mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 08:14:09 -09:00
c9659fd9e8
In Buildroot there are multiple way to apply patches on a package [1]
- Adding `.patch` file in the package directory.
- Define `<pkg>_PATCH` variable with the location of the patch tar.gz.
It used to download Debian patches tarball.
- Implement custom patching logic with `PRE`/`POST` patches hooks.
To make the CycloneDX SBOM generation not dependant on downloading the
packages, the two last options have the downside of not appearing on the
generated SBOM.
The heirloom-mailx package is downloading a tarball from the Debian
mirror with the `<pkg>_PATCH` method [2].
To improve the tracking of the patched vulnerabilities for the
heirloom-mailx package this commit import the patches previously
downloaded with the `_PATCH` variable in the Buildroot tree. This allows
to add the `CVE:` trailer [3] on the patches that fix vulnerabilities to
better track which patch is fixing the vulnerability.
[1] https://buildroot.org/downloads/manual/manual.html#patch-policy
[2] http://snapshot.debian.org/archive/debian/20150815T155609Z/pool/main/h/heirloom-mailx/heirloom-mailx_12.5-5.debian.tar.xz
[3] 1167d0ff3d docs/manual: mention CVE trailer
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
37 lines
1.2 KiB
Diff
37 lines
1.2 KiB
Diff
Description: Sendmail is at /usr/sbin/sendmail
|
|
As per Debian Policy §11.6
|
|
Author: Ryan Kavanagh <rak@debian.org>
|
|
Origin: Debian
|
|
Forwarded: no
|
|
|
|
Upstream: https://sources.debian.org/patches/heirloom-mailx/12.5-4/0015-usr-sbin-sendmail.patch/
|
|
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
|
|
---
|
|
This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
|
|
Index: heirloom-mailx-12.5/Makefile
|
|
===================================================================
|
|
--- heirloom-mailx-12.5.orig/Makefile 2011-04-26 17:23:22.000000000 -0400
|
|
+++ heirloom-mailx-12.5/Makefile 2015-01-27 13:20:04.733542801 -0500
|
|
@@ -13,7 +13,7 @@
|
|
|
|
MAILRC = $(SYSCONFDIR)/nail.rc
|
|
MAILSPOOL = /var/mail
|
|
-SENDMAIL = /usr/lib/sendmail
|
|
+SENDMAIL = /usr/sbin/sendmail
|
|
|
|
DESTDIR =
|
|
|
|
Index: heirloom-mailx-12.5/mailx.1
|
|
===================================================================
|
|
--- heirloom-mailx-12.5.orig/mailx.1 2015-01-27 13:18:49.000000000 -0500
|
|
+++ heirloom-mailx-12.5/mailx.1 2015-01-27 13:20:32.382336867 -0500
|
|
@@ -4922,7 +4922,7 @@
|
|
which just acts as a proxy.
|
|
.PP
|
|
\fIMailx\fR immediately contacts the SMTP server (or
|
|
-.IR \%/usr/lib/sendmail )
|
|
+.IR \%/usr/sbin/sendmail )
|
|
even when operating in
|
|
.I disconnected
|
|
mode.
|