Dongsu Park
0be496912c
Merge pull request #119 from flatcar-linux/dongsu/sdk-pkgs-re2c-file
...
dev-util,sys-apps: update re2c, file
2020-10-23 15:06:58 +02:00
Dongsu Park
2c820da16e
Merge pull request #118 from flatcar-linux/dongsu/meson-gdbus
...
dev-util: update meson, gdbus-codegen
2020-10-23 15:06:11 +02:00
Dongsu Park
f8a27a086e
sys-apps/file: update to 5.39
...
Update sys-apps/file to 5.39 to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18218 .
2020-10-22 15:20:38 +02:00
Dongsu Park
5b8dbb7fb2
dev-util/re2c: update to 2.0.3
...
Update dev-util/re2c to 2.0.3 to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11958 .
2020-10-22 15:19:06 +02:00
Dongsu Park
c320d06f06
dev-util/gdbus-codegen: update to 2.64.5
...
Now that dev-libs/glib was updated to 2.64.5, we need to also update
dev-util/gdbus-codegen to 2.64.5.
Otherwise we would see strange slot conflicts like:
```
* Error: The above package list contains packages which cannot be
* installed at the same time on the same system.
(dev-libs/glib-2.64.5:2/2::portage-stable, ebuild scheduled for merge) pulled in by
>=dev-libs/glib-2.58.3:2 required by (dev-util/gdbus-codegen-2.58.3:0/0::portage-stable, binary scheduled for merge)
(dev-util/gdbus-codegen-2.58.3:0/0::portage-stable, binary scheduled for merge) pulled in by
dev-util/gdbus-codegen required by (coreos-base/hard-host-depends-0.0.1-r194:0/0::coreos, binary scheduled for merge)
```
2020-10-22 14:30:38 +02:00
Sayan Chowdhury
c6a6d5a685
dev-util/meson: Sync package with the upstream
...
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2020-10-22 14:30:38 +02:00
Dongsu Park
698a6c104d
dev-libs/libxml2: update to 2.9.10-r3
...
Update libxml2 to 2.9.10-r3, to multiple security issues in libxml2:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20388
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7595
See also https://security.gentoo.org/glsa/202010-04 .
2020-10-21 16:34:26 +02:00
Dongsu Park
6c98682dd6
sys-fs/cryptsetup: update to 2.3.2
...
Since cryptsetup 1.7.5 cannot be built with json-c 0.15,
we need to also update cryptsetup to 2.3.2.
2020-10-21 16:34:17 +02:00
Dongsu Park
1bc50f2cd2
eclass: sync cmake-multilib.eclass with Gentoo
...
Now that json-c 0.15 requires new definitions in cmake-multilib.eclass,
we need to sync cmake-multilib.eclass with upstream Gentoo.
2020-10-21 16:32:18 +02:00
Dongsu Park
2fbc9fb0b8
dev-libs/json-c: update 0.15
...
Update json-c to 0.15, to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12762 .
2020-10-21 16:32:18 +02:00
Dongsu Park
69e05d7dbc
dev-libs/libuv: update to 1.39.0
...
Update libuv to 1.39.0 to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8252 .
2020-10-21 16:32:10 +02:00
Dongsu Park
4d28d167f5
net-dns/c-ares: update to 1.61.1
...
Update net-dns/c-ares to 1.61.1, to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000381 .
2020-10-21 16:25:20 +02:00
Sayan Chowdhury
0bbfd9bc1e
app-arch/tar: Sync with upstream
...
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2020-10-20 05:45:10 +00:00
Krzesimir Nowak
1550782835
Merge pull request #112 from flatcar-linux/krnowak/dracut-update
...
Update dracut
2020-10-08 18:46:03 +02:00
Alban Crequy
3593d2251c
Merge pull request #111 from flatcar-linux/alban/update-seccomp
...
bump(sys-libs/libseccomp): sync with upstream
2020-10-02 19:27:26 +02:00
Krzesimir Nowak
654ebbf5dd
eclass: Pull in an eclass needed by a new dracut
2020-09-30 19:49:09 +02:00
Krzesimir Nowak
215d9bda8b
eclass: Sync systemd.eclass with upstream
2020-09-30 19:48:30 +02:00
Krzesimir Nowak
9a2855f189
sys-kernel/dracut: Sync with gentoo
2020-09-30 19:41:18 +02:00
Alban Crequy
8dc4b6702d
bump(sys-libs/libseccomp): sync with upstream
...
Change python check to python3_6 so it builds in Flatcar.
Update checksums
2020-09-26 14:36:19 +02:00
Dongsu Park
4dc4d60108
dev-lang/tcl: add tcl for SDK dependencies
...
Since sqlite 3.32 or newer requires dev-lang/tcl to be available in
the Flatcar SDK by default, we should add dev-lang/tcl into the SDK.
2020-09-25 17:30:35 +02:00
Dongsu Park
f710c0d0c8
sys-apps/makedev: bring back the package for bootstrap_sdk
...
The bootstrap_sdk stage still requires `sys-apps/makedev` to be
available, as listed in `profiles/default/linux/packages.build`.
We need to bring it back to make the SDK build work again.
This reverts commit df8159f565972eb31455ff5e4cbfba8c4a12bb52.
2020-09-25 16:37:39 +02:00
Dongsu Park
44d3e1f36a
sys-devel/bin86: remove unnecessary package
...
Remove unnecessary package sys-apps/bin86.
We can do so because sys-devel/dev86 is now gone.
2020-09-25 10:36:08 +02:00
Dongsu Park
94a78bda6c
sys-devel/dev86: remove unnecessary package
...
Remove unnecessary package sys-apps/dev86.
We can do so because sys-firmware/vgabios is now gone.
2020-09-25 10:36:08 +02:00
Dongsu Park
c8219909ce
sys-firmware/vgabios: remove unnecessary package
...
Remove unnecessary package sys-firmware/vgabios.
2020-09-25 10:36:08 +02:00
Dongsu Park
292e92707f
sys-apps/makedev: remove unnecessary package
...
Remove unnecessary package sys-apps/makedev.
2020-09-25 10:36:08 +02:00
Dongsu Park
1a3e753bdc
dev-python/mox: remove unnecessary package
...
Remove unnecessary package dev-python/mox.
2020-09-25 10:36:08 +02:00
Dongsu Park
7c7e4697e0
dev-python/lockfile: remove unnecessary package
...
Remove unnecessary package dev-python/lockfile.
2020-09-25 10:36:08 +02:00
Dongsu Park
5da94c7ba1
dev-python/greenlet: remove unnecessary package
...
Remove unnecessary package dev-python/greenlet.
2020-09-25 10:36:08 +02:00
Dongsu Park
1490a39eaa
dev-python/gevent: remove unnecessary package
...
Remove unnecessary package dev-python/gevent.
2020-09-25 10:36:08 +02:00
Dongsu Park
736b536417
dev-libs/libtasn1: remove unnecessary package
...
Remove unnecessary package dev-libs/libtasn1.
2020-09-25 10:36:08 +02:00
Dongsu Park
0e08a9713f
dev-libs/jemalloc: remove unnecessary package
...
Remove unnecessary package dev-libs/jemalloc.
2020-09-25 10:36:08 +02:00
Dongsu Park
57310a1b1d
dev-libs/apr: remove unnecessary package
...
Remove unnecessary package dev-libs/apr.
We can do so because dev-libs/apr-util, net-libs/serf is now gone.
2020-09-25 10:36:08 +02:00
Dongsu Park
0a2827ee69
dev-libs/apr-util: remove unnecessary package
...
Remove unnecessary package dev-libs/apr-util.
We can do so because net-libs/serf is now gone.
2020-09-25 10:36:08 +02:00
Dongsu Park
2f9f7da8aa
net-libs/serf: remove unnecessary package
...
Remove unnecessary package net-libs/serf.
2020-09-25 10:36:08 +02:00
Dongsu Park
ad2352b192
dev-db/sqlite: bring back sqlite 3.31.1 for SDK
...
To make the SDK build work again, we need to bring back dev-db/sqlite
3.31.1 in portage-stable. It is not enough to have it in coreos-overlay.
This reverts commit 4a7a4e3d272812963c3cd21431d1849ca9df11e4.
2020-09-23 16:36:55 +02:00
Dongsu Park
89553c6977
Merge pull request #107 from flatcar-linux/dongsu/sqlite-3.32.3
...
dev-db/sqlite: move sqlite to coreos-overlay
2020-09-23 14:39:41 +02:00
Dongsu Park
9e6d56ed1b
dev-db/sqlite: move sqlite to coreos-overlay
...
Move dev-db/sqlite to coreos-overlay to resolve security issues, as well
as to keep non-full archive ebuilds.
2020-09-18 17:47:40 +02:00
Dongsu Park
6916f04de8
net-libs/libpcap: update to 1.9.1
...
Update net-libs/libpcap to 1.9.1, to address security issue
CVE-2019-15163, an issue of allowing attackers to cause a denial of
service (NULL pointer dereference and daemon crash) if a crypt() call
fails.
2020-09-17 13:41:47 +02:00
Dongsu Park
a9a8ee6efc
net-analyzer/tcpdump: update to 4.9.3
...
Update tcpdump to 4.9.3, to address security issue CVE-2018-10103,
mishandling the printing of SMB data.
2020-09-17 13:41:45 +02:00
Dongsu Park
5490b0439c
net-misc/rsync: update to 3.2.3
...
Update rsync to 3.2.3, actually to update zlib bundled in rsync.
It is to address security issue CVE-2016-9841, an issue of allowing
context-dependent attackers to have unspecified impact by leveraging
improper pointer arithmetic.
2020-09-17 13:41:42 +02:00
Dongsu Park
9384fe3321
dev-libs/libbsd: update to 0.10.0
...
Update libbsd to 0.10.0, to address security issue CVE-2019-20367,
an out-of-bounds read during a comparison for a symbol name from the
string table.
2020-09-17 13:41:23 +02:00
Dongsu Park
4c9ee1d6e8
app-misc/jq: update to 1.6-r3
...
Update app-misc/jq to 1.6-r3, to address security issue CVE-2015-8863.
It is mainly to fix off-by-one error in the tokenadd function. It allows
remote attackers to cause a denial of service (crash) via a long
JSON-encoded number, which triggers a heap-based buffer overflow.
2020-09-17 13:41:21 +02:00
Dongsu Park
f4ba9b110c
.github: Improve body text of PR for virtual/rust
...
Improve body text of each PR for `virtual/rust`, by mentioning that
it should be merged together with its paired PR in coreos-overlay.
Explicitly name `virtual/rust` instead of `Cargo`, because there is
no more ebuild for `cargo`.
Rename the dispatched event-type name to `rust-pull-request-main`, as
`cargo` has already disappeared.
Make the repository-dispatch action receive additional client-payload with
a field `coreos-overlay-pull-request-number` sent by the corresponding PR
in coreos-overlay. The PR number is then used for adding a link in the body
text, for pointing back to the PR in coreos-overlay.
2020-09-09 11:56:52 +02:00
Flatcar Buildbot
2cb1b39e52
Upgrade Cargo in main from 1.44.1 to 1.46.0
2020-09-01 07:31:46 +00:00
Thilo Fromm
be6d21ef38
net-firewall/ipset: update to ipset-7.6
...
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-08-27 18:58:28 +02:00
Krzesimir Nowak
31bbaa6546
Merge pull request #99 from flatcar-linux/krnowak/fix-rules
...
sys-fs/mdadm: Drop it, temporarily
2020-08-27 16:14:03 +02:00
Thilo Fromm
5ede2a63eb
Merge pull request #100 from flatcar-linux/t-lo/iproute2-5.8.0-with-elf-support
...
sys-apps/iproute2: bump to 5.8.0, add ELF support
2020-08-27 13:52:25 +02:00
Thilo Fromm
9707103932
sys-apps/iproute2: bump to 5.7.0.xx, add ELF support
...
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-08-27 09:31:20 +02:00
Krzesimir Nowak
87a61e40a0
sys-fs/mdadm: Drop it, temporarily
...
We are going to have mdadm in coreos-overlay. It will contain an extra
patch, so it can't be a part of portage-stable.
2020-08-25 11:25:21 +02:00
Kai Lüke
91fbd929a7
net-dns/bind: Drop old ebuild file to silence warning
...
The old ebuild file has a syntax issue and is missing a patch file.
2020-08-21 12:04:33 +02:00