Re: [DNG] Need openssl for this week's fetchmail vulnerabiltiy fix : SOLVED
On 07.08.21 13:05, Bernard Rosset via Dng wrote: > > # apt-get source openssl > > Reading package lists... Done > > E: You must put some 'source' URIs in your sources.list > > Have you run apt-get update after having modified sources.list? > Oh deary me, and words to that effect. Seems obvious now that you've thought of it. After 30 years you'd think I wouldn't takeerror messages literally any more. Thank you, guys for taking a look at it. I'll build it tomorrow, then retry fetchmail. It's getting late here. Erik ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Need openssl for this week's fetchmail vulnerabiltiy fix
On Saturday 07 August 2021 at 13:14:10, Curtis Maurand via Dng wrote: > On 8/7/21 7:05 AM, Bernard Rosset via Dng wrote: > >> # apt-get source openssl > >> Reading package lists... Done > >> E: You must put some 'source' URIs in your sources.list > > > > Have you run apt-get update after having modified sources.list? That's a very good point. > >> # cat /etc/apt/sources.list > >> ## package repositories > >> deb http://deb.devuan.org/merged beowulf main > >> deb http://deb.devuan.org/merged beowulf-updates main > >> deb http://deb.devuan.org/merged beowulf-security main > >> deb http://deb.devuan.org/merged beowulf-backports main > >> > >> ## source repositories > >> deb-src http://deb.devuan.org/merged beowulf main > >> deb-src http://deb.devuan.org/merged beowulf-updates main > >> deb-src http://deb.devuan.org/merged beowulf-security main > >> deb-src http://deb.devuan.org/merged beowulf-backports main > > > > Your sources are correct, even overkill as pointed out by others. > > For the openssl sources, you only require: > > deb-src http://deb.devuan.org/merged beowulf main > > Is it possible he needs openssl-dev? Just asking. I think that would be for packages which need to link to openssl and need header files etc, not for building the openssl package itself from source. Antony. -- I lay awake all night wondering where the sun went, and then it dawned on me. Please reply to the list; please *don't* CC me. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Need openssl for this week's fetchmail vulnerabiltiy fix
On 8/7/21 7:05 AM, Bernard Rosset via Dng wrote: # apt-get source openssl Reading package lists... Done E: You must put some 'source' URIs in your sources.list Have you run apt-get update after having modified sources.list? # cat /etc/apt/sources.list ## package repositories deb http://deb.devuan.org/merged beowulf main deb http://deb.devuan.org/merged beowulf-updates main deb http://deb.devuan.org/merged beowulf-security main deb http://deb.devuan.org/merged beowulf-backports main ## source repositories deb-src http://deb.devuan.org/merged beowulf main deb-src http://deb.devuan.org/merged beowulf-updates main deb-src http://deb.devuan.org/merged beowulf-security main deb-src http://deb.devuan.org/merged beowulf-backports main Your sources are correct, even overkill as pointed out by others. For the openssl sources, you only require: deb-src http://deb.devuan.org/merged beowulf main Is it possible he needs openssl-dev? Just asking. Thanks, Curtis ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Need openssl for this week's fetchmail vulnerabiltiy fix
# apt-get source openssl Reading package lists... Done E: You must put some 'source' URIs in your sources.list Have you run apt-get update after having modified sources.list? # cat /etc/apt/sources.list ## package repositories deb http://deb.devuan.org/merged beowulf main deb http://deb.devuan.org/merged beowulf-updates main deb http://deb.devuan.org/merged beowulf-security main deb http://deb.devuan.org/merged beowulf-backports main ## source repositories deb-src http://deb.devuan.org/merged beowulf main deb-src http://deb.devuan.org/merged beowulf-updates main deb-src http://deb.devuan.org/merged beowulf-security main deb-src http://deb.devuan.org/merged beowulf-backports main Your sources are correct, even overkill as pointed out by others. For the openssl sources, you only require: deb-src http://deb.devuan.org/merged beowulf main Bernard (Beer) Rosset https://rosset.net/ ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Need openssl for this week's fetchmail vulnerabiltiy fix
On Saturday 07 August 2021 at 12:40:46, Antony Stone wrote: > On Saturday 07 August 2021 at 12:07:54, d...@d404.nl wrote: > > My sources.list looks like: > > > > deb http://deb.devuan.org/merged beowulf main non-free contrib > > deb http://deb.devuan.org/merged beowulf-security main contrib non-free > > deb http://deb.devuan.org/merged beowulf-updates main contrib non-free > > > > deb-src http://deb.devuan.org/merged beowulf main non-free contrib > > deb-src http://deb.devuan.org/merged beowulf-security main contrib > > non-free deb-src http://deb.devuan.org/merged beowulf-updates main > > contrib non-free > > > > Maybe you should add contrib and/or non-free too. In my case it just > > works with apt-get source openssl > > Hm, I don't think that should be necessary: Sorry, I just quoted from an Ascii machine - just to be clear, here's the same thing from Beowulf: # apt-cache policy openssl openssl: Installed: 1.1.1d-0+deb10u6 Candidate: 1.1.1d-0+deb10u6 Version table: *** 1.1.1d-0+deb10u6 500 500 http://deb.devuan.org/merged beowulf/main amd64 Packages 500 http://deb.devuan.org/merged beowulf-security/main amd64 Packages 100 /var/lib/dpkg/status > So, my openssl is clearly installed from the "main" category. > > > Antony. -- "Linux is going to be part of the future. It's going to be like Unix was." - Peter Moore, Asia-Pacific general manager, Microsoft Please reply to the list; please *don't* CC me. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Need openssl for this week's fetchmail vulnerabiltiy fix
On Saturday 07 August 2021 at 12:07:54, d...@d404.nl wrote: > My sources.list looks like: > > deb http://deb.devuan.org/merged beowulf main non-free contrib > deb http://deb.devuan.org/merged beowulf-security main contrib non-free > deb http://deb.devuan.org/merged beowulf-updates main contrib non-free > > deb-src http://deb.devuan.org/merged beowulf main non-free contrib > deb-src http://deb.devuan.org/merged beowulf-security main contrib non-free > deb-src http://deb.devuan.org/merged beowulf-updates main contrib non-free > > Maybe you should add contrib and/or non-free too. In my case it just > works with apt-get source openssl Hm, I don't think that should be necessary: # apt-cache policy openssl openssl: Installed: 1.1.0l-1~deb9u3 Candidate: 1.1.0l-1~deb9u3 Version table: *** 1.1.0l-1~deb9u3 500 500 http://deb.devuan.org/merged ascii-security/main amd64 Packages 100 /var/lib/dpkg/status So, my openssl is clearly installed from the "main" category. Antony. -- A good conversation is like a miniskirt; short enought to retain interest, but long enough to cover the subject. - Celeste Headlee Please reply to the list; please *don't* CC me. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Need openssl for this week's fetchmail vulnerabiltiy fix
On 07-08-2021 11:54, dva...@internode.on.net wrote: Have just downloaded fetchmail-6.50.beta4 for its CVE-2021-36386 fix. But for it to build, I need to build openssl first. (Having the ordinary openssl deb installed doesn't cut it.) My problem is: # apt-get source openssl Reading package lists... Done E: You must put some 'source' URIs in your sources.list But how can that be, given: # cat /etc/apt/sources.list ## package repositories deb http://deb.devuan.org/merged beowulf main deb http://deb.devuan.org/merged beowulf-updates main deb http://deb.devuan.org/merged beowulf-security main deb http://deb.devuan.org/merged beowulf-backports main ## source repositories deb-src http://deb.devuan.org/merged beowulf main deb-src http://deb.devuan.org/merged beowulf-updates main deb-src http://deb.devuan.org/merged beowulf-security main deb-src http://deb.devuan.org/merged beowulf-backports main I'll admit my eyesight isn't 20-20, but what more it could want eludes me. Erik ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng My sources.list looks like: deb http://deb.devuan.org/merged beowulf main non-free contrib deb http://deb.devuan.org/merged beowulf-security main contrib non-free deb http://deb.devuan.org/merged beowulf-updates main contrib non-free deb-src http://deb.devuan.org/merged beowulf main non-free contrib deb-src http://deb.devuan.org/merged beowulf-security main contrib non-free deb-src http://deb.devuan.org/merged beowulf-updates main contrib non-free Maybe you should add contrib and/or non-free too. In my case it just works with apt-get source openssl Grtz Nick ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] Need openssl for this week's fetchmail vulnerabiltiy fix
Have just downloaded fetchmail-6.5.0.beta4 for its CVE-2021-36386fix But for it to build, I need to build openssl first. (Having the ordinaryopenssl deb installed doesn't cut it.) My problem is: # apt-get source openssl Reading package lists... Done E: You must put some 'source' URIs in your sources.list But how can that be, given: # cat /etc/apt/sources.list ## package repositories deb http://deb.devuanorg/merged beowulf main deb http://deb.devuan.org/merged beowulf-updates main deb http://deb.devuan.org/merged beowulf-security main deb http://deb.devuan.org/merged beowulf-backports main ## source repositories deb-src http://deb.devuan.org/merged beowulf main deb-src http://deb.devuan.org/merged beowulf-updates main deb-src http://deb.devuan.org/merged beowulf-security main deb-src http://deb.devuan.org/merged beowulf-backports main I'll admit my eyesight isn't 20-20, but what more it could wanteludes me. Erik ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
