From 88f0ce2f942727f47049142619b91c0cf8f47118a070372da59c6fef214f7ba6 Mon Sep 17 00:00:00 2001 From: Larry Finger Date: Sat, 4 Aug 2018 14:50:11 +0000 Subject: [PATCH] - Version bump to 5.2.16 (released July 17 2018 by Oracle) This is a maintenance release. The following items were fixed and/or added: OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357) Linux: build for openSUSE 15.0 (bug #17554) Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086, CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=439 --- UserManual.pdf | 4 +-- VirtualBox-5.2.14-patched.tar.bz2 | 3 -- VirtualBox-5.2.16-patched.tar.bz2 | 3 ++ switch_to_python3.6.patch | 56 +++++++++++++++---------------- virtualbox.changes | 14 ++++++++ virtualbox.spec | 4 +-- 6 files changed, 49 insertions(+), 35 deletions(-) delete mode 100644 VirtualBox-5.2.14-patched.tar.bz2 create mode 100644 VirtualBox-5.2.16-patched.tar.bz2 diff --git a/UserManual.pdf b/UserManual.pdf index bbdece8..c84c8c0 100644 --- a/UserManual.pdf +++ b/UserManual.pdf @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:6b7c3072c6cec2491c4465b8463a1c0266a5a2c65c62181e76f9f244f4450b70 -size 4441987 +oid sha256:323dd5790a2d2e03a9ab8523332b3166084a8ffbe67dbeafa95bc500974b2a9e +size 4442634 diff --git a/VirtualBox-5.2.14-patched.tar.bz2 b/VirtualBox-5.2.14-patched.tar.bz2 deleted file mode 100644 index 03dddab..0000000 --- a/VirtualBox-5.2.14-patched.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:fcc07cd3cf1b881964de18b45ac059d4eed3ee13eac6f28cb39f130f180a7f3b -size 83307632 diff --git a/VirtualBox-5.2.16-patched.tar.bz2 b/VirtualBox-5.2.16-patched.tar.bz2 new file mode 100644 index 0000000..5512126 --- /dev/null +++ b/VirtualBox-5.2.16-patched.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:087e20460ea01c9d529cbcec2ea229c2c7b743a0d1b3b41ee55a607da46263ba +size 83360299 diff --git a/switch_to_python3.6.patch b/switch_to_python3.6.patch index b1303c9..d439592 100644 --- a/switch_to_python3.6.patch +++ b/switch_to_python3.6.patch @@ -1,8 +1,8 @@ -Index: VirtualBox-5.2.12/configure +Index: VirtualBox-5.2.16/configure =================================================================== ---- VirtualBox-5.2.12.orig/configure -+++ VirtualBox-5.2.12/configure -@@ -1953,17 +1953,17 @@ extern "C" int main(void) +--- VirtualBox-5.2.16.orig/configure ++++ VirtualBox-5.2.16/configure +@@ -1959,17 +1959,17 @@ extern "C" int main(void) { Py_Initialize(); printf("found version %s", PY_VERSION); @@ -18,16 +18,16 @@ Index: VirtualBox-5.2.12/configure } EOF found= -- SUPPYTHONLIBS="python2.7 python2.6 python3.1 python3.2 python3.3 python3.4 python3.4m python3.5 python3.5m" -+ SUPPYTHONLIBS="python3.6m" +- SUPPYTHONLIBS="python2.7 python2.6 python3.1 python3.2 python3.3 python3.4 python3.4m python3.5 python3.5m python3.6 python3.6m" ++ SUPPYTHONLIBS="python3.6m python3.6 python3.6m" for p in $PYTHONDIR; do for d in $SUPPYTHONLIBS; do for b in lib/x86_64-linux-gnu lib/i386-linux-gnu lib64 lib/64 lib; do -Index: VirtualBox-5.2.12/src/VBox/Installer/linux/routines.sh +Index: VirtualBox-5.2.16/src/VBox/Installer/linux/routines.sh =================================================================== ---- VirtualBox-5.2.12.orig/src/VBox/Installer/linux/routines.sh -+++ VirtualBox-5.2.12/src/VBox/Installer/linux/routines.sh -@@ -367,8 +367,8 @@ terminate_proc() { +--- VirtualBox-5.2.16.orig/src/VBox/Installer/linux/routines.sh ++++ VirtualBox-5.2.16/src/VBox/Installer/linux/routines.sh +@@ -375,8 +375,8 @@ terminate_proc() { maybe_run_python_bindings_installer() { VBOX_INSTALL_PATH="${1}" @@ -38,10 +38,10 @@ Index: VirtualBox-5.2.12/src/VBox/Installer/linux/routines.sh if sys.version_info >= (2, 6): print \"test\"' 2> /dev/null`" != "test" ]; then echo 1>&2 "Python 2.6 or later not available, skipping bindings installation." -Index: VirtualBox-5.2.12/src/bldprogs/scm.cpp +Index: VirtualBox-5.2.16/src/bldprogs/scm.cpp =================================================================== ---- VirtualBox-5.2.12.orig/src/bldprogs/scm.cpp -+++ VirtualBox-5.2.12/src/bldprogs/scm.cpp +--- VirtualBox-5.2.16.orig/src/bldprogs/scm.cpp ++++ VirtualBox-5.2.16/src/bldprogs/scm.cpp @@ -2031,7 +2031,7 @@ static int scmProcessFileInner(PSCMRWSTA pszTreatAs = "shell"; else if ( (cchFirst >= 15 && strncmp(pchFirst, "/usr/bin/python", 15) == 0) @@ -51,10 +51,10 @@ Index: VirtualBox-5.2.12/src/bldprogs/scm.cpp else if ( (cchFirst >= 13 && strncmp(pchFirst, "/usr/bin/perl", 13) == 0) || (cchFirst >= 17 && strncmp(pchFirst, "/usr/bin/env perl", 17) == 0) ) pszTreatAs = "perl"; -Index: VirtualBox-5.2.12/src/libs/libxml2-2.9.4/configure +Index: VirtualBox-5.2.16/src/libs/libxml2-2.9.4/configure =================================================================== ---- VirtualBox-5.2.12.orig/src/libs/libxml2-2.9.4/configure -+++ VirtualBox-5.2.12/src/libs/libxml2-2.9.4/configure +--- VirtualBox-5.2.16.orig/src/libs/libxml2-2.9.4/configure ++++ VirtualBox-5.2.16/src/libs/libxml2-2.9.4/configure @@ -15153,10 +15153,10 @@ PYTHON_SITE_PACKAGES= PYTHON_TESTS= pythondir= @@ -79,10 +79,10 @@ Index: VirtualBox-5.2.12/src/libs/libxml2-2.9.4/configure { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_path_PYTHON+:} false; then : -Index: VirtualBox-5.2.12/src/VBox/ValidationKit/testboxscript/setup.sh +Index: VirtualBox-5.2.16/src/VBox/ValidationKit/testboxscript/setup.sh =================================================================== ---- VirtualBox-5.2.12.orig/src/VBox/ValidationKit/testboxscript/setup.sh -+++ VirtualBox-5.2.12/src/VBox/ValidationKit/testboxscript/setup.sh +--- VirtualBox-5.2.16.orig/src/VBox/ValidationKit/testboxscript/setup.sh ++++ VirtualBox-5.2.16/src/VBox/ValidationKit/testboxscript/setup.sh @@ -644,7 +644,7 @@ import sys;\ x = sys.version_info[0] == 2 and (sys.version_info[1] >= 6 or (sys.version_info[1] == 5 and sys.version_info[2] >= 1));\ sys.exit(not x);\ @@ -92,10 +92,10 @@ Index: VirtualBox-5.2.12/src/VBox/ValidationKit/testboxscript/setup.sh do python=`which ${python} 2> /dev/null` if [ -n "${python}" -a -x "${python}" ]; then -Index: VirtualBox-5.2.12/src/VBox/Installer/linux/rpm/VirtualBox.tmpl.spec +Index: VirtualBox-5.2.16/src/VBox/Installer/linux/rpm/VirtualBox.tmpl.spec =================================================================== ---- VirtualBox-5.2.12.orig/src/VBox/Installer/linux/rpm/VirtualBox.tmpl.spec -+++ VirtualBox-5.2.12/src/VBox/Installer/linux/rpm/VirtualBox.tmpl.spec +--- VirtualBox-5.2.16.orig/src/VBox/Installer/linux/rpm/VirtualBox.tmpl.spec ++++ VirtualBox-5.2.16/src/VBox/Installer/linux/rpm/VirtualBox.tmpl.spec @@ -20,7 +20,7 @@ %define %PYTHON% 1 %define VBOXDOCDIR %{_defaultdocdir}/%NAME% @@ -114,10 +114,10 @@ Index: VirtualBox-5.2.12/src/VBox/Installer/linux/rpm/VirtualBox.tmpl.spec %endif rm -rf sdk/installer mv nls $RPM_BUILD_ROOT/usr/share/virtualbox -Index: VirtualBox-5.2.12/src/libs/libxml2-2.9.4/libxml.spec.in +Index: VirtualBox-5.2.16/src/libs/libxml2-2.9.4/libxml.spec.in =================================================================== ---- VirtualBox-5.2.12.orig/src/libs/libxml2-2.9.4/libxml.spec.in -+++ VirtualBox-5.2.12/src/libs/libxml2-2.9.4/libxml.spec.in +--- VirtualBox-5.2.16.orig/src/libs/libxml2-2.9.4/libxml.spec.in ++++ VirtualBox-5.2.16/src/libs/libxml2-2.9.4/libxml.spec.in @@ -101,11 +101,11 @@ rm -fr %{buildroot} make install DESTDIR=%{buildroot} @@ -133,10 +133,10 @@ Index: VirtualBox-5.2.12/src/libs/libxml2-2.9.4/libxml.spec.in rm -f $RPM_BUILD_ROOT%{_libdir}/*.la -Index: VirtualBox-5.2.12/src/libs/libxml2-2.9.4/libxml2.spec +Index: VirtualBox-5.2.16/src/libs/libxml2-2.9.4/libxml2.spec =================================================================== ---- VirtualBox-5.2.12.orig/src/libs/libxml2-2.9.4/libxml2.spec -+++ VirtualBox-5.2.12/src/libs/libxml2-2.9.4/libxml2.spec +--- VirtualBox-5.2.16.orig/src/libs/libxml2-2.9.4/libxml2.spec ++++ VirtualBox-5.2.16/src/libs/libxml2-2.9.4/libxml2.spec @@ -103,7 +103,7 @@ make install DESTDIR=%{buildroot} %if 0%{?with_python3} diff --git a/virtualbox.changes b/virtualbox.changes index 6b1bba9..948ab97 100644 --- a/virtualbox.changes +++ b/virtualbox.changes @@ -1,3 +1,17 @@ +------------------------------------------------------------------- +Sat Aug 4 14:48:02 UTC 2018 - Larry.Finger@gmail.com + +- Version bump to 5.2.16 (released July 17 2018 by Oracle) + +This is a maintenance release. The following items were fixed and/or added: + +OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357) +Linux: build for openSUSE 15.0 (bug #17554) +Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna + +This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086, +CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667. + ------------------------------------------------------------------- Tue Jul 3 01:17:37 UTC 2018 - Larry.Finger@gmail.com diff --git a/virtualbox.spec b/virtualbox.spec index 42daff8..24edfe4 100644 --- a/virtualbox.spec +++ b/virtualbox.spec @@ -40,7 +40,7 @@ python3 -O -c "import sys, os, compileall; br='%{buildroot}'; compileall.compile %define _udevrulesdir %{_sysconfdir}/udev/rules.d Name: virtualbox # ********* If the VB version exceeds 5.2.x, notify the libvirt maintainer!! -Version: 5.2.14 +Version: 5.2.16 Release: 0 Summary: VirtualBox is an Emulator License: GPL-2.0-or-later @@ -165,6 +165,7 @@ BuildRequires: libcurl-devel BuildRequires: libelf-devel BuildRequires: libidl-devel BuildRequires: libopenssl-devel +BuildRequires: libopus-devel BuildRequires: libqt5-linguist BuildRequires: libqt5-qtbase-devel BuildRequires: libqt5-qtx11extras-devel @@ -474,7 +475,6 @@ rm -rf src/libs/{libpng-*,libxml2-*,libxslt-*,zlib-*,boost-*} --disable-java \ --disable-docs \ --enable-webservice \ - --with-mkisofs=/bin/true \ --with-makeself=/bin/true # configure actually warns we should source env.sh (which seems like it could influence the build...)