starlingx/tools
Code Issues Proposed changes

Debian: dbus: fix multiple CVEs

Browse Source 
Upgrade dbus related packages' version from 1.12.20-2 to
1.12.24-0+deb11u1 to fix CVE-2022-42010/CVE-2022-42011/CVE-2022-42012.
Add package libdbus-1 to fix the issue when building systemd:
The following packages have unmet dependencies:
 libdbus-1-dev : Depends: libdbus-1-3 (= 1.12.20-2) but 1.12.24-0+deb11u1 is to be installed

Test Plan:
 Pass: downloader
 Pass: build-pkgs --clean --all
 Pass: build-image
 Pass: boot

Closes-bug: #2021465

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Change-Id: I517be485f204a0a881bed82a544e6f368a955e27
This commit is contained in:
Li Zhou 2023-06-24 22:53:01 -07:00
parent 477d2058c2
commit 0573d689b7
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
debian-mirror-tools/config/debian/common/base-bullseye.lst
View File

@ -56,8 +56,8 @@ cryptsetup-bin 2:2.3.7-1+deb11u1
curl 7.74.0-1.3+deb11u7 https://snapshot.debian.org/archive/debian/20230304T024659Z/pool/main/c/curl/curl_7.74.0-1.3%2Bdeb11u7_amd64.deb
dash 0.5.11+git20200708+dd9ef66-5
dbconfig-common 2.0.19
dbus 1.12.20-2
dbus-user-session 1.12.20-2
dbus 1.12.24-0+deb11u1 https://snapshot.debian.org/archive/debian/20221011T212733Z/pool/main/d/dbus/dbus_1.12.24-0%2Bdeb11u1_amd64.deb
dbus-user-session 1.12.24-0+deb11u1 https://snapshot.debian.org/archive/debian/20221011T212733Z/pool/main/d/dbus/dbus-user-session_1.12.24-0%2Bdeb11u1_amd64.deb
dconf-gsettings-backend 0.38.0-2
dconf-service 0.38.0-2
debconf 1.5.77
@ -303,7 +303,8 @@ libdatrie1 0.2.13-1
libdaxctl1 71.1-1
libdb5.3 5.3.28+dfsg1-0.8
libdbi1 0.9.0-6
libdbus-1-3 1.12.20-2
libdbus-1-3 1.12.24-0+deb11u1 https://snapshot.debian.org/archive/debian/20221011T212733Z/pool/main/d/dbus/libdbus-1-3_1.12.24-0%2Bdeb11u1_amd64.deb
libdbus-1-dev 1.12.24-0+deb11u1 https://snapshot.debian.org/archive/debian/20221011T212733Z/pool/main/d/dbus/libdbus-1-dev_1.12.24-0%2Bdeb11u1_amd64.deb
libdconf1 0.38.0-2
libdebconfclient0 0.260
libdebhelper-perl 13.3.4