* [ptxdist] [PATCH] nginx: version bump 1.14.0 -> 1.14.1
@ 2018-11-19 15:03 Clemens Gruber
2018-11-19 15:03 ` [ptxdist] [PATCH] libgpiod: version bump 1.1.1 -> 1.2 Clemens Gruber
2018-11-19 15:03 ` [ptxdist] [PATCH] systemd: add upstream patch for CVE-2018-15688 Clemens Gruber
0 siblings, 2 replies; 3+ messages in thread
From: Clemens Gruber @ 2018-11-19 15:03 UTC (permalink / raw)
To: ptxdist; +Cc: Clemens Gruber
Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
---
...auto-type-sizeof-rework-autotest-to-be-cross-compila.patch | 0
...auto-feature-add-mechanism-allowing-to-force-feature.patch | 0
...auto-set-ngx_feature_run_force_result-for-each-featu.patch | 0
.../0004-auto-lib-libxslt-conf-use-pkg-config.patch | 0
...0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch | 0
.../0006-auto-lib-openssl-conf-use-pkg-config.patch | 0
.../0007-auto-lib-libgd-conf-use-pkg-config.patch | 0
...src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch | 0
...auto-endianness-add-mechanism-allowing-to-force-resu.patch | 0
.../0101-auto-unix-allow-overriding-the-IPv6-build-test.patch | 0
patches/{nginx-1.14.0 => nginx-1.14.1}/series | 0
rules/nginx.make | 4 ++--
12 files changed, 2 insertions(+), 2 deletions(-)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0004-auto-lib-libxslt-conf-use-pkg-config.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0006-auto-lib-openssl-conf-use-pkg-config.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0007-auto-lib-libgd-conf-use-pkg-config.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch (100%)
rename patches/{nginx-1.14.0 => nginx-1.14.1}/series (100%)
diff --git a/patches/nginx-1.14.0/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch b/patches/nginx-1.14.1/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch
similarity index 100%
rename from patches/nginx-1.14.0/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch
rename to patches/nginx-1.14.1/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch
diff --git a/patches/nginx-1.14.0/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch b/patches/nginx-1.14.1/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch
similarity index 100%
rename from patches/nginx-1.14.0/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch
rename to patches/nginx-1.14.1/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch
diff --git a/patches/nginx-1.14.0/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch b/patches/nginx-1.14.1/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch
similarity index 100%
rename from patches/nginx-1.14.0/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch
rename to patches/nginx-1.14.1/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch
diff --git a/patches/nginx-1.14.0/0004-auto-lib-libxslt-conf-use-pkg-config.patch b/patches/nginx-1.14.1/0004-auto-lib-libxslt-conf-use-pkg-config.patch
similarity index 100%
rename from patches/nginx-1.14.0/0004-auto-lib-libxslt-conf-use-pkg-config.patch
rename to patches/nginx-1.14.1/0004-auto-lib-libxslt-conf-use-pkg-config.patch
diff --git a/patches/nginx-1.14.0/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch b/patches/nginx-1.14.1/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch
similarity index 100%
rename from patches/nginx-1.14.0/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch
rename to patches/nginx-1.14.1/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch
diff --git a/patches/nginx-1.14.0/0006-auto-lib-openssl-conf-use-pkg-config.patch b/patches/nginx-1.14.1/0006-auto-lib-openssl-conf-use-pkg-config.patch
similarity index 100%
rename from patches/nginx-1.14.0/0006-auto-lib-openssl-conf-use-pkg-config.patch
rename to patches/nginx-1.14.1/0006-auto-lib-openssl-conf-use-pkg-config.patch
diff --git a/patches/nginx-1.14.0/0007-auto-lib-libgd-conf-use-pkg-config.patch b/patches/nginx-1.14.1/0007-auto-lib-libgd-conf-use-pkg-config.patch
similarity index 100%
rename from patches/nginx-1.14.0/0007-auto-lib-libgd-conf-use-pkg-config.patch
rename to patches/nginx-1.14.1/0007-auto-lib-libgd-conf-use-pkg-config.patch
diff --git a/patches/nginx-1.14.0/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch b/patches/nginx-1.14.1/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch
similarity index 100%
rename from patches/nginx-1.14.0/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch
rename to patches/nginx-1.14.1/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch
diff --git a/patches/nginx-1.14.0/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch b/patches/nginx-1.14.1/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch
similarity index 100%
rename from patches/nginx-1.14.0/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch
rename to patches/nginx-1.14.1/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch
diff --git a/patches/nginx-1.14.0/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch b/patches/nginx-1.14.1/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch
similarity index 100%
rename from patches/nginx-1.14.0/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch
rename to patches/nginx-1.14.1/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch
diff --git a/patches/nginx-1.14.0/series b/patches/nginx-1.14.1/series
similarity index 100%
rename from patches/nginx-1.14.0/series
rename to patches/nginx-1.14.1/series
diff --git a/rules/nginx.make b/rules/nginx.make
index 335fc8fb0..03d35ad1c 100644
--- a/rules/nginx.make
+++ b/rules/nginx.make
@@ -17,8 +17,8 @@ PACKAGES-$(PTXCONF_NGINX) += nginx
#
# Paths and names
#
-NGINX_VERSION := 1.14.0
-NGINX_MD5 := 2d856aca3dfe1d32e3c9f8c4cac0cc95
+NGINX_VERSION := 1.14.1
+NGINX_MD5 := 18561561ffa2b63885b607453390b49c
NGINX := nginx-$(NGINX_VERSION)
NGINX_SUFFIX := tar.gz
NGINX_URL := https://nginx.org/download/$(NGINX).$(NGINX_SUFFIX)
--
2.19.1
_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 3+ messages in thread
* [ptxdist] [PATCH] libgpiod: version bump 1.1.1 -> 1.2
2018-11-19 15:03 [ptxdist] [PATCH] nginx: version bump 1.14.0 -> 1.14.1 Clemens Gruber
@ 2018-11-19 15:03 ` Clemens Gruber
2018-11-19 15:03 ` [ptxdist] [PATCH] systemd: add upstream patch for CVE-2018-15688 Clemens Gruber
1 sibling, 0 replies; 3+ messages in thread
From: Clemens Gruber @ 2018-11-19 15:03 UTC (permalink / raw)
To: ptxdist; +Cc: Clemens Gruber
Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
---
rules/libgpiod.make | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/rules/libgpiod.make b/rules/libgpiod.make
index 1598924fc..94110769d 100644
--- a/rules/libgpiod.make
+++ b/rules/libgpiod.make
@@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBGPIOD) += libgpiod
#
# Paths and names
#
-LIBGPIOD_VERSION := 1.1.1
-LIBGPIOD_MD5 := 57874b94652c69f6ac902acce5cfd531
+LIBGPIOD_VERSION := 1.2
+LIBGPIOD_MD5 := 1587cef32ac9edab6cc0440e6368860f
LIBGPIOD := libgpiod-$(LIBGPIOD_VERSION)
LIBGPIOD_SUFFIX := tar.gz
LIBGPIOD_URL := https://www.kernel.org/pub/software/libs/libgpiod/$(LIBGPIOD).$(LIBGPIOD_SUFFIX)
--
2.19.1
_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 3+ messages in thread
* [ptxdist] [PATCH] systemd: add upstream patch for CVE-2018-15688
2018-11-19 15:03 [ptxdist] [PATCH] nginx: version bump 1.14.0 -> 1.14.1 Clemens Gruber
2018-11-19 15:03 ` [ptxdist] [PATCH] libgpiod: version bump 1.1.1 -> 1.2 Clemens Gruber
@ 2018-11-19 15:03 ` Clemens Gruber
1 sibling, 0 replies; 3+ messages in thread
From: Clemens Gruber @ 2018-11-19 15:03 UTC (permalink / raw)
To: ptxdist; +Cc: Clemens Gruber
The patch fixes the aforementioned bug in the systemd DHCP6 client.
Details: https://nvd.nist.gov/vuln/detail/CVE-2018-15688
Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
---
...we-have-enough-space-for-the-DHCP6-o.patch | 22 +++++++++++++++++++
patches/systemd-239/series | 3 ++-
2 files changed, 24 insertions(+), 1 deletion(-)
create mode 100644 patches/systemd-239/0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch
diff --git a/patches/systemd-239/0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch b/patches/systemd-239/0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch
new file mode 100644
index 000000000..f1858b23d
--- /dev/null
+++ b/patches/systemd-239/0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch
@@ -0,0 +1,22 @@
+From: Lennart Poettering <lennart@poettering.net>
+Date: Fri, 19 Oct 2018 12:12:33 +0200
+Subject: [PATCH] dhcp6: make sure we have enough space for the DHCP6 option
+ header
+
+---
+ src/libsystemd-network/dhcp6-option.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/libsystemd-network/dhcp6-option.c b/src/libsystemd-network/dhcp6-option.c
+index 18196b12573c..09794972991f 100644
+--- a/src/libsystemd-network/dhcp6-option.c
++++ b/src/libsystemd-network/dhcp6-option.c
+@@ -103,7 +103,7 @@ int dhcp6_option_append_ia(uint8_t **buf, size_t *buflen, DHCP6IA *ia) {
+ return -EINVAL;
+ }
+
+- if (*buflen < len)
++ if (*buflen < offsetof(DHCP6Option, data) + len)
+ return -ENOBUFS;
+
+ ia_hdr = *buf;
diff --git a/patches/systemd-239/series b/patches/systemd-239/series
index c75fbeb9a..bdfa3c1e8 100644
--- a/patches/systemd-239/series
+++ b/patches/systemd-239/series
@@ -1,4 +1,5 @@
# generated by git-ptx-patches
#tag:base --start-number 1
0001-build-sys-Detect-whether-struct-statx-is-defined-in-.patch
-# 54d194f090a373e4c969c7c584a671c4 - git-ptx-patches magic
+0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch
+# 69d3a3089d693a020a7338b3e119044a - git-ptx-patches magic
--
2.19.1
_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2018-11-19 15:05 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-11-19 15:03 [ptxdist] [PATCH] nginx: version bump 1.14.0 -> 1.14.1 Clemens Gruber
2018-11-19 15:03 ` [ptxdist] [PATCH] libgpiod: version bump 1.1.1 -> 1.2 Clemens Gruber
2018-11-19 15:03 ` [ptxdist] [PATCH] systemd: add upstream patch for CVE-2018-15688 Clemens Gruber
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox