Re: [kde-freebsd] after compiling x11/kde4 problems with /usr/local/bin/startkde (SOLVED)
El día Sunday, November 01, 2009 a las 10:45:41AM +, Robert Watson escribió: On Sun, 1 Nov 2009, Matthias Apitz wrote: Could you confirm you are running with a userspace/kernel of at least r198203 (the date of the last PIE-related fix following a move to disallowing NULL mappings). NAK, userland and kernel is: $ uname -a FreeBSD vm-azul.Sisis.de 9.0-CURRENT FreeBSD 9.0-CURRENT #0 r197801: Mon Oct 12 13:33:32 CEST 2009 g...@vm-azul.sisis.de:/usr/obj/usr/src/sys/GENERIC i386 Sounds like an upgrade should fix this -- if not, please let us know ASAP as it might be an issue for 8.0 as well. Would this require as well to re-compile all my ~1200 ports or are there no changes in the ABI since r197801? matthias -- Matthias Apitz t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211 e g...@unixarea.de - w http://www.unixarea.de/ Vote NO to EU The Lisbon Treaty: http://www.no-means-no.eu ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
Re: [kde-freebsd] Some security flaws that were recently fixed in KDE 4.3.3
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, Nov 02, 2009 at 09:59:40AM +0300, Eygene Ryabinkin wrote:
Gentlemen, good day.
I was made aware of the oCERT advisory,
http://www.ocert.org/advisories/ocert-2009-015.html
that talks about 3 distinct security bugs for the KDE 4. Advisory
has some details and links to the upstream fixes. Patch for
kio_help is already integrated to the sources of kdelibs 4.3.1,
but the other two mentioned patches apply to the current sources
of FreeBSD KDE port.
I was able just to test the applicability of the patches and Tinderbox
builds on 7.x and 8.x. I am not the KDE user and I can't really
validate that everything works as expected. So I can hand off to
you a half-baked patch for the kdelibs4 and kdebase4-runtime and
VuXML entry for the said vulnerabilities. If someone will be able
to verify that the patches cause no harm to the KDE ports and
everything works as expected, it will be greatly appreciated.
Thanks, I know about the security problems, I will take a look
tonight. Thanks
Thanks!
--
Eygene
____ _.--. #
\`.|\.....-'` `-._.-'_.-'` # Remember that it is hard
/ ' ` , __.--' # to read the on-line manual
)/' _/ \ `-_, /# while single-stepping the kernel.
`-' `\_ ,_.-;_.-\_ ', fsc/as #
_.-'_./ {_.' ; / #-- FreeBSD Developers handbook
{_.-``-' {_/#
From cc068dd02680ed4d007cb09711a4e48a9493d93b Mon Sep 17 00:00:00 2001
From: Eygene Ryabinkin rea-f...@codelabs.ru
Date: Fri, 30 Oct 2009 08:27:33 +0300
Subject: [PATCH] KDE4: fixes for oCERT-2009-015
The fix for kdelibs/kdoctools/kio_help.cpp is already in the KDE-4.3.1,
so only first two patches mentioned in the advisory [1] should be
incorporated into the ports.
[1] http://www.ocert.org/advisories/ocert-2009-015.html
Signed-off-by: Eygene Ryabinkin rea-f...@codelabs.ru
---
x11/kdebase4-runtime/Makefile |2 +-
.../files/patch-ocert-2009-015-kioslave| 17 +++
x11/kdelibs4/Makefile |2 +-
x11/kdelibs4/files/patch-ocert-2009-015-khtml | 118
4 files changed, 137 insertions(+), 2 deletions(-)
create mode 100644 x11/kdebase4-runtime/files/patch-ocert-2009-015-kioslave
create mode 100644 x11/kdelibs4/files/patch-ocert-2009-015-khtml
diff --git a/x11/kdebase4-runtime/Makefile b/x11/kdebase4-runtime/Makefile
index 43515fc..d2394a6 100644
--- a/x11/kdebase4-runtime/Makefile
+++ b/x11/kdebase4-runtime/Makefile
@@ -8,7 +8,7 @@
PORTNAME=kdebase-runtime
PORTVERSION= ${KDE4_VERSION}
-PORTREVISION=1
+PORTREVISION=2
CATEGORIES= x11 kde
MASTER_SITES=${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= ${KDE4_BRANCH}/${PORTVERSION}/src
diff --git a/x11/kdebase4-runtime/files/patch-ocert-2009-015-kioslave
b/x11/kdebase4-runtime/files/patch-ocert-2009-015-kioslave
new file mode 100644
index 000..82c6c97
--- /dev/null
+++ b/x11/kdebase4-runtime/files/patch-ocert-2009-015-kioslave
@@ -0,0 +1,17 @@
+Obtained-From:
http://websvn.kde.org/branches/KDE/4.3/kdebase/runtime/kioslave/info/info.cc?r1=1030579r2=1030578pathrev=1030579view=patch
+--- kioslave/info/info.cc2009/10/02 15:51:26 1030578
kioslave/info/info.cc2009/10/02 15:53:30 1030579
+@@ -89,6 +89,13 @@
+ return;
+ }
+
++// '' in the path looks suspicious, someone is trying
info:/dir/scriptalert('xss')/script
++if (url.path().contains(''))
++{
++error(KIO::ERR_DOES_NOT_EXIST, url.url());
++return;
++}
++
+ mimeType(text/html);
+ // extract the path and node from url
+ decodeURL( url );
diff --git a/x11/kdelibs4/Makefile b/x11/kdelibs4/Makefile
index d4bea20..d7e4656 100644
--- a/x11/kdelibs4/Makefile
+++ b/x11/kdelibs4/Makefile
@@ -8,7 +8,7 @@
PORTNAME=kdelibs
PORTVERSION= ${KDE4_VERSION}
-PORTREVISION=4
+PORTREVISION=5
CATEGORIES= x11 kde ipv6
MASTER_SITES=${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= ${KDE4_BRANCH}/${PORTVERSION}/src
diff --git a/x11/kdelibs4/files/patch-ocert-2009-015-khtml
b/x11/kdelibs4/files/patch-ocert-2009-015-khtml
new file mode 100644
index 000..52e6b36
--- /dev/null
+++ b/x11/kdelibs4/files/patch-ocert-2009-015-khtml
@@ -0,0 +1,118 @@
+Obtained-From:
http://websvn.kde.org/branches/KDE/4.3/kdelibs/khtml/ecma/xmlhttprequest.cpp?r1=1035539r2=1035538pathrev=1035539view=patch
+--- khtml/ecma/xmlhttprequest.cpp2009/10/15 10:13:41 1035538
khtml/ecma/xmlhttprequest.cpp2009/10/15 10:14:38 1035539
+@@ -49,7 +49,7 @@
+
+ using namespace KJS;
+ using namespace DOM;
+-//
++//
+ // XMLHttpRequest Object
+
+ /* Source for XMLHttpRequestProtoTable.
+@@ -269,7 +269,7 @@
+ static bool
[kde-freebsd] Current problem reports assigned to k...@freebsd.org
Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description o ports/140098 kdemisc/kdeedu4 ld: cannot find -lgps o ports/140088 kdex11/kdelibs3: error creating package - postscript.ppd. o ports/137587 kde[PATCH] audio/arts: Add more OPTIONS and proper CONFIG f ports/137178 kdeaudio/gmm++: gmm_superlu_interface.h contains starnge o ports/137131 kdex11/kdebase3: genkdmconf leaves new kdmrc world readab o ports/133078 kde[PATCH] kmix (multimedia/kdemultimedia4) incorrectly b o ports/124639 kdekde audio/arts sound skipping on playback; non-artsd s o ports/124321 kdex11/kdebase3 - KDE logins do not work with nsswitch LD o ports/117440 kdemisc/kdeedu3 - Request to package README.ephemerides f o ports/113295 kdenet-im/kopete: pleawse add 'make config' to choose kop 10 problems total. ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/graphics/opengtl
SVN commit 5557 by fluffy: - Update to 0.9.11 release M +2 -2 Makefile M +3 -3 distinfo M +8 -8 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/polish/kde4-l10n
SVN commit 5558 by tabthorpe: - Really fix plist M +18 -0 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/french/kde4-l10n
SVN commit 5559 by tabthorpe: - Really fix plist M +1 -0 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/misc/kde4-l10n-es
SVN commit 5560 by tabthorpe: - Really fix plist M +2 -0 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/misc/kde4-l10n-it
SVN commit 5561 by tabthorpe: - Really fix plist M +5 -4 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/misc/kde4-l10n-ca
SVN commit 5562 by tabthorpe: - Really fix plist M +5 -0 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/portuguese/kde4-l10n-pt_BR
SVN commit 5563 by tabthorpe: - Fix plist M +7 -62 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/editors/koffice-kde4
SVN commit 5564 by fluffy: - Welcome KOffice 2.1 RC1! M +1 -1 Makefile M +3 -3 distinfo D files/patch-cmake_modules_FindWV2.cmake M +6 -2 files/patch-krita_plugins_formats_CMakeLists.txt M +95 -30pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/portuguese/kde4-l10n-pt_BR
SVN commit 5566 by tabthorpe: - Fix plist M +0 -1 Makefile.man ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/misc/kde4-l10n-sr
SVN commit 5567 by tabthorpe: - Fix plist M +38 -8 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/QT/devel/qt4
SVN commit 5568 by fluffy: - Exclude qt4-ibase-plugin from standard build Currently firebird2-client is unmaintained and can be correctly builded only by hands. So using it in automatic package build is overhead. M +1 -2 Makefile ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] branches/qt-4.6/devel/qt4
SVN commit 5569 by fluffy: - Exclude qt4-ibase-plugin from standard build Currently firebird2-client is unmaintained and can be correctly builded only by hands. So using it in automatic package build is overhead. M +1 -2 Makefile ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/devel/kdebindings4-python-pykde4/files
SVN commit 5570 by kmoore: Added patch for pykde4 from David Naylor which fixes issues with KDE4's printer app, and probably other python-based applets. A patch-python_pykde4_kpythonpluginfactory_kpythonpluginfactory.cpp ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/misc/kde4-l10n-it
SVN commit 5571 by tabthorpe: - Fix plist M +1 -0 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
Re: [kde-freebsd] [SOLVED] [Call for Help] kpythonpluginfactory (Printer Configuration)
On Sat, 31 Oct 2009, David Naylor wrote: On Saturday, 31 October 2009 10:26:55 David Naylor wrote: On Friday, 30 October 2009 18:25:17 Kris Moore wrote: On Fri, 30 Oct 2009, David Naylor wrote: Hi, It appears that kpythonpluginfactory does not work when the python script calls a lib-dynload object (such as 'import time'). A typical message is: ImportError: /usr/local/lib/python2.6/lib-dynload/time.so: Undefined symbol PyExc_IOError This stops system-settings-printer-kde from working (and, I think plasma- python scripting). I know this worked in KDE 4.2.0. A tentative speculation to the cause leads me to conclude something happened to FreeBSD (I still needs to do an upgrade to RC2)*. I did, however, find a work around: get kpythonpluginfactory to link statically to python. This obviously leads to a bigger file. Does anyone have KDE 4.2.2 running, if so please install print/system-config- printer-kde and see if you can load the Printer Configuration in systemsettings. Please report if the config module loads and what version of KDE and FreeBSD you are running. Thanks, David *I'm also having problems with cups-smb and this may be related David, I did some investigation with this issue a while back. I think its a bug in the python port itself, none of the lib-dynload libraries are linked to the main python library. For example, if you run this: setenv LD_PRELOAD /usr/local/lib/libpython2.6.so ; systemsettings You should now be able to bring up the KDE printer interface. If you do this, you can see what those libs are linked to: # cd /usr/local/lib/python2.6/lib-dynload # setenv LD_LIBRARY_PATH `pwd` # ldd time.so time.so: libm.so.5 = /lib/libm.so.5 libthr.so.3 - /lib/libthr.so.3 libc.so.7 = /lib/libc.so.7 I'm thinking that if we fix the python port to link these lib-dynload/* libaries to /usr/local/lib/libpython2.6.so the problem will go away. Investigating this now actually, but if somebody else had ideas on this, please let us know :) This is actually a design feature of python. If those libraries are linked to libpython then it will break the case where one links statically to libpython. See http://bugs.python.org/issue4434 for the PR at python that discusses it. The way to get around this is to dlopen libpython with RTLD_GLOBAL. I've checked the code in kpythonpluginfactory and that is exactly what it does. That behaviour has never changed. I do remember this working for me a while back and stopped after I did a system wide upgrade. This, I presume, also works for Linux. I'm planning on upgrading to RC2 and if the issue is still present I'll write a simple test program that should exhibit the same behaviour and check to see if it works on older versions of FreeBSD. It still does not work under RC2. I am now doubting this is a regression and it was planetary alignments that had it working for me previously :-) I wrote a test program that *should* trigger the same problem. See rtld_global.shar for the program. The default behaviour is my fix, to trigger the problem run `make -DTRIGGER`. It is a small program and should be easy to figure out. See attached for the fix. Add the patch to devel/kdebindings4-python-pykde4 and reinstall. If you encounter any problems please let me know. Regards Excellent! I've tested this patch here, and it does correct issues with the python printer app on my 8.0-RC2 (amd64) system. I've just added it to area51 now as well. Thanks! -- Kris Moore PC-BSD Software ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/misc/kde4-l10n-es
SVN commit 5572 by tabthorpe: - Fix plist M +2 -0 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/net/kdenetwork4
SVN commit 5573 by tabthorpe: - Tarball was re-rolled M +3 -3 distinfo ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
[kde-freebsd] [SVN Commit] area51/KDE/editors/koffice-kde4
SVN commit 5574 by fluffy: - Fix plist with OpenGTL/QtShiva enabled Hurray! Now KOffice builds fine with OpenGTL support on amd64 Reported by: tindy M +21 -7 pkg-plist ___ kde-freebsd mailing list kde-freebsd@kde.org https://mail.kde.org/mailman/listinfo/kde-freebsd See also http://freebsd.kde.org/ for latest information
