2
0
mirror of https://github.com/xcat2/xcat-dep.git synced 2026-10-18 01:30:32 +00:00

fix(xcat-dep): openEuler ppc64le ships Net::DNS 1.40 with known CVEs

The openeuler-24.03-ppc64le catalog pins perl-Net-DNS-1.40-1.oe2403
from openEuler 24.03 LTS GA as a publisher input. That release has
CVE-2026-64193 and CVE-2026-64194. The GA srpm carries no fix, and
load_inputs accepts only GA rpms as publisher inputs.

Build perl-Net-DNS for this target from perl-Net-DNS/Net-DNS.spec,
the 1.57 release that rocky-10-riscv64-xcat already builds. The
catalog now declares perl-Net-DNS as an owner, load_inputs allows that
owner, and the manifest pins 1.57. The spec BuildRequires all resolve
from the openEuler 24.03 LTS OS repository.

Signed-off-by: Daniel Hilst <392820+dhilst@users.noreply.github.com>
This commit is contained in:
Daniel Hilst
2026-10-01 11:41:39 -03:00
parent 94f00b233a
commit 781dc1edf7
3 changed files with 13 additions and 13 deletions
+1 -1
View File
@@ -80,7 +80,7 @@ sub load_inputs {
if ($type eq 'owner') {
die "Unsupported native build owner '$name'\n" unless grep { $_ eq $name }
qw(goconserver grub2-xcat ipmitool-xcat syslinux-xcat xnba-undi xCAT-genesis-base
perl-Crypt-Rijndael perl-Crypt-SSLeay perl-HTTP-Async perl-IO-Stty perl-Net-HTTPS-NB perl-Net-Telnet);
perl-Crypt-Rijndael perl-Crypt-SSLeay perl-HTTP-Async perl-IO-Stty perl-Net-DNS perl-Net-HTTPS-NB perl-Net-Telnet);
}
if ($type ne 'publisher') {
my $uid = $type eq 'owner' && ($name eq 'xnba-undi' || $name eq 'xCAT-genesis-base') ? 0 : 1000;
+11 -11
View File
@@ -627,17 +627,6 @@
"needs": [],
"runtime": false
},
{
"name": "perl-Net-DNS",
"type": "publisher",
"url": "https://repo.openeuler.org/openEuler-24.03-LTS/everything/x86_64/Packages/perl-Net-DNS-1.40-1.oe2403.noarch.rpm",
"sha256": "c6d9932ccfaae2e515635b00204e86b5121516f5693d4fb345ae0d979bfbde23",
"outputs": [
"perl-Net-DNS"
],
"needs": [],
"runtime": true
},
{
"name": "perl-Package-Generator",
"type": "publisher",
@@ -1035,6 +1024,17 @@
],
"build_uid": 1000
},
{
"name": "perl-Net-DNS",
"type": "owner",
"outputs": [
"perl-Net-DNS"
],
"needs": [
"procenv"
],
"build_uid": 1000
},
{
"name": "ipmitool-xcat",
"type": "owner",
+1 -1
View File
@@ -321,7 +321,7 @@ perl-Expect=1.35
perl-HTML-Form=6.11
perl-LWP-Protocol-https=6.10
perl-Mail-Sender=0.903
perl-Net-DNS=1.40
perl-Net-DNS=1.57
perl-DBD-Pg=3.18.0
# [common] is NOT a build target. It describes the SHARED repository the OpenEmbedded Genesis