Github messages for voidlinux
 help / color / mirror / Atom feed
From: dataCobra <dataCobra@users.noreply.github.com>
To: ml@inbox.vuxu.org
Subject: [PR PATCH] schroot: update to 1.6.10-12+deb11u1.
Date: Fri, 19 Aug 2022 10:12:38 +0200	[thread overview]
Message-ID: <gh-mailinglist-notifications-41a7ca26-5023-4802-975b-f1789d68868e-void-packages-38779@inbox.vuxu.org> (raw)

[-- Attachment #1: Type: text/plain, Size: 567 bytes --]

There is a new pull request by dataCobra against master on the void-packages repository

https://github.com/dataCobra/void-packages schroot_1.6.10-12_CVE
https://github.com/void-linux/void-packages/pull/38779

schroot: update to 1.6.10-12+deb11u1.
**Fix CVE-2022-2787 and update to Debian Bullseye package**

#### Testing the changes
- I tested the changes in this PR: **briefly**

#### Local build testing
- I built this PR locally for my native architecture, (x86_64)

A patch file from https://github.com/void-linux/void-packages/pull/38779.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-schroot_1.6.10-12_CVE-38779.patch --]
[-- Type: text/x-diff, Size: 2113 bytes --]

From 65d35e16cb0932e2c3a26e8ea1271c111be190cf Mon Sep 17 00:00:00 2001
From: dataCobra <datacobra@thinkbot.de>
Date: Fri, 19 Aug 2022 10:08:42 +0200
Subject: [PATCH] schroot: update to 1.6.10-12+deb11u1.

Fix CVE-2022-2787 and update to Debian Bullseye package
---
 srcpkgs/schroot/template | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/srcpkgs/schroot/template b/srcpkgs/schroot/template
index 85416dee5e9c..ee1e4def3170 100644
--- a/srcpkgs/schroot/template
+++ b/srcpkgs/schroot/template
@@ -2,9 +2,8 @@
 pkgname=schroot
 reverts="1.7.2_9"
 version=1.6.10
-revision=11
-_debian_version=3+deb9u1
-build_pie=yes
+revision=12
+_debian_version=12+deb11u1
 build_style=gnu-configure
 configure_args="
 	--enable-dchroot
@@ -41,22 +40,23 @@ make_dirs="
 	/var/lib/schroot/session 0755 root root
 	/var/lib/schroot/mount 0755 root root
 	/etc/schroot/chroot.d 0755 root root"
-hostmakedepends="cmake pkg-config automake libtool gettext xz"
+hostmakedepends="cmake pkg-config automake autoconf libtool gettext xz"
 makedepends="boost-devel pam-devel lockdev-devel libuuid-devel e2fsprogs-devel gettext-devel
  libcppunit-devel"
 short_desc="Allows users to execute commands in different chroots"
-maintainer="Andrea Brancaleoni <miwaxe@gmail.com>"
-license="GPL-3"
+maintainer="Orphaned <orphan@voidlinux.org>"
+license="GPL-3.0-only"
 homepage="https://wiki.debian.org/Schroot"
 distfiles="
 ${DEBIAN_SITE}/main/s/${pkgname}/${pkgname}_${version}.orig.tar.xz
-${DEBIAN_SITE}/main/s/${pkgname}/${pkgname}_${version}-${_debian_version}.debian.tar.xz"
+http://security.debian.org/debian-security/pool/main/s/${pkgname}/${pkgname}_${version}-${_debian_version}.debian.tar.xz"
 checksum="
 3ce8dfd9cb97b099e4b6d4ccec421d6cc8c9ef84574681e928a12badb5643d0b
-56bc82fc8ae7f6ca7eef506ccc1dca1211b2c84d83efc50d24670b8bdb9ea8bb"
+7bd4e0c2709979362c86a86c10d2b23d290d26e1a2d301a602e829327f483ec1"
 nocross=yes
 
 pre_configure() {
+	sed -i '/zfs-snapshot-support.patch/d' ../debian/patches/series
 	cat ../debian/patches/series | while read p; do
 		patch -p1 -i ../debian/patches/$p
 	done

             reply	other threads:[~2022-08-19  8:12 UTC|newest]

Thread overview: 32+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-08-19  8:12 dataCobra [this message]
2022-08-19  8:20 ` schroot: update to 1.6.10-12+deb11u1. CVE-2022-2787 dataCobra
2022-08-19  8:22 ` dataCobra
2022-08-19  8:25 ` dataCobra
2022-08-19 14:17 ` [PR REVIEW] " classabbyamp
2022-08-19 14:17 ` classabbyamp
2022-08-19 17:36 ` sgn
2022-08-19 17:46 ` sgn
2022-08-19 17:47 ` dataCobra
2022-08-19 17:48 ` dataCobra
2022-08-19 17:50 ` dataCobra
2022-08-20  8:18 ` dataCobra
2022-08-20  8:20 ` thypon
2022-08-20  8:26 ` [PR PATCH] [Updated] " dataCobra
2022-08-20  8:31 ` dataCobra
2022-08-20  8:34 ` [PR REVIEW] " dataCobra
2022-08-20  8:38 ` dataCobra
2022-08-20  8:38 ` dataCobra
2022-08-20  8:40 ` sgn
2022-08-20  8:41 ` sgn
2022-08-20  8:47 ` [PR PATCH] [Updated] " dataCobra
2022-08-20  8:53 ` dataCobra
2022-08-20  8:54 ` sgn
2022-08-20  8:55 ` thypon
2022-08-20  8:58 ` sgn
2022-08-20  8:59 ` dataCobra
2022-08-20  8:59 ` dataCobra
2022-08-20  8:59 ` dataCobra
2022-08-20  9:00 ` thypon
2022-08-20  9:12 ` sgn
2022-08-21 11:31 ` dataCobra
2022-08-21 11:57 ` [PR PATCH] [Merged]: " sgn

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=gh-mailinglist-notifications-41a7ca26-5023-4802-975b-f1789d68868e-void-packages-38779@inbox.vuxu.org \
    --to=datacobra@users.noreply.github.com \
    --cc=ml@inbox.vuxu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).