mirror of
https://github.com/xcat2/xcat-dep.git
synced 2026-10-18 01:30:32 +00:00
fix(xcat-dep): openEuler ppc64le ships Net::DNS 1.40 with known CVEs
The openeuler-24.03-ppc64le catalog pins perl-Net-DNS-1.40-1.oe2403 from openEuler 24.03 LTS GA as a publisher input. That release has CVE-2026-64193 and CVE-2026-64194. The GA srpm carries no fix, and load_inputs accepts only GA rpms as publisher inputs. Build perl-Net-DNS for this target from perl-Net-DNS/Net-DNS.spec, the 1.57 release that rocky-10-riscv64-xcat already builds. The catalog now declares perl-Net-DNS as an owner, load_inputs allows that owner, and the manifest pins 1.57. The spec BuildRequires all resolve from the openEuler 24.03 LTS OS repository. Signed-off-by: Daniel Hilst <392820+dhilst@users.noreply.github.com>
This commit is contained in:
@@ -80,7 +80,7 @@ sub load_inputs {
|
||||
if ($type eq 'owner') {
|
||||
die "Unsupported native build owner '$name'\n" unless grep { $_ eq $name }
|
||||
qw(goconserver grub2-xcat ipmitool-xcat syslinux-xcat xnba-undi xCAT-genesis-base
|
||||
perl-Crypt-Rijndael perl-Crypt-SSLeay perl-HTTP-Async perl-IO-Stty perl-Net-HTTPS-NB perl-Net-Telnet);
|
||||
perl-Crypt-Rijndael perl-Crypt-SSLeay perl-HTTP-Async perl-IO-Stty perl-Net-DNS perl-Net-HTTPS-NB perl-Net-Telnet);
|
||||
}
|
||||
if ($type ne 'publisher') {
|
||||
my $uid = $type eq 'owner' && ($name eq 'xnba-undi' || $name eq 'xCAT-genesis-base') ? 0 : 1000;
|
||||
|
||||
@@ -627,17 +627,6 @@
|
||||
"needs": [],
|
||||
"runtime": false
|
||||
},
|
||||
{
|
||||
"name": "perl-Net-DNS",
|
||||
"type": "publisher",
|
||||
"url": "https://repo.openeuler.org/openEuler-24.03-LTS/everything/x86_64/Packages/perl-Net-DNS-1.40-1.oe2403.noarch.rpm",
|
||||
"sha256": "c6d9932ccfaae2e515635b00204e86b5121516f5693d4fb345ae0d979bfbde23",
|
||||
"outputs": [
|
||||
"perl-Net-DNS"
|
||||
],
|
||||
"needs": [],
|
||||
"runtime": true
|
||||
},
|
||||
{
|
||||
"name": "perl-Package-Generator",
|
||||
"type": "publisher",
|
||||
@@ -1035,6 +1024,17 @@
|
||||
],
|
||||
"build_uid": 1000
|
||||
},
|
||||
{
|
||||
"name": "perl-Net-DNS",
|
||||
"type": "owner",
|
||||
"outputs": [
|
||||
"perl-Net-DNS"
|
||||
],
|
||||
"needs": [
|
||||
"procenv"
|
||||
],
|
||||
"build_uid": 1000
|
||||
},
|
||||
{
|
||||
"name": "ipmitool-xcat",
|
||||
"type": "owner",
|
||||
|
||||
@@ -321,7 +321,7 @@ perl-Expect=1.35
|
||||
perl-HTML-Form=6.11
|
||||
perl-LWP-Protocol-https=6.10
|
||||
perl-Mail-Sender=0.903
|
||||
perl-Net-DNS=1.40
|
||||
perl-Net-DNS=1.57
|
||||
perl-DBD-Pg=3.18.0
|
||||
|
||||
# [common] is NOT a build target. It describes the SHARED repository the OpenEmbedded Genesis
|
||||
|
||||
Reference in New Issue
Block a user