Package Updates
cover Package Updates
These are some core packages for larger systems that had updates that should be included in 1.6.
The bind update provides CVE fixes
Sau!
Saul Wold (3):
util-linux: Update to 2.24.1
dhcp: Update to 4.3.0
bind: Update to 9.9.5
.../bind-9.8.1-CVE-2012-5166.patch | 0
.../{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch | 0
.../{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch | 0
.../{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch | 0
.../{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch | 0
.../bind-Fix-CVE-2012-4244.patch | 0
.../bind/{bind-9.8.1 => bind}/conf.patch | 0
.../{bind-9.8.1 => bind}/cross-build-fix.patch | 0
.../bind/bind/dont-test-on-host.patch | 13 ++
.../make-etc-initd-bind-stop-work.patch | 0
.../mips1-not-support-opcode.diff | 0
.../bind/{bind_9.8.1.bb => bind_9.9.5.bb} | 20 +--
meta/recipes-connectivity/dhcp/dhcp.inc | 2 +-
.../dhcp/dhcp/fix-external-bind.patch | 115 +++++++-------
.../dhcp/{dhcp_4.2.5-P1.bb => dhcp_4.3.0.bb} | 6 +-
meta/recipes-core/util-linux/util-linux.inc | 12 +-
.../util-linux/util-linux/fix-configure.patch | 20 +--
.../util-linux/util-linux/util-linux-native.patch | 173 +++------------------
.../{util-linux_2.23.2.bb => util-linux_2.24.1.bb} | 6 +-
19 files changed, 123 insertions(+), 244 deletions(-)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-9.8.1-CVE-2012-5166.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-Fix-CVE-2012-4244.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/conf.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/cross-build-fix.patch (100%)
create mode 100644 meta/recipes-connectivity/bind/bind/dont-test-on-host.patch
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/make-etc-initd-bind-stop-work.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/mips1-not-support-opcode.diff (100%)
rename meta/recipes-connectivity/bind/{bind_9.8.1.bb => bind_9.9.5.bb} (76%)
rename meta/recipes-connectivity/dhcp/{dhcp_4.2.5-P1.bb => dhcp_4.3.0.bb} (65%)
rename meta/recipes-core/util-linux/{util-linux_2.23.2.bb => util-linux_2.24.1.bb} (83%)Signature · 1 line
1.8.3.1
PATCH 1/3 util-linux: Update to 2.24.1
rebase native patch to remove sundisklabel as it's deprectated upstream Update LIC_FILES_CHECKSUM for modified text, no License Changes remove deprecated elvtune flag
Rebase the fix-configure patch due to change in configure.ac
---
meta/recipes-core/util-linux/util-linux.inc | 12 +-
.../util-linux/util-linux/fix-configure.patch | 20 +--
.../util-linux/util-linux/util-linux-native.patch | 173 +++------------------
.../{util-linux_2.23.2.bb => util-linux_2.24.1.bb} | 6 +-
4 files changed, 37 insertions(+), 174 deletions(-)
rename meta/recipes-core/util-linux/{util-linux_2.23.2.bb => util-linux_2.24.1.bb} (83%)meta/recipes-core/util-linux/util-linux.inc +6 -6
@@ -7,22 +7,22 @@ SECTION = "base" LICENSE = "GPLv2+ & LGPLv2.1+ & BSD" -LIC_FILES_CHKSUM = "file://README.licensing;md5=679af3e410ee112a5ec94de6501bf5c3 \ +LIC_FILES_CHKSUM = "file://README.licensing;md5=1715f5ee3e01203ca1e1e0b9ee65918c \ file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ file://Documentation/licenses/COPYING.GPLv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ file://Documentation/licenses/COPYING.LGPLv2.1;md5=4fbd65380cdd255951079008b364516c \ file://Documentation/licenses/COPYING.BSD-3;md5=58dcd8452651fc8b07d1f65ce07ca8af \ file://Documentation/licenses/COPYING.UCB;md5=263860f8968d8bafa5392cab74285262 \ - file://libuuid/COPYING;md5=aa3ac5b4a5bcb707f714f78794011b80 \ - file://libmount/COPYING;md5=152f98bc301a5ea649769ede7203ac82 \ - file://libblkid/COPYING;md5=152f98bc301a5ea649769ede7203ac82" + file://libuuid/COPYING;md5=b442ffb762cf8d3e9df1b99e0bb4af70 \ + file://libmount/COPYING;md5=fb93f01d4361069c5616327705373b16 \ + file://libblkid/COPYING;md5=fb93f01d4361069c5616327705373b16" inherit autotools gettext pkgconfig systemd DEPENDS = "zlib ncurses" DEPENDS_append_class-native = " lzo-native" DEPENDS_append_class-nativesdk = " lzo-native" -SRC_URI = "${KERNELORG_MIRROR}/linux/utils/util-linux/v${MAJOR_VERSION}/util-linux-${PV}.tar.bz2 \ +SRC_URI = "${KERNELORG_MIRROR}/linux/utils/util-linux/v${MAJOR_VERSION}/util-linux-${PV}.tar.xz \ file://MCONFIG \ file://defines.h \ file://make_include \
@@ -39,7 +39,7 @@ PACKAGES =+ "util-linux-agetty util-linux-fdisk util-linux-cfdisk util-linux-sfd util-linux-partx ${PN}-bash-completion" SHARED_EXTRA_OECONF = "--disable-use-tty-group \ - --disable-makeinstall-chown --enable-elvtune \ + --disable-makeinstall-chown \ --enable-kill --enable-last --enable-mesg --enable-partx \ --enable-raw --enable-reset --disable-login \ --disable-vipw --disable-newgrp --disable-chfn-chsh \
meta/recipes-core/util-linux/util-linux/fix-configure.patch +10 -10
@@ -5,16 +5,16 @@ Upstream-Status: Pending Signed-off-by: Saul Wold <[email protected]> -Index: util-linux-2.22.1/configure.ac +Index: util-linux-2.24.1/configure.ac =================================================================== ---- util-linux-2.22.1.orig/configure.ac -+++ util-linux-2.22.1/configure.ac -@@ -79,7 +79,7 @@ fi +--- util-linux-2.24.1.orig/configure.ac ++++ util-linux-2.24.1/configure.ac +@@ -76,7 +76,7 @@ fi AC_SUBST([usrsbin_execdir]) - case $libdir in -- '${exec_prefix}/'* | '${prefix}/'* | /usr/*) -+ ${exec_prefix}/* | ${prefix}/* | /usr/*) - usrlib_execdir=$libdir ;; - *) - usrlib_execdir='${exec_prefix}'$libdir ;; + AS_CASE([$libdir], +- ['${exec_prefix}/'* | '${prefix}/'* | /usr/*], ++ [${exec_prefix}/* | ${prefix}/* | /usr/*], + [usrlib_execdir=$libdir], + [usrlib_execdir='${exec_prefix}'$libdir] + )
meta/recipes-core/util-linux/util-linux/util-linux-native.patch +18 -155
200 lines not on this page · raw message
meta/recipes-core/util-linux/util-linux_2.24.1.bb renamed from meta/recipes-core/util-linux/util-linux_2.23.2.bb +3 -3
@@ -1,4 +1,4 @@ -MAJOR_VERSION = "2.23" +MAJOR_VERSION = "2.24" require util-linux.inc # To support older hosts, we need to patch and/or revert
@@ -14,8 +14,8 @@ SRC_URI += "file://util-linux-ng-replace-siginterrupt.patch \ ${OLDHOST} \ " -SRC_URI[md5sum] = "39a02ad0b3b37824c394f40930b7aa38" -SRC_URI[sha256sum] = "6c5be3f7beec91b4893de14bbd722886fa2521be5bfa0fc079b749d0018633b1" +SRC_URI[md5sum] = "88d46ae23ca599ac5af9cf96b531590f" +SRC_URI[sha256sum] = "835eb6232cfab0118ef2e4fd649de0ba9f5bd1b8cbf9a7d4d84594541dec8410" CACHED_CONFIGUREVARS += "scanf_cv_alloc_modifier=as" EXTRA_OECONF_class-native = "${SHARED_EXTRA_OECONF} \
Signature · 1 line
1.8.3.1
PATCH 2/3 dhcp: Update to 4.3.0
In reply to Saul WoldRebase fix-external-bind patch
LICENSE file has date update to 2014
---
meta/recipes-connectivity/dhcp/dhcp.inc | 2 +-
.../dhcp/dhcp/fix-external-bind.patch | 115 +++++++++++----------
.../dhcp/{dhcp_4.2.5-P1.bb => dhcp_4.3.0.bb} | 6 +-
3 files changed, 65 insertions(+), 58 deletions(-)
rename meta/recipes-connectivity/dhcp/{dhcp_4.2.5-P1.bb => dhcp_4.3.0.bb} (65%)meta/recipes-connectivity/dhcp/dhcp.inc +1 -1
@@ -8,7 +8,7 @@ easier to administer devices." HOMEPAGE = "http://www.isc.org/" LICENSE = "ISC" -LIC_FILES_CHKSUM = "file://LICENSE;beginline=4;md5=bb6fd41f5895b67088ebea61ad365e74" +LIC_FILES_CHKSUM = "file://LICENSE;beginline=4;md5=c5c64d696107f84b56fe337d14da1753" DEPENDS = "openssl bind"
meta/recipes-connectivity/dhcp/dhcp/fix-external-bind.patch +62 -53
159 lines not on this page · raw message
meta/recipes-connectivity/dhcp/dhcp_4.3.0.bb renamed from meta/recipes-connectivity/dhcp/dhcp_4.2.5-P1.bb +2 -4
@@ -1,7 +1,5 @@ require dhcp.inc -PR = "r4" - SRC_URI += "file://dhcp-3.0.3-dhclient-dbus.patch;striplevel=0 \ file://fix-external-bind.patch \ file://link-with-lcrypto.patch \
@@ -9,5 +7,5 @@ SRC_URI += "file://dhcp-3.0.3-dhclient-dbus.patch;striplevel=0 \ file://dhclient-script-drop-resolv.conf.dhclient.patch \ " -SRC_URI[md5sum] = "f68e3c1f00a9af5742bc5e71d567cf93" -SRC_URI[sha256sum] = "59b06c9f5d775e46999b422c45b9229402c462b114ce1685617bfb2b8b028250" +SRC_URI[md5sum] = "1020d77e1a4c1f01b76279caff9beb80" +SRC_URI[sha256sum] = "a7b6517d5cf32c5e49d2323a63de00efe5391df7cb0045dfa0ec8f6ee46ebe8a"
Signature · 1 line
1.8.3.1
PATCH 3/3 bind: Update to 9.9.5
In reply to Saul WoldRemove CVE patches that are in bind
Updated COPYRIGHT includes date changes the NetBSD Copyright Modifies the Base BSD License to 3-Clause (removes advertising clause)w Add patch to disable running tests on host
bind: Add python-core for dnssec
---
.../bind-9.8.1-CVE-2012-5166.patch | 0
.../{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch | 0
.../{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch | 0
.../{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch | 0
.../{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch | 0
.../bind-Fix-CVE-2012-4244.patch | 0
.../bind/{bind-9.8.1 => bind}/conf.patch | 0
.../bind/{bind-9.8.1 => bind}/cross-build-fix.patch | 0
.../bind/bind/dont-test-on-host.patch | 13 +++++++++++++
.../make-etc-initd-bind-stop-work.patch | 0
.../mips1-not-support-opcode.diff | 0
.../bind/{bind_9.8.1.bb => bind_9.9.5.bb} | 20 ++++++++------------
12 files changed, 21 insertions(+), 12 deletions(-)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-9.8.1-CVE-2012-5166.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-Fix-CVE-2012-4244.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/conf.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/cross-build-fix.patch (100%)
create mode 100644 meta/recipes-connectivity/bind/bind/dont-test-on-host.patch
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/make-etc-initd-bind-stop-work.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/mips1-not-support-opcode.diff (100%)
rename meta/recipes-connectivity/bind/{bind_9.8.1.bb => bind_9.9.5.bb} (76%)meta/recipes-connectivity/bind/bind/bind-9.8.1-CVE-2012-5166.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-9.8.1-CVE-2012-5166.patch +0 -0
meta/recipes-connectivity/bind/bind/bind-CVE-2011-4313.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2011-4313.patch +0 -0
meta/recipes-connectivity/bind/bind/bind-CVE-2012-1667.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-1667.patch +0 -0
meta/recipes-connectivity/bind/bind/bind-CVE-2012-3817.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-3817.patch +0 -0
meta/recipes-connectivity/bind/bind/bind-CVE-2013-2266.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2013-2266.patch +0 -0
meta/recipes-connectivity/bind/bind/bind-Fix-CVE-2012-4244.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-Fix-CVE-2012-4244.patch +0 -0
meta/recipes-connectivity/bind/bind/conf.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/conf.patch +0 -0
meta/recipes-connectivity/bind/bind/cross-build-fix.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/cross-build-fix.patch +0 -0
meta/recipes-connectivity/bind/bind/dont-test-on-host.patch new file +13 -0
@@ -0,0 +1,13 @@ +Index: bind-9.9.5/bin/Makefile.in +=================================================================== +--- bind-9.9.5.orig/bin/Makefile.in ++++ bind-9.9.5/bin/Makefile.in +@@ -19,7 +19,7 @@ srcdir = @srcdir@ + VPATH = @srcdir@ + top_srcdir = @top_srcdir@ + +-SUBDIRS = named rndc dig dnssec tools tests nsupdate \ ++SUBDIRS = named rndc dig dnssec tools nsupdate \ + check confgen @PYTHON_TOOLS@ @PKCS11_TOOLS@ + TARGETS = +
meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/make-etc-initd-bind-stop-work.patch +0 -0
meta/recipes-connectivity/bind/bind/mips1-not-support-opcode.diff renamed from meta/recipes-connectivity/bind/bind-9.8.1/mips1-not-support-opcode.diff +0 -0
meta/recipes-connectivity/bind/bind_9.9.5.bb renamed from meta/recipes-connectivity/bind/bind_9.8.1.bb +8 -12
@@ -3,32 +3,26 @@ HOMEPAGE = "http://www.isc.org/sw/bind/" SECTION = "console/network" LICENSE = "ISC & BSD" -LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=0fbe2a3ab3c68ac3fea3cad13093877c" +LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=a3df5f651469919a0e6cb42f84fb6ff1" DEPENDS = "openssl libcap" -PR = "r6" SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ file://conf.patch \ file://cross-build-fix.patch \ file://make-etc-initd-bind-stop-work.patch \ - file://bind-9.8.1-CVE-2012-5166.patch \ - file://bind-CVE-2011-4313.patch \ - file://bind-CVE-2012-1667.patch \ - file://bind-CVE-2012-3817.patch \ - file://bind-CVE-2013-2266.patch \ - file://bind-Fix-CVE-2012-4244.patch \ file://mips1-not-support-opcode.diff \ + file://dont-test-on-host.patch \ " -SRC_URI[md5sum] = "cf31117c5d35af34d4c0702970ad9fb7" -SRC_URI[sha256sum] = "02285dc429cb2a6687a1b2446e9ee22c1df27f2577225b05be5092395ee7c92c" +SRC_URI[md5sum] = "e676c65cad5234617ee22f48e328c24e" +SRC_URI[sha256sum] = "d4b64c1dde442145a316679acff2df4008aa117ae52dfa3a6bc69efecc7840d1" # --enable-exportlib is necessary for building dhcp ENABLE_IPV6 = "--enable-ipv6=${@base_contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}" EXTRA_OECONF = " ${ENABLE_IPV6} --with-randomdev=/dev/random --disable-threads \ --disable-devpoll --disable-epoll --with-gost=no \ - --with-gssapi=no \ + --with-gssapi=no --with-ecdsa=yes \ --sysconfdir=${sysconfdir}/bind \ --with-openssl=${STAGING_LIBDIR}/.. --with-libxml2=${STAGING_LIBDIR}/.. \ --enable-exportlib --with-export-includedir=${includedir} --with-export-libdir=${libdir} \
@@ -40,7 +34,9 @@ INITSCRIPT_PARAMS = "defaults" PARALLEL_MAKE = "" -PACKAGES_prepend = "${PN}-utils " +RDEPENDS_${PN} = "python-core" + +PACKAGES_preprend = " ${PN}-utils " FILES_${PN}-utils = "${bindir}/host ${bindir}/dig ${bindir}/nslookup" FILES_${PN}-dev += "${bindir}/isc-config.h"
Signature · 1 line
1.8.3.1
Re: [PATCH 3/3] bind: Update to 9.9.5
Quoted 7 lines · Saul Wold
Remove CVE patches that are in bind
Updated COPYRIGHT includes date changes the NetBSD Copyright Modifies the Base BSD License to 3-Clause (removes advertising clause)w Add patch to disable running tests on host
bind: Add python-core for dnssecSigned-off-by Saul Wold <[email protected]>
Judging from the autobuilder failures, this one could still use some work :/
Cheers,
Richard
Re: [PATCH 3/3] bind: Update to 9.9.5
Quoted 7 lines · Richard Purdie
Quoted 6 lines · Saul Wold
Remove CVE patches that are in bind
Updated COPYRIGHT includes date changes the NetBSD Copyright Modifies the Base BSD License to 3-Clause (removes advertising clause)w Add patch to disable running tests on host
bind: Add python-core for dnssec
Quoted 5 lines
Quoted 1 line
Signed-off-by Saul Wold <[email protected]>Judging from the autobuilder failures, this one could still use some work :/
That should have been addressed with the RDEPENDS_${PN} = "python-core" since the new dnssec-* scripts are python based.
Sau!
Quoted 6 lines
Cheers,
Richard