Bump buidlroot version to 2018.02.6
This commit is contained in:
@@ -0,0 +1,46 @@
|
||||
From ae65651eab053fc6dc4590dbb863a268215c1fc5 Mon Sep 17 00:00:00 2001
|
||||
From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= <ppisar@redhat.com>
|
||||
Date: Fri, 8 Jun 2018 11:45:40 +0100
|
||||
Subject: [PATCH] [PATCH] Remove existing files before overwriting them
|
||||
|
||||
Archive should extract only the latest same-named entry.
|
||||
Extracted regular file should not be writtent into existing block
|
||||
device (or any other one).
|
||||
|
||||
https://rt.cpan.org/Ticket/Display.html?id=125523
|
||||
|
||||
[Peter: rewrite path to match perl tarball with sed 's|\(lib/Archive\)|cpan/Archive-Tar/\1|g']
|
||||
Signed-off-by: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
|
||||
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
|
||||
---
|
||||
cpan/Archive-Tar/lib/Archive/Tar.pm | 14 ++++++++++++++
|
||||
1 file changed, 14 insertions(+)
|
||||
|
||||
diff --git a/cpan/Archive-Tar/lib/Archive/Tar.pm b/cpan/Archive-Tar/lib/Archive/Tar.pm
|
||||
index 6244369..a83975f 100644
|
||||
--- a/cpan/Archive-Tar/lib/Archive/Tar.pm
|
||||
+++ b/cpan/Archive-Tar/lib/Archive/Tar.pm
|
||||
@@ -845,6 +845,20 @@ sub _extract_file {
|
||||
return;
|
||||
}
|
||||
|
||||
+ ### If a file system already contains a block device with the same name as
|
||||
+ ### the being extracted regular file, we would write the file's content
|
||||
+ ### to the block device. So remove the existing file (block device) now.
|
||||
+ ### If an archive contains multiple same-named entries, the last one
|
||||
+ ### should replace the previous ones. So remove the old file now.
|
||||
+ ### If the old entry is a symlink to a file outside of the CWD, the new
|
||||
+ ### entry would create a file there. This is CVE-2018-12015
|
||||
+ ### <https://rt.cpan.org/Ticket/Display.html?id=125523>.
|
||||
+ if (-l $full || -e _) {
|
||||
+ if (!unlink $full) {
|
||||
+ $self->_error( qq[Could not remove old file '$full': $!] );
|
||||
+ return;
|
||||
+ }
|
||||
+ }
|
||||
if( length $entry->type && $entry->is_file ) {
|
||||
my $fh = IO::File->new;
|
||||
$fh->open( $full, '>' ) or (
|
||||
--
|
||||
2.11.0
|
||||
|
||||
@@ -1,20 +0,0 @@
|
||||
fix static build with gdbm + gettext
|
||||
|
||||
see doc http://perldoc.perl.org/ExtUtils/MakeMaker.html#LIBS
|
||||
|
||||
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
|
||||
|
||||
index: b/ext/GDBM_File/Makefile.PL
|
||||
===================================================================
|
||||
--- a/ext/GDBM_File/Makefile.PL
|
||||
+++ b/ext/GDBM_File/Makefile.PL
|
||||
@@ -2,7 +2,7 @@ use ExtUtils::MakeMaker;
|
||||
use ExtUtils::Constant 0.11 'WriteConstants';
|
||||
WriteMakefile(
|
||||
NAME => 'GDBM_File',
|
||||
- LIBS => ["-lgdbm", "-ldbm"],
|
||||
+ LIBS => ["-lgdbm -lintl", "-lgdbm", "-ldbm"],
|
||||
XSPROTOARG => '-noprototypes', # XXX remove later?
|
||||
VERSION_FROM => 'GDBM_File.pm',
|
||||
realclean => {FILES=> 'const-c.inc const-xs.inc'},
|
||||
|
||||
@@ -3,8 +3,8 @@ config BR2_PACKAGE_PERL
|
||||
depends on BR2_USE_MMU # fork()
|
||||
help
|
||||
Larry Wall's Practical Extraction and Report Language
|
||||
An interpreted scripting language, known among some as "Unix's Swiss
|
||||
Army Chainsaw".
|
||||
An interpreted scripting language, known among some as
|
||||
"Unix's Swiss Army Chainsaw".
|
||||
|
||||
http://www.perl.org/
|
||||
|
||||
@@ -13,8 +13,8 @@ if BR2_PACKAGE_PERL
|
||||
config BR2_PACKAGE_PERL_MODULES
|
||||
string "custom module selection"
|
||||
help
|
||||
List of space-separated perl modules (without .pm) to copy to the
|
||||
rootfs.
|
||||
List of space-separated perl modules (without .pm) to copy
|
||||
to the rootfs.
|
||||
|
||||
Examples: constant Getopt/Std Time/Local
|
||||
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
# Hashes from: http://www.cpan.org/src/5.0/perl-5.24.1.tar.xz.{md5,sha1,sha256}.txt
|
||||
md5 af6a84c7c3e2b8b269c105a5db2f6d53 perl-5.24.1.tar.xz
|
||||
sha1 5bec25d8821b81a5939ee220997f4c8ab1c13e31 perl-5.24.1.tar.xz
|
||||
sha256 03a77bac4505c270f1890ece75afc7d4b555090b41aa41ea478747e23b2afb3f perl-5.24.1.tar.xz
|
||||
# Hashes from: http://www.cpan.org/src/5.0/perl-5.26.2.tar.xz.{md5,sha1,sha256}.txt
|
||||
md5 1fa1b53eeff76aa37b17bfc9b2771671 perl-5.26.2.tar.xz
|
||||
sha1 bfa5c7921ed7bf5e035dbf2f7ff81367b81e372c perl-5.26.2.tar.xz
|
||||
sha256 0f8c0fb1b0db4681adb75c3ba0dd77a0472b1b359b9e80efd79fc27b4352132c perl-5.26.2.tar.xz
|
||||
|
||||
# Hashes from: http://github.com/arsv/perl-cross/releases/download/1.1.3/perl-cross-1.1.3.hash
|
||||
sha256 181b24ff71815fb2c8065e6ea139d106796eee0964aebfd8081f0b7f69e0696d perl-cross-1.1.3.tar.gz
|
||||
# Hashes from: http://github.com/arsv/perl-cross/releases/download/1.1.9/perl-cross-1.1.9.hash
|
||||
sha256 0bbb450e48d07e7fdf867d578b1780ac8f0e8dc284d52301dac4d763b42f6041 perl-cross-1.1.9.tar.gz
|
||||
|
||||
@@ -4,16 +4,16 @@
|
||||
#
|
||||
################################################################################
|
||||
|
||||
# When updating the version here, also update support/scripts/scancpan
|
||||
PERL_VERSION_MAJOR = 24
|
||||
PERL_VERSION = 5.$(PERL_VERSION_MAJOR).1
|
||||
# When updating the version here, also update utils/scancpan
|
||||
PERL_VERSION_MAJOR = 26
|
||||
PERL_VERSION = 5.$(PERL_VERSION_MAJOR).2
|
||||
PERL_SITE = http://www.cpan.org/src/5.0
|
||||
PERL_SOURCE = perl-$(PERL_VERSION).tar.xz
|
||||
PERL_LICENSE = Artistic or GPLv1+
|
||||
PERL_LICENSE = Artistic or GPL-1.0+
|
||||
PERL_LICENSE_FILES = Artistic Copying README
|
||||
PERL_INSTALL_STAGING = YES
|
||||
|
||||
PERL_CROSS_VERSION = 1.1.3
|
||||
PERL_CROSS_VERSION = 1.1.9
|
||||
# DO NOT refactor with the github helper (the result is not the same)
|
||||
PERL_CROSS_SITE = https://github.com/arsv/perl-cross/releases/download/$(PERL_CROSS_VERSION)
|
||||
PERL_CROSS_SOURCE = perl-cross-$(PERL_CROSS_VERSION).tar.gz
|
||||
@@ -91,7 +91,7 @@ endef
|
||||
|
||||
HOST_PERL_CONF_OPTS = \
|
||||
-des \
|
||||
-Dprefix="$(HOST_DIR)/usr" \
|
||||
-Dprefix="$(HOST_DIR)" \
|
||||
-Dcc="$(HOSTCC)"
|
||||
|
||||
define HOST_PERL_CONFIGURE_CMDS
|
||||
|
||||
Reference in New Issue
Block a user