Daniel Hilst 781dc1edf7 fix(xcat-dep): openEuler ppc64le ships Net::DNS 1.40 with known CVEs ...

The openeuler-24.03-ppc64le catalog pins perl-Net-DNS-1.40-1.oe2403
from openEuler 24.03 LTS GA as a publisher input. That release has
CVE-2026-64193 and CVE-2026-64194. The GA srpm carries no fix, and
load_inputs accepts only GA rpms as publisher inputs.

Build perl-Net-DNS for this target from perl-Net-DNS/Net-DNS.spec,
the 1.57 release that rocky-10-riscv64-xcat already builds. The
catalog now declares perl-Net-DNS as an owner, load_inputs allows that
owner, and the manifest pins 1.57. The spec BuildRequires all resolve
from the openEuler 24.03 LTS OS repository.

Signed-off-by: Daniel Hilst <392820+dhilst@users.noreply.github.com>

2026-10-05 15:50:58 -03:00

..

24.03-ppc64le.inputs.json

fix(xcat-dep): openEuler ppc64le ships Net::DNS 1.40 with known CVEs

2026-10-05 15:50:58 -03:00

Build-notes

docs(openeuler): describe native dependency inputs

2026-09-21 18:24:49 -03:00

RPM-GPG-KEY-openEuler-24.03-LTS

feat(openeuler): build native dependency packages

2026-09-21 18:23:51 -03:00