Skip to contentSkip to conversation

Nettle from release Fido fails to build

DISCUSSION Leon Anavi 3 participants 7 messages Mar 11, 2016

lore
Share & tools
lore

Leon Anavi

author
#0 lore raw

Hi,

Yesterday I noticed that the build of recipe nettle 2.7.1 from release Fido fails:
https://gist.github.com/leon-anavi/dfd3afab567a9dc9fa2f

The build machine is with Ubuntu 14.04 (Trusty Tahr). I am build Poky with nettle for qemux86-64.

My investigation shows that nettle fails due to a couple of security fixes (CVE-2015-8804, CVE-2015-8803 and CVE-2015-8805) which have been applied to branch Fido recently:
https://git.yoctoproject.org/cgit/cgit.cgi/poky/tree/meta/recipes-support/nettle/nettle_2.7.1.bb?h=fido#n13

The same patches are present in Jethro but the versions of nettle in Jethro and Fido are different. The version in Fido is 2.7.1. Jethro has recipes for both 2.7.1 and 3.1.1. As far as I can see in Jethro the patches are applied only for version 3.1.1.Therefore in my opinion these patches are for a newer versions of nettle and they are not compatible with version 2.7.1 from release Fido.

Could you please have a look and let me know if I am doing something wrong or if this is a bug that can be fixed for release Fido?

Best regards, Leon

Signature · 3 lines
Leon Anavi
Software Engineer
konsulko.com
author
#2 lore raw

Hi Ross,

Quoted 11 lines · Ross

On 11 March 2016 at 09:45, Leon Anavi <[email protected] <mailto:[email protected]>> wrote:

Yesterday I noticed that the build of recipe nettle 2.7.1 from release Fido fails:
https://gist.github.com/leon-anavi/dfd3afab567a9dc9fa2f

Theres a patch from a few days ago on this list to fix the issue: http://patchwork.openembedded.org/patch/117355/.

OK, thank you for the feedback. I will wait for the fix in the Poky repository.

Best regards, Leon

Quoted 1 line

Ross

Signature · 3 lines
Leon Anavi
Software Engineer
konsulko.com
#3 lore raw
Quoted 3 lines · Leon Anavi

OK, thank you for the feedback. I will wait for the fix in the Poky repository.

Obviously you can apply the fix locally until it ends up in a release branch. Hooray git!

Ross

author
#4 lore raw

Hi Ross,

Quoted 9 lines · Ross

On 11 March 2016 at 10:07, Leon Anavi <[email protected] <mailto:[email protected]>> wrote:

OK, thank you for the feedback. I will wait for the fix in the Poky repository.

Obviously you can apply the fix locally until it ends up in a release branch. Hooray git!

Yes, of course but in my particular case it will be more convenient just to use the commit prior the existing in Fido wrong patches for nettle.

Thanks, Leon

Quoted 1 line

Ross

Signature · 3 lines
Leon Anavi
Software Engineer
konsulko.com
#5 lore raw
In reply to Leon Anavi
Quoted 8 lines · Leon Anavi
Quoted 7 lines · Ross
Quoted 5 lines · Leon Anavi

Yesterday I noticed that the build of recipe nettle 2.7.1 from release Fido fails:
https://gist.github.com/leon-anavi/dfd3afab567a9dc9fa2f

Quoted 5 lines
Quoted 3 lines

Theres a patch from a few days ago on this list to fix the issue: h ttp://patchwork.openembedded.org/patch/117355/.

 OK, thank you for the feedback. I will wait for the fix in the Poky repository.

This fix has now been merged to the fido branch of the poky repository.

Regards,

Joshua

author
#6 lore raw

Hi Joshua,

Quoted 8 lines · Joshua G Lock
Quoted 7 lines · Leon Anavi
Quoted 6 lines · Ross
Quoted 4 lines · Leon Anavi

Yesterday I noticed that the build of recipe nettle 2.7.1 from release Fido fails:
https://gist.github.com/leon-anavi/dfd3afab567a9dc9fa2f

Quoted 6 lines
Quoted 5 lines
Quoted 3 lines

Theres a patch from a few days ago on this list to fix the issue: h ttp://patchwork.openembedded.org/patch/117355/.

OK, thank you for the feedback. I will wait for the fix in the Poky
repository.

This fix has now been merged to the fido branch of the poky repository.

Thank you. I am already building my image with the head of branch fido from the poky repository.

Best regards, Leon

Quoted 4 lines

Regards,

Joshua

Signature · 3 lines
Leon Anavi
Software Engineer
konsulko.com