Nettle from release Fido fails to build

Nettle from release Fido fails to build

[Leon Anavi]

Hi,

Yesterday I noticed that the build of recipe nettle 2.7.1 from release 
Fido fails:
https://gist.github.com/leon-anavi/dfd3afab567a9dc9fa2f

The build machine is with Ubuntu 14.04 (Trusty Tahr). I am build Poky 
with nettle for qemux86-64.

My investigation shows that nettle fails due to a couple of security 
fixes (CVE-2015-8804, CVE-2015-8803 and CVE-2015-8805) which have been 
applied to branch Fido recently:
https://git.yoctoproject.org/cgit/cgit.cgi/poky/tree/meta/recipes-support/nettle/nettle_2.7.1.bb?h=fido#n13

The same patches are present in Jethro but the versions of nettle in 
Jethro and Fido are different. The version in Fido is 2.7.1. Jethro has 
recipes for both 2.7.1 and 3.1.1. As far as I can see in Jethro the 
patches are applied only for version 3.1.1.Therefore in my opinion these 
patches are for a newer versions of nettle and they are not compatible 
with version 2.7.1 from release Fido.

Could you please have a look and let me know if I am doing something 
wrong or if this is a bug that can be fixed for release Fido?

Best regards, Leon

-- 
Leon Anavi
Software Engineer
konsulko.com

Re: Nettle from release Fido fails to build

[Burton, Ross]

[-- Attachment #1: Type: text/plain, Size: 355 bytes --]

On 11 March 2016 at 09:45, Leon Anavi <leon.anavi@konsulko.com> wrote:

>
> Yesterday I noticed that the build of recipe nettle 2.7.1 from release
> Fido fails:
> https://gist.github.com/leon-anavi/dfd3afab567a9dc9fa2f
>

Theres a patch from a few days ago on this list to fix the issue:
http://patchwork.openembedded.org/patch/117355/.

Ross

[-- Attachment #2: Type: text/html, Size: 936 bytes --]

Re: Nettle from release Fido fails to build

[Leon Anavi]

[-- Attachment #1: Type: text/plain, Size: 634 bytes --]

Hi Ross,

On 11.03.2016 11:50, Burton, Ross wrote:
>
> On 11 March 2016 at 09:45, Leon Anavi <leon.anavi@konsulko.com 
> <mailto:leon.anavi@konsulko.com>> wrote:
>
>
>     Yesterday I noticed that the build of recipe nettle 2.7.1 from
>     release Fido fails:
>     https://gist.github.com/leon-anavi/dfd3afab567a9dc9fa2f
>
>
> Theres a patch from a few days ago on this list to fix the issue: 
> http://patchwork.openembedded.org/patch/117355/.
>
OK, thank you for the feedback. I will wait for the fix in the Poky 
repository.

Best regards, Leon

> Ross

-- 
Leon Anavi
Software Engineer
konsulko.com


[-- Attachment #2: Type: text/html, Size: 2129 bytes --]

Re: Nettle from release Fido fails to build

[Burton, Ross]

[-- Attachment #1: Type: text/plain, Size: 266 bytes --]

On 11 March 2016 at 10:07, Leon Anavi <leon.anavi@konsulko.com> wrote:

> OK, thank you for the feedback. I will wait for the fix in the Poky
> repository.
>

Obviously you can apply the fix locally until it ends up in a release
branch.  Hooray git!

Ross

[-- Attachment #2: Type: text/html, Size: 665 bytes --]

Re: Nettle from release Fido fails to build

[Leon Anavi]

[-- Attachment #1: Type: text/plain, Size: 597 bytes --]

Hi Ross,

On 11.03.2016 12:20, Burton, Ross wrote:
>
> On 11 March 2016 at 10:07, Leon Anavi <leon.anavi@konsulko.com 
> <mailto:leon.anavi@konsulko.com>> wrote:
>
>     OK, thank you for the feedback. I will wait for the fix in the
>     Poky repository.
>
>
> Obviously you can apply the fix locally until it ends up in a release 
> branch.  Hooray git!
>
Yes, of course but in my particular case it will be more convenient just 
to use the commit prior the existing in Fido wrong patches for nettle.

Thanks, Leon
> Ross

-- 
Leon Anavi
Software Engineer
konsulko.com


[-- Attachment #2: Type: text/html, Size: 1851 bytes --]

Re: Nettle from release Fido fails to build

[Joshua G Lock]

On Fri, 2016-03-11 at 12:07 +0200, Leon Anavi wrote:
> On 11.03.2016 11:50, Burton, Ross wrote:
> > On 11 March 2016 at 09:45, Leon Anavi <leon.anavi@konsulko.com>
> > wrote:
> > > 
> > > Yesterday I noticed that the build of recipe nettle 2.7.1 from
> > > release Fido fails:
> > > https://gist.github.com/leon-anavi/dfd3afab567a9dc9fa2f
> > > 
> > Theres a patch from a few days ago on this list to fix the issue: h
> > ttp://patchwork.openembedded.org/patch/117355/.
> > 
>  OK, thank you for the feedback. I will wait for the fix in the Poky
> repository.

This fix has now been merged to the fido branch of the poky repository.

Regards,

Joshua

Re: Nettle from release Fido fails to build

[Leon Anavi]

Hi Joshua,

On 11.03.2016 15:40, Joshua G Lock wrote:
> On Fri, 2016-03-11 at 12:07 +0200, Leon Anavi wrote:
>> On 11.03.2016 11:50, Burton, Ross wrote:
>>> On 11 March 2016 at 09:45, Leon Anavi <leon.anavi@konsulko.com>
>>> wrote:
>>>> Yesterday I noticed that the build of recipe nettle 2.7.1 from
>>>> release Fido fails:
>>>> https://gist.github.com/leon-anavi/dfd3afab567a9dc9fa2f
>>>>
>>> Theres a patch from a few days ago on this list to fix the issue: h
>>> ttp://patchwork.openembedded.org/patch/117355/.
>>>
>>   OK, thank you for the feedback. I will wait for the fix in the Poky
>> repository.
> This fix has now been merged to the fido branch of the poky repository.

Thank you. I am already building my image with the head of branch fido 
from the poky repository.

Best regards, Leon

>
> Regards,
>
> Joshua

-- 
Leon Anavi
Software Engineer
konsulko.com