.tar.gz 25d08b02bff6aa379dc45859b7a3f28a mysql.initd 15a7e3ddd6a40bf5a1eb3a8c69d9c34c mysql.mycnf" From d1cf2d51fe20f328b5fce61ee40aceecfaaaa978 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Tue, 30 Mar 2010 08:17:40 +0000 Subject: [PATCH 17/17] main/postgresql: upgrade to 8.4.3 --- main/postgresql/APKBUILD | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/main/postgresql/APKBUILD b/main/postgresql/APKBUILD index 00841fb1aac..a4d1b55fd46 100644 --- a/main/postgresql/APKBUILD +++ b/main/postgresql/APKBUILD @@ -1,7 +1,7 @@ # Maintainer: Natanael Copa pkgname=postgresql -pkgver=8.4.2 -pkgrel=1 +pkgver=8.4.3 +pkgrel=0 pkgdesc="A sophisticated object-relational DBMS" url="http://www.postgresql.org/" license="BSD" @@ -56,7 +56,7 @@ client() { } -md5sums="d738227e2f1f742d2f2d4ab56496c5c6 postgresql-8.4.2.tar.bz2 +md5sums="7f70e7b140fb190f268837255582b07e postgresql-8.4.3.tar.bz2 740bc8414ee27b4c81dee1690c32679f postgresql.initd d6b58fc2411fdadcb9b762464c5bee7d postgresql.confd e64d0ab26b077ed80d883c0c40704ff4 pg-restore.initd