commit: 09d60234c436864445bc65437835e295860bb419 Author: Tomáš Mózes <hydrapolic <AT> gmail <DOT> com> AuthorDate: Wed Dec 16 09:23:36 2020 +0000 Commit: Thomas Deutschmann <whissi <AT> gentoo <DOT> org> CommitDate: Sun Dec 20 19:20:59 2020 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=09d60234
app-emulation/xen-tools: add security patches, drop vulnerable Signed-off-by: Tomáš Mózes <hydrapolic <AT> gmail.com> Closes: https://github.com/gentoo/gentoo/pull/18676 Signed-off-by: Thomas Deutschmann <whissi <AT> gentoo.org> app-emulation/xen-tools/Manifest | 3 ++- ...tools-4.14.0-r4.ebuild => xen-tools-4.13.2-r2.ebuild} | 16 ++++++++-------- ...tools-4.14.0-r4.ebuild => xen-tools-4.14.0-r5.ebuild} | 2 +- 3 files changed, 11 insertions(+), 10 deletions(-) diff --git a/app-emulation/xen-tools/Manifest b/app-emulation/xen-tools/Manifest index 85ea218d9be..b744ad2e191 100644 --- a/app-emulation/xen-tools/Manifest +++ b/app-emulation/xen-tools/Manifest @@ -6,8 +6,9 @@ DIST ipxe-git-1dd56dbd11082fb622c2ed21cfaced4f47d798a6.tar.gz 3810726 BLAKE2B b9 DIST seabios-1.12.1.tar.gz 613450 BLAKE2B cb926b650c41a9962db407945cb5b6558079b061bd61f32ea56aedf0d37a00d10ad4434acbe717ffbc0dd1d1c0767304af8e640a53b0fc3784969dfa1590f681 SHA512 58755ce842adcb99c0f2f3ebbf9ec6d4a5072753966ab46805a96db1570847b109a90e6e03d61f9088ef877ca8ba96a8006777dc38ec434fce6b487f6c1f91d0 DIST seabios-1.13.0.tar.gz 620952 BLAKE2B 460a7dd2b2775b981bbd890ed0a50fe905794c68b0b895799667dd1378bb84125712330c2f6945112709d42cfb7b01196c7fff99051e44b6211d47d19531cfae SHA512 7f158badf7deecc2998eab2a08f3615dfe5a7c0a51323f7b4568a4d1280935bc32bb466c8226d87d2ca7e13f9f117ff0092befcc0699bc31c5018e84754e8393 DIST xen-4.13.2-upstream-patches-0.tar.xz 15404 BLAKE2B e4f679e4281e4edfe4f1e7722c19a973461b9a6423828f17719dfd766a73ef61a74b1cd87f375e2b0c2ec9cbed7b6a0f12c4a9982bbc325cdbba4c70a7145248 SHA512 122fe404f9c19567016e43208ddd08bdac56e7f264853d6cbe0929650fc4ada7175cc24c0e4fbf088acab77127eb76454948b98cbc731e35a12e1b068a5fd793 +DIST xen-4.13.2-upstream-patches-2.tar.xz 58992 BLAKE2B 535d67ae6a30e23feb975172a9e4abd6d7feb6c8c969aa243fdf672ed6580fe46bf57ea5530eab70457e22af9163f95061fdf97d10faa3be9f4c92033187c950 SHA512 6b6cdf72d13c0e595be65e3107c0f68299e932b74d4a1c4d59bfe3be8b76840c47f6adeaddd0efac71d5158cee8d778a0be863eea8f032cb9acf4191f629d8ae DIST xen-4.13.2.tar.gz 39037826 BLAKE2B ad2b7c3003ca29e5e60a85c581f706ef87d99eadf939ed36ebe8f6698582f7a29dbdaf502039b60a0afe7ad4ae6ce89713e69dc8b8a7d5abe65063da7f1baa5b SHA512 cd3092281c97e9421e303aa288aac04dcccd5536ba7c0ff4d51fbf3d07b5ffacfe3456ba06f5cf63577dafbf8cf3a5d9825ceb5e9ef8ca1427900cc3e57b50a3 -DIST xen-4.14.0-upstream-patches-4.tar.xz 79204 BLAKE2B 54d3ba5eac263d78c052cdf2b7958662dc29f689f03d03692c20c881a6b520bf08c86cf830a2727c2a2249c256aa0d06dea75496c8ee6699361c86c3f91bbd83 SHA512 c18b43a16e225cd1c50fe975fa1daf414e8e5fd47e4d3c9e2c655001ae59ab6fed5d332e5f34acc4f01b3c9d42bd425a86e084a4eb22c360257689aab3fe6825 +DIST xen-4.14.0-upstream-patches-6.tar.xz 119116 BLAKE2B e3a0f807182d32754c6ae2000324237117cfa66c4a43c27b583b6aef69a3889949779751b71a87b2538f679fb481e8a723433950c689f28a8c2e96278c1b0ddb SHA512 03b1fdc08e74756001fbb0de4e21297456f63615e6f63b8f360f8270ef85b0d50c3872be41cc26529ed0d91d82ffda2af53882b7c5233113f223a4ec813a0d5b DIST xen-4.14.0.tar.gz 39950576 BLAKE2B db4c3e79cfdfb10260d0d14d9d28e8c8bd9bf23f42aee743acf8f560bf4cdb96a425c0df887c70f9755f62680be24bfbe0149e52a4cb843ae83090cd9d6afc71 SHA512 ebce47a2f754955d8517123d69f62006634d97620fbbe3784869a0667466e586a249f57ffaf7846d5bcb45d69377cde43354c82c233fbb5407e55653b9a33ac0 DIST xen-gentoo-patches-21.tar.xz 18280 BLAKE2B 95446da72fc16cb82e4e51df8796c64db05a30894a351a98dbd6700ce354c34956ca09a1af98125a4e56c337936e8fae296d806519b8afa23a82b078aa0db8f1 SHA512 3cffac162606a09b10b47dca604f167897e6ac8d153411d3464ef29a7a4d46ac5b92340884cb21279cb2d053b131f1ea5cb2111e3e9a21b3298b5ab3320ee34d DIST xen-gentoo-patches-22.tar.xz 18764 BLAKE2B e0da49b39fbc6b689db47e40a4fbb4f6568644fe192b114cce01b0406cba4bf23339ad1bf39b972f895df004916827b6e774f97fc079aeb8ac436763efda5fc3 SHA512 5b7959af4ed30edd2526698ab60a86353e35d9dc48dc941b6df7659a7c4904260461e0decbd8d788542bd69384736f2175861d4943c3738618d20788b19ea9b1 diff --git a/app-emulation/xen-tools/xen-tools-4.14.0-r4.ebuild b/app-emulation/xen-tools/xen-tools-4.13.2-r2.ebuild similarity index 99% copy from app-emulation/xen-tools/xen-tools-4.14.0-r4.ebuild copy to app-emulation/xen-tools/xen-tools-4.13.2-r2.ebuild index 55976ee7f22..9ed77248190 100644 --- a/app-emulation/xen-tools/xen-tools-4.14.0-r4.ebuild +++ b/app-emulation/xen-tools/xen-tools-4.13.2-r2.ebuild @@ -17,16 +17,16 @@ if [[ $PV == *9999 ]]; then S="${WORKDIR}/${REPO}" else KEYWORDS="~amd64 ~arm ~arm64 ~x86" - UPSTREAM_VER=4 - SECURITY_VER=28 + UPSTREAM_VER=2 + SECURITY_VER=29 # xen-tools's gentoo patches tarball - GENTOO_VER=22 + GENTOO_VER=21 # xen-tools's gentoo patches version which apply to this specific ebuild - GENTOO_GPV=0 + GENTOO_GPV=1 # xen-tools ovmf's patches OVMF_VER= - SEABIOS_VER="1.13.0" + SEABIOS_VER="1.12.1" EDK2_COMMIT="06dc822d045c2bb42e497487935485302486e151" EDK2_OPENSSL_VERSION="1_1_1g" EDK2_SOFTFLOAT_COMMIT="b64af41c3276f97f0e181920400ee056b9c88037" @@ -93,10 +93,7 @@ COMMON_DEPEND=" " DEPEND="${COMMON_DEPEND} - app-misc/pax-utils - dev-lang/perl >=sys-kernel/linux-headers-4.11 - x11-libs/pixman $(python_gen_cond_dep ' dev-python/lxml[${PYTHON_MULTI_USEDEP}] pam? ( dev-python/pypam[${PYTHON_MULTI_USEDEP}] ) @@ -116,6 +113,8 @@ DEPEND="${COMMON_DEPEND} system-seabios? ( sys-firmware/seabios ) system-ipxe? ( sys-firmware/ipxe[qemu] ) rombios? ( sys-devel/bin86 sys-devel/dev86 ) ) + dev-lang/perl + app-misc/pax-utils doc? ( app-text/ghostscript-gpl app-text/pandoc @@ -128,6 +127,7 @@ DEPEND="${COMMON_DEPEND} hvm? ( x11-base/xorg-proto ) qemu? ( app-arch/snappy:= + x11-libs/pixman sdl? ( media-libs/libsdl[X] media-libs/libsdl2[X] diff --git a/app-emulation/xen-tools/xen-tools-4.14.0-r4.ebuild b/app-emulation/xen-tools/xen-tools-4.14.0-r5.ebuild similarity index 99% rename from app-emulation/xen-tools/xen-tools-4.14.0-r4.ebuild rename to app-emulation/xen-tools/xen-tools-4.14.0-r5.ebuild index 55976ee7f22..c23e528f38a 100644 --- a/app-emulation/xen-tools/xen-tools-4.14.0-r4.ebuild +++ b/app-emulation/xen-tools/xen-tools-4.14.0-r5.ebuild @@ -17,7 +17,7 @@ if [[ $PV == *9999 ]]; then S="${WORKDIR}/${REPO}" else KEYWORDS="~amd64 ~arm ~arm64 ~x86" - UPSTREAM_VER=4 + UPSTREAM_VER=6 SECURITY_VER=28 # xen-tools's gentoo patches tarball GENTOO_VER=22
