From 657f311cf916666d37d46b1a706fcabfa6cace9b Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Tue, 25 Jan 2022 09:18:26 +0100 Subject: [PATCH 1/3] util-linux: Fix download URL to work with patch releases The directory does not contain the patch version. [BEE] fetching https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.37.3/util-linux-2.37.3.tar.xz --2022-01-25 09:16:07-- https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.37.3/util-linux-2.37.3.tar.xz Resolving mirrors.edge.kernel.org... 147.75.101.1, 2604:1380:2001:3900::1 Connecting to mirrors.edge.kernel.org|147.75.101.1|:443... connected. HTTP request sent, awaiting response... 404 Not Found 2022-01-25 09:16:08 ERROR 404: Not Found. So only use the major and minor version. --- util-linux.be0 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/util-linux.be0 b/util-linux.be0 index 7a42c2fd9..7488a71e5 100755 --- a/util-linux.be0 +++ b/util-linux.be0 @@ -2,7 +2,7 @@ # BEE_VERSION util-linux-2.34-2 -SRCURL[0]="https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v${PKGVERSION}/util-linux-${PKGVERSION}.tar.xz" +SRCURL[0]="https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v${PKGVERSION[2]}/util-linux-${PKGVERSION}.tar.xz" # PATCHURL+=() From bc1a59103e88d5a55dc0b8e95cee55db339f68d7 Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Tue, 25 Jan 2022 09:13:33 +0100 Subject: [PATCH 2/3] util-linux: Update version from 2.33 to 2.37.3 1. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.34/v2.34-ReleaseNotes 2. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.35/v2.35-ReleaseNotes 3. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36-ReleaseNotes 4. https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes From [util-linux 2.37.3 Release Notes][1]: > This release fixes two security mount(8) and umount(8) issues: > > CVE-2021-3996 > Improper UID check in libmount allows an unprivileged user to unmount FUSE > filesystems of users with similar UID. > > CVE-2021-3995 > This issue is related to parsing the /proc/self/mountinfo file allows an > unprivileged user to unmount other user's filesystems that are either > world-writable themselves or mounted in a world-writable directory. [1]: https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.3-ReleaseNotes --- util-linux.be0 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/util-linux.be0 b/util-linux.be0 index 7488a71e5..d4385017c 100755 --- a/util-linux.be0 +++ b/util-linux.be0 @@ -1,6 +1,6 @@ #!/usr/bin/env beesh -# BEE_VERSION util-linux-2.34-2 +# BEE_VERSION util-linux-2.37.3-0 SRCURL[0]="https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v${PKGVERSION[2]}/util-linux-${PKGVERSION}.tar.xz" From 73582e6d787ebbd9762f45d2e3c44cd40bc2d4b1 Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Thu, 17 Feb 2022 17:41:25 +0100 Subject: [PATCH 3/3] util-linux: Download source archive from beehive.molgen.mpg.de --- util-linux.be0 | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/util-linux.be0 b/util-linux.be0 index d4385017c..5c27bbd3e 100755 --- a/util-linux.be0 +++ b/util-linux.be0 @@ -2,7 +2,8 @@ # BEE_VERSION util-linux-2.37.3-0 -SRCURL[0]="https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v${PKGVERSION[2]}/util-linux-${PKGVERSION}.tar.xz" +# SRCURL[0]="https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v${PKGVERSION[2]}/util-linux-${PKGVERSION}.tar.xz" +SRCURL[0]="https://beehive.molgen.mpg.de/36fe209806ede050ce124e4a2e6e66d4/util-linux-2.37.3.tar.xz" # PATCHURL+=()