pkgsrc-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

pkg/50082: suse131 packages are outdated



>Number:         50082
>Category:       pkg
>Synopsis:       suse131 packages are outdated
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jul 24 04:10:00 +0000 2015
>Originator:     Rin Okuyama
>Release:        pkgsrc-MAIN 20150724
>Organization:
Department of Physics, Tohoku University
>Environment:
NetBSD XXX 7.99.20 NetBSD 7.99.20 (XXX) #0: Sun Jul 19 18:42:21 JST 2015  root@XXX:XXX amd64
>Description:
Some of emulators/suse131 packages are outdated. Especially,
suse131_base has vulnerabilities.
>How-To-Repeat:
Run make install in emulators/suse131_base, which fails without
setting ALLOW_VULNERABLE_PACKAGES+=suse_base.
>Fix:
I've updated any outdated rpm files, and bumped package
revisions. Since the patch is too large (> 1,000 lines!),
I've uploaded it on web:

  http://flex.phys.tohoku.ac.jp/~okuyama/suse131.patch.gz
  MD5 (suse131.patch.gz) = 4576059d27ca51cabc1a62b62aa99dbc

Updated packages can be installed with PKG_DEVELOPER=yes, and
some basic commands work fine on NetBSD/amd64-current. However,
I'm sorry that I cannot check whether everything is OK or not.

As openSUSE 13.1 is still under support, this should resolve
any known vulnerabilities. Please update pkg-vulnerabilities
file to allow suse_base-13.1nb9 to be installed.


Home | Main Index | Thread Index | Old Index