mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
* [ptxdist] [PATCH] nginx: version bump 1.14.0 -> 1.14.1
@ 2018-11-19 15:03 Clemens Gruber
  2018-11-19 15:03 ` [ptxdist] [PATCH] libgpiod: version bump 1.1.1 -> 1.2 Clemens Gruber
  2018-11-19 15:03 ` [ptxdist] [PATCH] systemd: add upstream patch for CVE-2018-15688 Clemens Gruber
  0 siblings, 2 replies; 3+ messages in thread
From: Clemens Gruber @ 2018-11-19 15:03 UTC (permalink / raw)
  To: ptxdist; +Cc: Clemens Gruber

Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
---
 ...auto-type-sizeof-rework-autotest-to-be-cross-compila.patch | 0
 ...auto-feature-add-mechanism-allowing-to-force-feature.patch | 0
 ...auto-set-ngx_feature_run_force_result-for-each-featu.patch | 0
 .../0004-auto-lib-libxslt-conf-use-pkg-config.patch           | 0
 ...0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch | 0
 .../0006-auto-lib-openssl-conf-use-pkg-config.patch           | 0
 .../0007-auto-lib-libgd-conf-use-pkg-config.patch             | 0
 ...src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch | 0
 ...auto-endianness-add-mechanism-allowing-to-force-resu.patch | 0
 .../0101-auto-unix-allow-overriding-the-IPv6-build-test.patch | 0
 patches/{nginx-1.14.0 => nginx-1.14.1}/series                 | 0
 rules/nginx.make                                              | 4 ++--
 12 files changed, 2 insertions(+), 2 deletions(-)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0004-auto-lib-libxslt-conf-use-pkg-config.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0006-auto-lib-openssl-conf-use-pkg-config.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0007-auto-lib-libgd-conf-use-pkg-config.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch (100%)
 rename patches/{nginx-1.14.0 => nginx-1.14.1}/series (100%)

diff --git a/patches/nginx-1.14.0/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch b/patches/nginx-1.14.1/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch
similarity index 100%
rename from patches/nginx-1.14.0/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch
rename to patches/nginx-1.14.1/0001-auto-type-sizeof-rework-autotest-to-be-cross-compila.patch
diff --git a/patches/nginx-1.14.0/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch b/patches/nginx-1.14.1/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch
similarity index 100%
rename from patches/nginx-1.14.0/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch
rename to patches/nginx-1.14.1/0002-auto-feature-add-mechanism-allowing-to-force-feature.patch
diff --git a/patches/nginx-1.14.0/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch b/patches/nginx-1.14.1/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch
similarity index 100%
rename from patches/nginx-1.14.0/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch
rename to patches/nginx-1.14.1/0003-auto-set-ngx_feature_run_force_result-for-each-featu.patch
diff --git a/patches/nginx-1.14.0/0004-auto-lib-libxslt-conf-use-pkg-config.patch b/patches/nginx-1.14.1/0004-auto-lib-libxslt-conf-use-pkg-config.patch
similarity index 100%
rename from patches/nginx-1.14.0/0004-auto-lib-libxslt-conf-use-pkg-config.patch
rename to patches/nginx-1.14.1/0004-auto-lib-libxslt-conf-use-pkg-config.patch
diff --git a/patches/nginx-1.14.0/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch b/patches/nginx-1.14.1/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch
similarity index 100%
rename from patches/nginx-1.14.0/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch
rename to patches/nginx-1.14.1/0005-auto-unix-make-sys_nerr-guessing-cross-friendly.patch
diff --git a/patches/nginx-1.14.0/0006-auto-lib-openssl-conf-use-pkg-config.patch b/patches/nginx-1.14.1/0006-auto-lib-openssl-conf-use-pkg-config.patch
similarity index 100%
rename from patches/nginx-1.14.0/0006-auto-lib-openssl-conf-use-pkg-config.patch
rename to patches/nginx-1.14.1/0006-auto-lib-openssl-conf-use-pkg-config.patch
diff --git a/patches/nginx-1.14.0/0007-auto-lib-libgd-conf-use-pkg-config.patch b/patches/nginx-1.14.1/0007-auto-lib-libgd-conf-use-pkg-config.patch
similarity index 100%
rename from patches/nginx-1.14.0/0007-auto-lib-libgd-conf-use-pkg-config.patch
rename to patches/nginx-1.14.1/0007-auto-lib-libgd-conf-use-pkg-config.patch
diff --git a/patches/nginx-1.14.0/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch b/patches/nginx-1.14.1/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch
similarity index 100%
rename from patches/nginx-1.14.0/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch
rename to patches/nginx-1.14.1/0008-src-os-unix-ngx_linux_config.h-only-include-dlfcn.h-.patch
diff --git a/patches/nginx-1.14.0/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch b/patches/nginx-1.14.1/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch
similarity index 100%
rename from patches/nginx-1.14.0/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch
rename to patches/nginx-1.14.1/0100-auto-endianness-add-mechanism-allowing-to-force-resu.patch
diff --git a/patches/nginx-1.14.0/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch b/patches/nginx-1.14.1/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch
similarity index 100%
rename from patches/nginx-1.14.0/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch
rename to patches/nginx-1.14.1/0101-auto-unix-allow-overriding-the-IPv6-build-test.patch
diff --git a/patches/nginx-1.14.0/series b/patches/nginx-1.14.1/series
similarity index 100%
rename from patches/nginx-1.14.0/series
rename to patches/nginx-1.14.1/series
diff --git a/rules/nginx.make b/rules/nginx.make
index 335fc8fb0..03d35ad1c 100644
--- a/rules/nginx.make
+++ b/rules/nginx.make
@@ -17,8 +17,8 @@ PACKAGES-$(PTXCONF_NGINX) += nginx
 #
 # Paths and names
 #
-NGINX_VERSION	:= 1.14.0
-NGINX_MD5	:= 2d856aca3dfe1d32e3c9f8c4cac0cc95
+NGINX_VERSION	:= 1.14.1
+NGINX_MD5	:= 18561561ffa2b63885b607453390b49c
 NGINX		:= nginx-$(NGINX_VERSION)
 NGINX_SUFFIX	:= tar.gz
 NGINX_URL	:= https://nginx.org/download/$(NGINX).$(NGINX_SUFFIX)
-- 
2.19.1


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

^ permalink raw reply	[flat|nested] 3+ messages in thread

* [ptxdist] [PATCH] libgpiod: version bump 1.1.1 -> 1.2
  2018-11-19 15:03 [ptxdist] [PATCH] nginx: version bump 1.14.0 -> 1.14.1 Clemens Gruber
@ 2018-11-19 15:03 ` Clemens Gruber
  2018-11-19 15:03 ` [ptxdist] [PATCH] systemd: add upstream patch for CVE-2018-15688 Clemens Gruber
  1 sibling, 0 replies; 3+ messages in thread
From: Clemens Gruber @ 2018-11-19 15:03 UTC (permalink / raw)
  To: ptxdist; +Cc: Clemens Gruber

Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
---
 rules/libgpiod.make | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/libgpiod.make b/rules/libgpiod.make
index 1598924fc..94110769d 100644
--- a/rules/libgpiod.make
+++ b/rules/libgpiod.make
@@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBGPIOD) += libgpiod
 #
 # Paths and names
 #
-LIBGPIOD_VERSION	:= 1.1.1
-LIBGPIOD_MD5		:= 57874b94652c69f6ac902acce5cfd531
+LIBGPIOD_VERSION	:= 1.2
+LIBGPIOD_MD5		:= 1587cef32ac9edab6cc0440e6368860f
 LIBGPIOD		:= libgpiod-$(LIBGPIOD_VERSION)
 LIBGPIOD_SUFFIX		:= tar.gz
 LIBGPIOD_URL		:= https://www.kernel.org/pub/software/libs/libgpiod/$(LIBGPIOD).$(LIBGPIOD_SUFFIX)
-- 
2.19.1


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

^ permalink raw reply	[flat|nested] 3+ messages in thread

* [ptxdist] [PATCH] systemd: add upstream patch for CVE-2018-15688
  2018-11-19 15:03 [ptxdist] [PATCH] nginx: version bump 1.14.0 -> 1.14.1 Clemens Gruber
  2018-11-19 15:03 ` [ptxdist] [PATCH] libgpiod: version bump 1.1.1 -> 1.2 Clemens Gruber
@ 2018-11-19 15:03 ` Clemens Gruber
  1 sibling, 0 replies; 3+ messages in thread
From: Clemens Gruber @ 2018-11-19 15:03 UTC (permalink / raw)
  To: ptxdist; +Cc: Clemens Gruber

The patch fixes the aforementioned bug in the systemd DHCP6 client.

Details: https://nvd.nist.gov/vuln/detail/CVE-2018-15688

Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
---
 ...we-have-enough-space-for-the-DHCP6-o.patch | 22 +++++++++++++++++++
 patches/systemd-239/series                    |  3 ++-
 2 files changed, 24 insertions(+), 1 deletion(-)
 create mode 100644 patches/systemd-239/0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch

diff --git a/patches/systemd-239/0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch b/patches/systemd-239/0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch
new file mode 100644
index 000000000..f1858b23d
--- /dev/null
+++ b/patches/systemd-239/0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch
@@ -0,0 +1,22 @@
+From: Lennart Poettering <lennart@poettering.net>
+Date: Fri, 19 Oct 2018 12:12:33 +0200
+Subject: [PATCH] dhcp6: make sure we have enough space for the DHCP6 option
+ header
+
+---
+ src/libsystemd-network/dhcp6-option.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/libsystemd-network/dhcp6-option.c b/src/libsystemd-network/dhcp6-option.c
+index 18196b12573c..09794972991f 100644
+--- a/src/libsystemd-network/dhcp6-option.c
++++ b/src/libsystemd-network/dhcp6-option.c
+@@ -103,7 +103,7 @@ int dhcp6_option_append_ia(uint8_t **buf, size_t *buflen, DHCP6IA *ia) {
+                 return -EINVAL;
+         }
+ 
+-        if (*buflen < len)
++        if (*buflen < offsetof(DHCP6Option, data) + len)
+                 return -ENOBUFS;
+ 
+         ia_hdr = *buf;
diff --git a/patches/systemd-239/series b/patches/systemd-239/series
index c75fbeb9a..bdfa3c1e8 100644
--- a/patches/systemd-239/series
+++ b/patches/systemd-239/series
@@ -1,4 +1,5 @@
 # generated by git-ptx-patches
 #tag:base --start-number 1
 0001-build-sys-Detect-whether-struct-statx-is-defined-in-.patch
-# 54d194f090a373e4c969c7c584a671c4  - git-ptx-patches magic
+0002-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch
+# 69d3a3089d693a020a7338b3e119044a  - git-ptx-patches magic
-- 
2.19.1


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2018-11-19 15:05 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-11-19 15:03 [ptxdist] [PATCH] nginx: version bump 1.14.0 -> 1.14.1 Clemens Gruber
2018-11-19 15:03 ` [ptxdist] [PATCH] libgpiod: version bump 1.1.1 -> 1.2 Clemens Gruber
2018-11-19 15:03 ` [ptxdist] [PATCH] systemd: add upstream patch for CVE-2018-15688 Clemens Gruber

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox