summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAlexander Kanavin <alex.kanavin@gmail.com>2022-05-05 07:05:38 +0200
committerRichard Purdie <richard.purdie@linuxfoundation.org>2022-05-05 21:17:38 +0100
commit2a39819c3943a0a31b7ab1559f938d7a161795d4 (patch)
treedc5dae81481f1faf41aa388dd24c80259313ecbc
parent1d9533d4e7c9f6cc39439a09e89e5f8a9a43e028 (diff)
downloadpoky-2a39819c3943a0a31b7ab1559f938d7a161795d4.tar.gz
rsync: update 3.2.3 -> 3.2.4
Drop configure options that have been removed upstream. License-Update: formatting (From OE-Core rev: bc9bf4c2ea4230391fc3ee2f55d1f73e1dd39edf) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/recipes-devtools/rsync/files/0001-rsync-ssl-Verify-the-hostname-in-the-certificate-whe.patch31
-rw-r--r--meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch12
-rw-r--r--meta/recipes-devtools/rsync/rsync_3.2.4.bb (renamed from meta/recipes-devtools/rsync/rsync_3.2.3.bb)17
3 files changed, 19 insertions, 41 deletions
diff --git a/meta/recipes-devtools/rsync/files/0001-rsync-ssl-Verify-the-hostname-in-the-certificate-whe.patch b/meta/recipes-devtools/rsync/files/0001-rsync-ssl-Verify-the-hostname-in-the-certificate-whe.patch
deleted file mode 100644
index 2d51ddf965..0000000000
--- a/meta/recipes-devtools/rsync/files/0001-rsync-ssl-Verify-the-hostname-in-the-certificate-whe.patch
+++ /dev/null
@@ -1,31 +0,0 @@
1From fbe85634d88e82fbb439ae2a5d1aca8b8c309bea Mon Sep 17 00:00:00 2001
2From: Matt McCutchen <matt@mattmccutchen.net>
3Date: Wed, 26 Aug 2020 12:16:08 -0400
4Subject: [PATCH] rsync-ssl: Verify the hostname in the certificate when using
5 openssl.
6
7CVE: CVE-2020-14387
8
9Upstream-Status: Backport [https://git.samba.org/?p=rsync.git;a=commit;h=c3f7414]
10
11Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
12---
13 rsync-ssl | 2 +-
14 1 file changed, 1 insertion(+), 1 deletion(-)
15
16diff --git a/rsync-ssl b/rsync-ssl
17index 8101975..46701af 100755
18--- a/rsync-ssl
19+++ b/rsync-ssl
20@@ -129,7 +129,7 @@ function rsync_ssl_helper {
21 fi
22
23 if [[ $RSYNC_SSL_TYPE == openssl ]]; then
24- exec $RSYNC_SSL_OPENSSL s_client $caopt $certopt -quiet -verify_quiet -servername $hostname -connect $hostname:$port
25+ exec $RSYNC_SSL_OPENSSL s_client $caopt $certopt -quiet -verify_quiet -servername $hostname -verify_hostname $hostname -connect $hostname:$port
26 elif [[ $RSYNC_SSL_TYPE == gnutls ]]; then
27 exec $RSYNC_SSL_GNUTLS --logfile=/dev/null $gnutls_cert_opt $gnutls_opts $hostname:$port
28 else
29--
302.17.1
31
diff --git a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch
index 4ba7665280..92ed1f4419 100644
--- a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch
+++ b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch
@@ -1,4 +1,4 @@
1From 1f29584e57f5fda09970c66f3b94f4720e09c1bb Mon Sep 17 00:00:00 2001 1From 81700d1a0e51391028c761cc8ef1cd660084d114 Mon Sep 17 00:00:00 2001
2From: Ross Burton <ross.burton@intel.com> 2From: Ross Burton <ross.burton@intel.com>
3Date: Tue, 12 Apr 2016 15:51:54 +0100 3Date: Tue, 12 Apr 2016 15:51:54 +0100
4Subject: [PATCH] rsync: remove upstream's rebuild logic 4Subject: [PATCH] rsync: remove upstream's rebuild logic
@@ -14,12 +14,12 @@ Signed-off-by: Ross Burton <ross.burton@intel.com>
14 1 file changed, 54 deletions(-) 14 1 file changed, 54 deletions(-)
15 15
16diff --git a/Makefile.in b/Makefile.in 16diff --git a/Makefile.in b/Makefile.in
17index 672fcc4..c12d8d4 100644 17index 3cde955..d963a70 100644
18--- a/Makefile.in 18--- a/Makefile.in
19+++ b/Makefile.in 19+++ b/Makefile.in
20@@ -168,60 +168,6 @@ gen: conf proto.h man 20@@ -190,60 +190,6 @@ gensend: gen
21 gensend: gen 21 fi
22 rsync -aic $(GENFILES) $${SAMBA_HOST-samba.org}:/home/ftp/pub/rsync/generated-files/ 22 rsync -aic $(GENFILES) git-version.h $${SAMBA_HOST-samba.org}:/home/ftp/pub/rsync/generated-files/ || true
23 23
24-aclocal.m4: $(srcdir)/m4/*.m4 24-aclocal.m4: $(srcdir)/m4/*.m4
25- aclocal -I $(srcdir)/m4 25- aclocal -I $(srcdir)/m4
@@ -41,7 +41,7 @@ index 672fcc4..c12d8d4 100644
41- else \ 41- else \
42- echo "config.h.in has CHANGED."; \ 42- echo "config.h.in has CHANGED."; \
43- fi 43- fi
44- @if test -f configure.sh.old -o -f config.h.in.old; then \ 44- @if test -f configure.sh.old || test -f config.h.in.old; then \
45- if test "$(MAKECMDGOALS)" = reconfigure; then \ 45- if test "$(MAKECMDGOALS)" = reconfigure; then \
46- echo 'Continuing with "make reconfigure".'; \ 46- echo 'Continuing with "make reconfigure".'; \
47- else \ 47- else \
diff --git a/meta/recipes-devtools/rsync/rsync_3.2.3.bb b/meta/recipes-devtools/rsync/rsync_3.2.4.bb
index 6168ee85fc..e6f917b5cd 100644
--- a/meta/recipes-devtools/rsync/rsync_3.2.3.bb
+++ b/meta/recipes-devtools/rsync/rsync_3.2.4.bb
@@ -6,7 +6,7 @@ SECTION = "console/network"
6# GPL-2.0-or-later (<< 3.0.0), GPL-3.0-or-later (>= 3.0.0) 6# GPL-2.0-or-later (<< 3.0.0), GPL-3.0-or-later (>= 3.0.0)
7# Includes opennsh and xxhash dynamic link exception 7# Includes opennsh and xxhash dynamic link exception
8LICENSE = "GPL-3.0-or-later" 8LICENSE = "GPL-3.0-or-later"
9LIC_FILES_CHKSUM = "file://COPYING;md5=9e5a4f9b3a253d51520617aa54f8eb26" 9LIC_FILES_CHKSUM = "file://COPYING;md5=24423708fe159c9d12be1ea29fcb18c7"
10 10
11DEPENDS = "popt" 11DEPENDS = "popt"
12 12
@@ -14,10 +14,9 @@ SRC_URI = "https://download.samba.org/pub/${BPN}/src/${BP}.tar.gz \
14 file://rsyncd.conf \ 14 file://rsyncd.conf \
15 file://makefile-no-rebuild.patch \ 15 file://makefile-no-rebuild.patch \
16 file://determism.patch \ 16 file://determism.patch \
17 file://0001-rsync-ssl-Verify-the-hostname-in-the-certificate-whe.patch \
18 " 17 "
19 18
20SRC_URI[sha256sum] = "becc3c504ceea499f4167a260040ccf4d9f2ef9499ad5683c179a697146ce50e" 19SRC_URI[sha256sum] = "6f761838d08052b0b6579cf7f6737d93e47f01f4da04c5d24d3447b7f2a5fad1"
21 20
22# -16548 required for v3.1.3pre1. Already in v3.1.3. 21# -16548 required for v3.1.3pre1. Already in v3.1.3.
23CVE_CHECK_IGNORE += " CVE-2017-16548 " 22CVE_CHECK_IGNORE += " CVE-2017-16548 "
@@ -41,7 +40,17 @@ PACKAGECONFIG[zstd] = "--enable-zstd,--disable-zstd,zstd"
41CACHED_CONFIGUREVARS += "rsync_cv_can_hardlink_special=yes rsync_cv_can_hardlink_symlink=yes" 40CACHED_CONFIGUREVARS += "rsync_cv_can_hardlink_special=yes rsync_cv_can_hardlink_symlink=yes"
42 41
43EXTRA_OEMAKE = 'STRIP=""' 42EXTRA_OEMAKE = 'STRIP=""'
44EXTRA_OECONF = "--disable-simd --disable-md2man --disable-asm --with-nobody-group=nogroup" 43EXTRA_OECONF = "--disable-md2man --with-nobody-group=nogroup"
44
45#| ./simd-checksum-x86_64.cpp: In function 'uint32_t get_checksum1_cpp(char*, int32_t)':
46#| ./simd-checksum-x86_64.cpp:89:52: error: multiversioning needs 'ifunc' which is not supported on this target
47#| 89 | __attribute__ ((target("default"))) MVSTATIC int32 get_checksum1_avx2_64(schar* buf, int32 len, int32 i, uint32* ps1, uint32* ps2) { return i; }
48#| | ^~~~~~~~~~~~~~~~~~~~~
49#| ./simd-checksum-x86_64.cpp:480:1: error: use of multiversioned function without a default
50#| 480 | }
51#| | ^
52#| If you can't fix the issue, re-run ./configure with --disable-roll-simd.
53EXTRA_OECONF:append:libc-musl = " --disable-roll-simd"
45 54
46# rsync 3.0 uses configure.sh instead of configure, and 55# rsync 3.0 uses configure.sh instead of configure, and
47# makefile checks the existence of configure.sh 56# makefile checks the existence of configure.sh