Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 0c7ceecdb821
Choose a base ref
...
head repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 538639a55ce9
Choose a head ref
  • 6 commits
  • 3 files changed
  • 3 contributors

Commits on Jun 6, 2019

  1. libressl_2_9: 2.9.0 -> 2.9.1 

    This new version does not build as-is, it will need to be patched.

(cherry picked from commit 3415872)
    @ruuda @fpletz
    ruuda authored and fpletz committed Jun 6, 2019
    Copy the full SHA
    e7885e4 View commit details

  2. libressl: build with cmake 

    LibreSSL 2.9.1 no longer builds with the default autotools configuration.
When I searched for the error, I noticed that Buildroot ran into the
same issue, and they resolved the problem by building with CMake rather
than autotools. [1] I followed the same approach here.

[1]: buildroot/buildroot@e783d60

(cherry picked from commit 8c7cde5)
    @ruuda @fpletz
    ruuda authored and fpletz committed Jun 6, 2019
    Copy the full SHA
    289eeaf View commit details

  3. libressl: ensure we can link against libtls 

    Without setting BUILD_SHARED_LIBS, the package would build file, but
when linking it into acme-client or nginx, I got the following error:

    libressl-2.9.1/lib/libtls.a(tls.c.o): undefined reference to symbol 'pthread_once@@GLIBC_2.2.5'
    binutils-2.31.1/bin/ld: glibc-2.27/lib/libpthread.so.0: error adding symbols: DSO missing from command line
    collect2: error: ld returned 1 exit status

After looking at the CMakeLists.txt in libressl/tls, I noticed the
BUILD_SHARED_LIBS option, and setting it resolves the linking error.

(cherry picked from commit 5f594be)
    @ruuda @fpletz
    ruuda authored and fpletz committed Jun 6, 2019
    Copy the full SHA
    ead4b2b View commit details

  4. libressl_2_9: 2.9.1 -> 2.9.2 

    (cherry picked from commit 67709c3)
    @Izorkin @fpletz
    Izorkin authored and fpletz committed Jun 6, 2019
    Copy the full SHA
    ec84251 View commit details

  5. libressl_2_7: remove, not maintained anymore 

    Stable LibreSSL releases are supported one year after their OpenBSD release.
OpenBSD 6.3 with this branch was released on 2018-04-01.

(cherry picked from commit cea1632)
    @fpletz
    fpletz committed Jun 6, 2019
    Copy the full SHA
    8bd37df View commit details

  6. pam_u2f: 1.0.8 -> 1.0.9 

    Fixes CVE-2019-12209 & CVE-2019-12210.

https://developers.yubico.com/pam-u2f/Release_Notes.html
(cherry picked from commit e7a0328)
    @fpletz
    fpletz committed Jun 6, 2019
    Copy the full SHA
    538639a View commit details
Loading