From: Mark Hatle <mark.hatle@windriver.com>
To: <openembedded-core@lists.openembedded.org>
Subject: [PATCH 0/6 v5] Upgrade RPM to 5.4.16 (CVE HEAD)
Date: Tue, 8 Mar 2016 17:09:10 -0600 [thread overview]
Message-ID: <cover.1457478239.git.mark.hatle@windriver.com> (raw)
v5:
* Squash patch rpm: fix races over rpmqv (from rburton)
* Fix libitm linkage issue (update to the rpm-gnu-atomic.patch)
* Fix nativesdk python rpm module dependency error
Only patch 1 has been affected. 2-6 remain the same. Patch 7 and 8
are no longer needed.
v4:
* Move large patches to externally downloaded
- Included in a commit to be testable, but that commit should not be merged
* Disable default stack-protector for popt
* Fix AddErase API breakage
* Break popt header dependency
* Allow popt to be built internal (does not yet work, note caveat in recipe)
* Update 'security_flags.inc' to know about RPM
* rpmresolve remove unnecessary -lpopt
V3:
* Update rpm-db5-or-db6.patch to remove potential host contamination
* Update rpm-disable-auto-stack-protector.patch to only disable the stack protector
* Add new patch: rpm-atomic-ops.patch
- Disable atomic operations in bson when the architecture does not support them
* Add new patch: rpm-gnu-atomic.patch
- Dynamically detect and disable when -fgnu-tm/libitm support is not available
* Add new patch: rpm-tagname-type.patch and rpm-python-tagname.patch
- Fix rpm-python legacy API regressions
* Add new patch: rpm-disable-blaketest.patch
- Disable building the blake test apps, they appear to have dep issues in large
parallel builds.
* Update db-6.0.30 to make it clear that when it is updated, to also update RPM5.
V2:
Fixed three issues
- Added Apache 2.0 license for specific mongodb code
- Switch SSE usage dynamically in rpmio/keccak.c
See rpm-keccak-sse-intrin.patch
- Add support for architectures that do not support sync_add_and_fetch_8
See rpm-atomic-ops.patch
All of those changes are made in patch 1/3.
This has been built for all of the qemu* BSPs.
V1:
There is not yet an official RPM 5.4.16 release, however one will be coming
soon. Until then, 4 distinct patches are used to upgrade RPM 5.4.15 to
5.4.16. These patches are part of the commit (compressed w/ .xz). However
I am not sending them as part of the email as it's not very interesting
to review base64. :P
Many of the OE patches have been sent to the RPM 5 maintainer, and may be
part of the official 5.4.16 release. When that release happens I expect a
simple rebase to remove the unnecessary patches.
The following changes since commit 0d02159c8d66bb136f7da2c10fda7d1a57f40cec:
image.bbclass: fix incomplete .rootfs customization (2016-03-07 22:01:16 +0000)
are available in the git repository at:
git://git.openembedded.org/openembedded-core-contrib mhatle/rpm-5.4.16
http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=mhatle/rpm-5.4.16
Mark Hatle (6):
rpm: Uprev to rpm-5.4.16 (pre) and rpm-5.4+cvs to current CVS head
security_flags.inc: Special flags are needed for RPM
rpm: Enable specific crypto and digest settings via variables
rpm: A number of the patches have been submitted upstream
rpmresolve: It is not necessary to manually specify -lpopt
db: remove the NO_UPDATE_REASON and replace it a comment about RPM
meta/conf/distro/include/security_flags.inc | 2 +
meta/lib/oe/package_manager.py | 14 +-
.../rpm/rpm/0001-define-EM_AARCH64.patch | 2 +-
...arseArgvString-to-parse-the-_gpg_check_pa.patch | 2 +-
meta/recipes-devtools/rpm/rpm/debugedit-segv.patch | 48 +-
...debugedit-valid-file-to-fix-segment-fault.patch | 2 +-
.../rpm/rpm/fstack-protector-configure-check.patch | 21 -
.../rpm/rpm/header-include-fix.patch | 12 +-
.../rpm/rpm/makefile-am-exec-hook.patch | 2 +-
.../rpm/popt-disable-auto-stack-protector.patch | 27 +
.../rpm/rpm/python-rpm-rpmsense.patch | 32 +-
meta/recipes-devtools/rpm/rpm/rpm-atomic-ops.patch | 73 ++
meta/recipes-devtools/rpm/rpm/rpm-canonarch.patch | 2 +-
meta/recipes-devtools/rpm/rpm/rpm-db5-or-db6.patch | 43 +-
meta/recipes-devtools/rpm/rpm/rpm-db60.patch | 56 +
.../rpm/rpm/rpm-disable-Wno-override-init.patch | 32 -
.../rpm/rpm/rpm-disable-auto-stack-protector.patch | 24 +
.../rpm/rpm/rpm-disable-blaketest.patch | 28 +
.../rpm/rpm/rpm-fix-logio-cp.patch | 2 +-
.../rpm/rpm/rpm-fix-parseEmbedded.patch | 27 +
meta/recipes-devtools/rpm/rpm/rpm-gnu-atomic.patch | 64 ++
.../rpm/rpm/rpm-hardlink-segfault-fix.patch | 2 +-
.../rpm/rpm/rpm-keccak-sse-intrin.patch | 27 +
...ction.c-fix-file-conflicts-for-mips64-N32.patch | 2 +-
meta/recipes-devtools/rpm/rpm/rpm-libsql-fix.patch | 2 +-
.../rpm/rpm/rpm-lsb-compatibility.patch | 2 +-
.../rpm/rpm/rpm-lua-fix-print.patch | 104 --
...rpm-macros.in-disable-external-key-server.patch | 16 +-
.../rpm/rpm/rpm-mongodb-sasl.patch | 69 ++
meta/recipes-devtools/rpm/rpm/rpm-no-loopmsg.patch | 2 +-
...b-before-verifyscript-to-avoid-null-point.patch | 2 +-
.../rpm/rpm/rpm-packageorigin.patch | 2 +-
.../rpm/rpm/rpm-payload-use-hashed-inode.patch | 22 +-
.../rpm/rpm/rpm-pkgconfigdeps.patch | 10 +-
.../rpm/rpm/rpm-platform-file-fix.patch | 2 +-
meta/recipes-devtools/rpm/rpm/rpm-platform.patch | 2 +-
meta/recipes-devtools/rpm/rpm/rpm-platform2.patch | 4 +-
meta/recipes-devtools/rpm/rpm/rpm-py-init.patch | 16 +-
.../rpm/rpm/rpm-python-AddErase.patch | 35 +
.../rpm/rpm/rpm-python-restore-origin.patch | 49 +
.../rpm/rpm/rpm-python-tagname.patch | 24 +
.../rpm/rpm/rpm-remove-sykcparse-decl.patch | 14 -
meta/recipes-devtools/rpm/rpm/rpm-resolvedep.patch | 2 +-
.../rpm/rpm/rpm-rpmdb-grammar.patch | 124 +++
.../rpm/rpm/rpm-rpmfc.c-fix-for-N32-MIPS64.patch | 2 +-
.../rpm/rpm/rpm-rpmio-headers.patch | 19 +
meta/recipes-devtools/rpm/rpm/rpm-rpmpgp-fix.patch | 67 --
.../recipes-devtools/rpm/rpm/rpm-rpmpgp-popt.patch | 26 +
.../rpm/rpm/rpm-scriptletexechelper.patch | 29 +-
.../rpm/rpm/rpm-syck-fix-gram.patch | 1081 ++++++++++++++++++++
.../rpm-tag-generate-endian-conversion-fix.patch | 2 +-
.../rpm/rpm/rpm-tagname-type.patch | 25 +
.../rpm/rpm/rpm-tools-mtree-LDFLAGS.patch | 2 +-
meta/recipes-devtools/rpm/rpm/rpmatch.patch | 32 +-
.../recipes-devtools/rpm/rpm/rpmqv_cc_b_gone.patch | 36 +-
meta/recipes-devtools/rpm/rpm/uclibc-support.patch | 38 +-
...broken-logic-for-ghost-avoidance-Mark-Hat.patch | 38 -
meta/recipes-devtools/rpm/rpm_5.4+cvs.bb | 302 +++++-
.../rpm/{rpm_5.4.14.bb => rpm_5.4.16.bb} | 219 +++-
meta/recipes-devtools/rpm/rpmresolve_1.0.bb | 2 +-
meta/recipes-support/db/db_6.0.30.bb | 2 +-
61 files changed, 2403 insertions(+), 568 deletions(-)
delete mode 100644 meta/recipes-devtools/rpm/rpm/fstack-protector-configure-check.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/popt-disable-auto-stack-protector.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-atomic-ops.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-db60.patch
delete mode 100644 meta/recipes-devtools/rpm/rpm/rpm-disable-Wno-override-init.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-disable-auto-stack-protector.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-disable-blaketest.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-fix-parseEmbedded.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-gnu-atomic.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-keccak-sse-intrin.patch
delete mode 100644 meta/recipes-devtools/rpm/rpm/rpm-lua-fix-print.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-mongodb-sasl.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-python-AddErase.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-python-restore-origin.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-python-tagname.patch
delete mode 100644 meta/recipes-devtools/rpm/rpm/rpm-remove-sykcparse-decl.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-rpmdb-grammar.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-rpmio-headers.patch
delete mode 100644 meta/recipes-devtools/rpm/rpm/rpm-rpmpgp-fix.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-rpmpgp-popt.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-syck-fix-gram.patch
create mode 100644 meta/recipes-devtools/rpm/rpm/rpm-tagname-type.patch
delete mode 100644 meta/recipes-devtools/rpm/rpm/verify-fix-broken-logic-for-ghost-avoidance-Mark-Hat.patch
rename meta/recipes-devtools/rpm/{rpm_5.4.14.bb => rpm_5.4.16.bb} (78%)
--
2.5.0
next reply other threads:[~2016-03-08 23:09 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-03-08 23:09 Mark Hatle [this message]
2016-03-08 23:09 ` [PATCH 1/6 v5] rpm: Uprev to rpm-5.4.16 (pre) and rpm-5.4+cvs to current CVS head Mark Hatle
-- strict thread matches above, loose matches on Subject: below --
2016-03-07 19:19 [PATCH 0/6 v5] Upgrade RPM to 5.4.16 (CVE HEAD) Mark Hatle
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1457478239.git.mark.hatle@windriver.com \
--to=mark.hatle@windriver.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.