linux-libc-headers: refresh 0001-libc-compat.h-fix-some-issues-arising-from-in6.h.patch
PATCH 1/3 linux-libc-headers: refresh 0001-libc-compat.h-fix-some-issues-arising-from-in6.h.patch
It's only applied with musl and so was missed in the big batch.
Signed-off-by Alexander Kanavin <[email protected]>
--- .../0001-libc-compat.h-fix-some-issues-arising-from-in6.h.patch | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-)
meta/recipes-kernel/linux-libc-headers/linux-libc-headers/0001-libc-compat.h-fix-some-issues-arising-from-in6.h.patch +2 -3
@@ -80,12 +80,11 @@ Index: linux-4.15/include/uapi/linux/libc-compat.h /* Definitions for if.h */ #ifndef __UAPI_DEF_IF_IFCONF -@@ -262,7 +253,7 @@ +@@ -262,6 +253,6 @@ #define __UAPI_DEF_XATTR 1 #endif -#endif /* __GLIBC__ */ +#endif /* __KERNEL__ */ - /* Definitions for if_ether.h */ - /* allow libcs like musl to deactivate this, glibc does not implement this. */ + #endif /* _UAPI_LIBC_COMPAT_H */
Signature · 1 line
2.16.1
PATCH 2/3 openssl: update 1.0.2n -> 1.0.2o
Please see this security advisory:
https://www.openssl.org/news/secadv/20180327.txt
License-Update: copyright years
Signed-off-by Alexander Kanavin <[email protected]>
---
.../0001-Fix-build-with-clang-using-external-assembler.patch | 0
.../0001-openssl-force-soft-link-to-avoid-rare-race.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/Makefiles-ptest.patch | 0
.../Use-SHA256-not-MD5-as-default-digest.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/configure-musl-target.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/configure-targets.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/debian/c_rehash-compat.patch | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/ca.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/debian/debian-targets.patch | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/man-dir.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/debian/man-section.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/debian/no-rpath.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/debian/no-symbolic.patch | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/pic.patch | 0
.../debian1.0.2/block_digicert_malaysia.patch | 0
.../debian1.0.2/block_diginotar.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/debian1.0.2/soname.patch | 0
.../debian1.0.2/version-script.patch | 0
.../engines-install-in-libdir-ssl.patch | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/find.pl | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/oe-ldflags.patch | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/openssl-c_rehash.sh | 0
.../openssl-fix-des.pod-error.patch | 0
.../openssl-util-perlpath.pl-cwd.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/openssl_fix_for_x32.patch | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/parallel.patch | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/ptest-deps.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/ptest_makefile_deps.patch | 0
.../{openssl-1.0.2n => openssl-1.0.2o}/reproducible-cflags.patch | 0
.../reproducible-mkbuildinf.patch | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/run-ptest | 0
.../openssl/{openssl-1.0.2n => openssl-1.0.2o}/shared-libs.patch | 0
.../openssl/{openssl_1.0.2n.bb => openssl_1.0.2o.bb} | 6 +++---
33 files changed, 3 insertions(+), 3 deletions(-)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/0001-Fix-build-with-clang-using-external-assembler.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/0001-openssl-force-soft-link-to-avoid-rare-race.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/Makefiles-ptest.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/Use-SHA256-not-MD5-as-default-digest.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/configure-musl-target.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/configure-targets.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/c_rehash-compat.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/ca.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/debian-targets.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/man-dir.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/man-section.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/no-rpath.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/no-symbolic.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/pic.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian1.0.2/block_digicert_malaysia.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian1.0.2/block_diginotar.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian1.0.2/soname.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian1.0.2/version-script.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/engines-install-in-libdir-ssl.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/find.pl (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/oe-ldflags.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/openssl-c_rehash.sh (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/openssl-fix-des.pod-error.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/openssl-util-perlpath.pl-cwd.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/openssl_fix_for_x32.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/parallel.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/ptest-deps.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/ptest_makefile_deps.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/reproducible-cflags.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/reproducible-mkbuildinf.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/run-ptest (100%)
rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/shared-libs.patch (100%)
rename meta/recipes-connectivity/openssl/{openssl_1.0.2n.bb => openssl_1.0.2o.bb} (91%)meta/recipes-connectivity/openssl/openssl-1.0.2o/0001-Fix-build-with-clang-using-external-assembler.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/0001-Fix-build-with-clang-using-external-assembler.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/0001-openssl-force-soft-link-to-avoid-rare-race.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/0001-openssl-force-soft-link-to-avoid-rare-race.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/Makefiles-ptest.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/Makefiles-ptest.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/Use-SHA256-not-MD5-as-default-digest.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/Use-SHA256-not-MD5-as-default-digest.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/configure-musl-target.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/configure-musl-target.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/configure-targets.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/configure-targets.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/c_rehash-compat.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian/c_rehash-compat.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/ca.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian/ca.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/debian-targets.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian/debian-targets.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/man-dir.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian/man-dir.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/man-section.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian/man-section.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/no-rpath.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian/no-rpath.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/no-symbolic.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian/no-symbolic.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/pic.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian/pic.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian1.0.2/block_digicert_malaysia.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian1.0.2/block_digicert_malaysia.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian1.0.2/block_diginotar.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian1.0.2/block_diginotar.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian1.0.2/soname.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian1.0.2/soname.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/debian1.0.2/version-script.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/debian1.0.2/version-script.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/engines-install-in-libdir-ssl.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/engines-install-in-libdir-ssl.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/find.pl renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/find.pl +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/oe-ldflags.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/oe-ldflags.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/openssl-c_rehash.sh renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/openssl-c_rehash.sh +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/openssl-fix-des.pod-error.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/openssl-fix-des.pod-error.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/openssl-util-perlpath.pl-cwd.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/openssl-util-perlpath.pl-cwd.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/openssl_fix_for_x32.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/openssl_fix_for_x32.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/parallel.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/parallel.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/ptest-deps.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/ptest-deps.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/ptest_makefile_deps.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/ptest_makefile_deps.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/reproducible-cflags.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/reproducible-cflags.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/reproducible-mkbuildinf.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/reproducible-mkbuildinf.patch +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/run-ptest renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/run-ptest +0 -0
meta/recipes-connectivity/openssl/openssl-1.0.2o/shared-libs.patch renamed from meta/recipes-connectivity/openssl/openssl-1.0.2n/shared-libs.patch +0 -0
meta/recipes-connectivity/openssl/openssl_1.0.2o.bb renamed from meta/recipes-connectivity/openssl/openssl_1.0.2n.bb +3 -3
@@ -6,7 +6,7 @@ require openssl10.inc CFLAG += "-DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS" CFLAG_append_class-native = " -fPIC" -LIC_FILES_CHKSUM = "file://LICENSE;md5=057d9218c6180e1d9ee407572b2dd225" +LIC_FILES_CHKSUM = "file://LICENSE;md5=f475368924827d06d4b416111c8bdb77" export DIRS = "crypto ssl apps engines" export OE_LDFLAGS="${LDFLAGS}"
@@ -47,8 +47,8 @@ SRC_URI_append_class-target = "\ file://reproducible-cflags.patch \ file://reproducible-mkbuildinf.patch \ " -SRC_URI[md5sum] = "13bdc1b1d1ff39b6fd42a255e74676a4" -SRC_URI[sha256sum] = "370babb75f278c39e0c50e8c4e7493bc0f18db6867478341a832a982fd15a8fe" +SRC_URI[md5sum] = "44279b8557c3247cbe324e2322ecd114" +SRC_URI[sha256sum] = "ec3f5c9714ba0fd45cb4e087301eb1336c317e0d20b575a125050470e8089e4d" PACKAGES =+ "${PN}-engines" FILES_${PN}-engines = "${libdir}/ssl/engines/*.so ${libdir}/engines"
Signature · 1 line
2.16.1
PATCH 3/3 openssl: update 1.1.0g -> 1.1.0h
In reply to Alexander KanavinPlease see this security advisory:
https://www.openssl.org/news/secadv/20180327.txt
Remove 0001-Remove-test-that-requires-running-as-non-root.patch (issue fixed upstream)
Remove 0001-aes-asm-aes-armv4-bsaes-armv7-.pl-make-it-work-with-.patch (backport)
License-Update: copyright years
Signed-off-by Alexander Kanavin <[email protected]>
---
...ve-test-that-requires-running-as-non-root.patch | 49 ------------
...-armv4-bsaes-armv7-.pl-make-it-work-with-.patch | 88 ----------------------
.../{openssl_1.1.0g.bb => openssl_1.1.0h.bb} | 10 +--
3 files changed, 4 insertions(+), 143 deletions(-)
delete mode 100644 meta/recipes-connectivity/openssl/openssl/0001-Remove-test-that-requires-running-as-non-root.patch
delete mode 100644 meta/recipes-connectivity/openssl/openssl/0001-aes-asm-aes-armv4-bsaes-armv7-.pl-make-it-work-with-.patch
rename meta/recipes-connectivity/openssl/{openssl_1.1.0g.bb => openssl_1.1.0h.bb} (91%)meta/recipes-connectivity/openssl/openssl/0001-Remove-test-that-requires-running-as-non-root.patch deleted +0 -49
@@ -1,49 +0,0 @@ -From 3fdb1e2a16ea405c6731447a8994f222808ef7e6 Mon Sep 17 00:00:00 2001 -From: Alexander Kanavin <[email protected]> -Date: Fri, 7 Apr 2017 18:01:52 +0300 -Subject: [PATCH] Remove test that requires running as non-root - -Upstream-Status: Inappropriate [oe-core specific] -Signed-off-by: Alexander Kanavin <[email protected]> ---- - test/recipes/40-test_rehash.t | 17 +---------------- - 1 file changed, 1 insertion(+), 16 deletions(-) - -diff --git a/test/recipes/40-test_rehash.t b/test/recipes/40-test_rehash.t -index f902c23..c7567c1 100644 ---- a/test/recipes/40-test_rehash.t -+++ b/test/recipes/40-test_rehash.t -@@ -23,7 +23,7 @@ setup("test_rehash"); - plan skip_all => "test_rehash is not available on this platform" - unless run(app(["openssl", "rehash", "-help"])); - --plan tests => 5; -+plan tests => 3; - - indir "rehash.$$" => sub { - prepare(); -@@ -42,21 +42,6 @@ indir "rehash.$$" => sub { - 'Testing rehash operations on empty directory'); - }, create => 1, cleanup => 1; - --indir "rehash.$$" => sub { -- prepare(); -- chmod 0500, curdir(); -- SKIP: { -- if (!ok(!open(FOO, ">unwritable.txt"), -- "Testing that we aren't running as a privileged user, such as root")) { -- close FOO; -- skip "It's pointless to run the next test as root", 1; -- } -- isnt(run(app(["openssl", "rehash", curdir()])), 1, -- 'Testing rehash operations on readonly directory'); -- } -- chmod 0700, curdir(); # make it writable again, so cleanup works --}, create => 1, cleanup => 1; -- - sub prepare { - my @pemsourcefiles = sort glob(srctop_file('test', "*.pem")); - my @destfiles = (); --- -2.11.0 -
meta/recipes-connectivity/openssl/openssl/0001-aes-asm-aes-armv4-bsaes-armv7-.pl-make-it-work-with-.patch deleted +0 -88
88 lines not on this page · raw message
meta/recipes-connectivity/openssl/openssl_1.1.0h.bb renamed from meta/recipes-connectivity/openssl/openssl_1.1.0g.bb +4 -6
@@ -6,20 +6,18 @@ SECTION = "libs/network" # "openssl | SSLeay" dual license LICENSE = "openssl" -LIC_FILES_CHKSUM = "file://LICENSE;md5=cae6da10f4ffd9703214776d2aabce32" +LIC_FILES_CHKSUM = "file://LICENSE;md5=d57d511030c9d66ef5f5966bee5a7eff" BBCLASSEXTEND = "native nativesdk" -SRC_URI[md5sum] = "ba5f1b8b835b88cadbce9b35ed9531a6" -SRC_URI[sha256sum] = "de4d501267da39310905cb6dc8c6121f7a2cad45a7707f76df828fe1b85073af" +SRC_URI[md5sum] = "5271477e4d93f4ea032b665ef095ff24" +SRC_URI[sha256sum] = "5835626cde9e99656585fc7aaa2302a73a7e1340bf8c14fd635a62c66802a517" SRC_URI = "http://www.openssl.org/source/openssl-${PV}.tar.gz \ file://run-ptest \ file://openssl-c_rehash.sh \ file://0001-Take-linking-flags-from-LDFLAGS-env-var.patch \ - file://0001-Remove-test-that-requires-running-as-non-root.patch \ - file://0001-aes-asm-aes-armv4-bsaes-armv7-.pl-make-it-work-with-.patch \ - " + " S = "${WORKDIR}/openssl-${PV}"
Signature · 1 line
2.16.1