Yaakov Selkowitz | 20 Oct 13:09 2014

[SECURITY] gnutls, lzo2

Dr. Volker Zell,

A few of your packages are awaiting updates, some of which are
security-related:

* gnutls -> 3.2.19 [SECURITY]
* lcms2 -> 2.6
* libtasn1 -> 3.9
* liblzo2 -> 2.0.8 [SECURITY]
* neon -> 0.30.1
* openldap -> 2.4.40
* tzcode -> 2014h

Any chance you will be able to update your packages again soon?

Yaakov

Yaakov Selkowitz | 20 Oct 09:20 2014

Updated: p11-kit-0.20.7-1

The following packages have been updated for the Cygwin distribution:

* p11-kit-0.20.7-1
* p11-kit-trust-0.20.7-1
* libp11-kit0-0.20.7-1
* libp11-kit-devel-0.20.7-1
* libp11-kit-doc-0.20.7-1

p11-kit provides an API for loading and enumerating PKCS#11 modules.

This is an update to the latest bugfix release for the 0.20 stable
branch.

--
Yaakov

Andrew Schulman | 19 Oct 16:13 2014
Picon

cygport improvements: upload, fish, src_prep_fini_hook

I've published several improvements to cygport on Github.  Each improvement
is in its own branch:

upload
  Adds the "upload" command: upload finished packages to cygwin.com.

fish
  Creates fish scripts in /etc/profile.d/*.fish.

src_prep_fini_hook
  Adds support for the src_prep_fini_hook() hook function, which runs 
  at the end of prep, after creation of the src directory. This seems to be
the only way to copy in complete files to the src directory during prep.
src_patch_hook() and src_unpack_hook() don't work for that, because they
  run before src is created.  (You could use them to copy files into 
  origsrc, but then the diff wouldn't appear in the cygwin.patch.)

  I find this hook essential for copying in extra files such as the
  CYGWIN-PATCHES directory, including README.Cygwin, during prep, and 
  having them reflected in the cygwin.patch. In .cygport.conf:

    CYGPORT_USE_UNSTABLE_API=1
    src_prep_fini_hook ()
    {
      cd "${top}"
      # copy in extra files
      if [[ -d extras && "$(ls extras)" ]] ; then
        inform "Copying in extra files"
        cp -a extras/* "${S}"
      fi
(Continue reading)

Andrew Schulman | 18 Oct 02:52 2014
Picon

Updated: bc-1.06.95-2

The bc package has been updated in the Cygwin distribution.
This is a minor update, a Cygwin point release, that includes the latest
patches from upstream, "latest" meaning mostly 3 years ago or more.

bc is an arbitrary precision numeric processing language. Syntax is similar
to C, but differs in many substantial areas. It supports interactive
execution of statements. bc is a utility included in the POSIX P1003.2/D11
draft standard.

Andrew E. Schulman

*******************************************************************

To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and answer all of the questions.

              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain.com_at_cygwin.com

If you need more information on unsubscribing, start reading here: 

http://cygwin.com/lists.html#subscribe-unsubscribe

Please read *all* of the information on unsubscribing that is available
(Continue reading)

Andrew Schulman | 18 Oct 02:52 2014
Picon

Updated: fish-2.1.1-3 [SECURITY]

The fish package has been updated in the Cygwin distribution.
New in this release:

* Multiple security fixes.  See the release notes for version 2.1.1 at
http://fishshell.com/release_notes.html .

* Add system directories to PATH.  fish now runs correctly as the user's
default login shell.

* Source /etc/profile.d/*.fish at start in login shells.

* Add dependency on bc.

This is a security update.  All fish users are strongly urged to upgrade.

fish is the friendly interactive shell. It's a Unix shell that focuses on
interactive use, discoverability, and user friendliness. The design goal of
fish is to give the user a rich set of powerful features in a way that is
easy to discover, remember, and use.

Home page: http://fishshell.com

Andrew E. Schulman

*******************************************************************

To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and answer all of the questions.

(Continue reading)

Andrew Schulman | 17 Oct 19:27 2014
Picon

[ITA] bc

I see that bc is orphaned.  Since fish depends on it, I'd like to adopt it.
I checked the cygport script, and it builds fine from source.

bc hasn't been updated since 2006, so I'm not expecting to make any new
releases any time soon.

Andrew

Pavel Fedin | 13 Oct 11:39 2014

[BUG] libffi needs to be rebuilt for i386

 Hello!
 I have found another problem, this time in libffi. Something appears to be
wrong with the binary, and on my system it failed to execute its DllMain. As
a result, it did not register its .eh_frame contents, and upon module unload
i got abort() in __deregister_frame_info_bases()
 I started to research it, but cygffi-6.dll contains no symbols. So, in
order to get a version with symbols, i rebuilt it from the source using up
to date gcc. The problem magically went away with the rebuilt binary.
Perhaps it was some obscure gcc/ld bug.
 Is it possible for the maintainer to update the binary ?

Kind regards,
Pavel Fedin
Expert Engineer
Samsung Electronics Research center Russia

Andrew Schulman | 13 Oct 10:33 2014
Picon

[ITA] fish

I'd like to adopt the fish package.  The package seems to be abandoned.  A
new release is out upstream with multiple security fixes, but the Cygwin
package hasn't been updated.  Emails to the maintainer have bounced, and he
hasn't answered recent discussions on the cygwin list about the need to
update the package and fix some problems in it.

I took the existing cygport script, revised it a bit, added fixes for all
of the known problems, and rolled a new release (below).  If it seems okay,
I'll upload it.

Andrew

x86:
http://home.comcast.net/~andrex2/cygwin/x86/setup.hint
http://home.comcast.net/~andrex2/cygwin/x86/fish-2.1.1-2.tar.xz
http://home.comcast.net/~andrex2/cygwin/x86/fish-2.1.1-2-src.tar.xz

x86_64:
http://home.comcast.net/~andrex2/cygwin/x86_64/setup.hint
http://home.comcast.net/~andrex2/cygwin/x86_64/fish-2.1.1-2.tar.xz
http://home.comcast.net/~andrex2/cygwin/x86_64/fish-2.1.1-2-src.tar.xz

Pavel Fedin | 10 Oct 15:53 2014

[BUG] SCons 2.3.0 sometimes cannot find files

 Hello! I have found a Cygwin-specific bug in current sconstruct. The
problem is that under certain conditions it fails to find sconscript files
nested deeply in the source tree.
 I have spent several hours tracing this problem. It ended up in
entry_exists_on_disk() method in Node/FS.py. Unfortunately i almost don't
understand sconstruct, so i cannot write sconscript tree to reproduce this.
And this is proprietary project so i cannot post parts of it. However, i
have made a reduced test case (attached). This is the broken method
extracted from original file plus some quickly hacked up code needed to make
it working. If you run it on Cygwin it will report FAIL.
 The problem lies in Cygwin-specific filename case normalization. Please
take a look at _my_normcase() implementation, the comment above describes
its purpose pretty well. So, the function reads list of files in current
directory and remembers their NORMALIZED versions in a hash. But in the end
the function just attempts to fetch 'name in d', where 'name' is NOT
normalized. This perfectly works on case-sensitive UNIX but on Cygwin it
fails.
 The solution is to move 'name = _my_normcase(name)' conversion to the place
before checking sys.platform, so that both branches use normalized version.
Because Cygwin is not 'win32'.

Kind regards,
Pavel Fedin
Expert Engineer
Samsung Electronics Research center Russia

D. Boland | 10 Oct 09:13 2014
Picon

Re: MTA packaging (exim, postfix, sendmail, ssmtp)

Hi Yaakov,

Yaakov Selkowitz wrote:
> 
> Corinna, Christian, Daniel, Pierre,
> 
> Because MTAs must be user-configured, and we certainly don't want to
> lose the selection during package upgrades, the alternatives cannot be
> handled in package postinst/prerm.  I think the only way to make this
> work is for each MTA config script to handle these instead by including
> the following snippets in the respective MTA config scripts.
> 
> Please review this carefully in case I missed anything.
> 
> sendmail:
> ========
> 
> /usr/sbin/alternatives --install /usr/sbin/sendmail mta
> /usr/sbin/sendmail-real.exe 0 \
>         --slave /usr/lib/sendmail mta-sendmail /usr/sbin/sendmail-real.exe \
>         --slave /usr/bin/mailq mta-mailq /usr/sbin/sendmail-real.exe \
>         --slave /usr/bin/newaliases mta-newaliases /usr/sbin/sendmail-real.exe \
>         --slave /usr/bin/rmail mta-rmail /usr/sbin/sendmail-real.exe
> 
> /usr/sbin/alternatives --set mta /usr/sbin/sendmail-real.exe

Thanks. I will use these with a slight modification.

My source code is currently being used on Cygwin, Ubuntu, Lubuntu, Kubuntu, Debian
and Suze. So I already had to come up with a solution which would work for all of
(Continue reading)

Corinna Vinschen | 8 Oct 14:52 2014

Re: MTA packaging (exim, postfix, sendmail, ssmtp)

Hi Yaakov,

On Oct  6 17:19, Yaakov Selkowitz wrote:
> Corinna, Christian, Daniel, Pierre,
> 
> Because MTAs must be user-configured, and we certainly don't want to lose
> the selection during package upgrades, the alternatives cannot be handled in
> package postinst/prerm.  I think the only way to make this work is for each
> MTA config script to handle these instead by including the following
> snippets in the respective MTA config scripts.
> 
> Please review this carefully in case I missed anything.

The ssmtp part looks ok to me.  Two questions:

- Don't we have to add something to preremove as well?

- What if the user installs multiple MTA packages at the same time?

Thanks,
Corinna

--

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

Gmane