Add Article syspatch libx11, vmd
This commit is contained in:
HUC Stéphane
parent
f5a5cbbc29
commit
e0313309e5
GPG Key ID:
C4ED64222D9B037F
|
|
@ -0,0 +1,100 @@
|
|||
---
|
||||
categories: ['Syspatch']
|
||||
date: 2021-05-18T18:18:12+02:00
|
||||
description: "Correctif OpenBSD: libX11 & vmd"
|
||||
draft: false
|
||||
tags: ['Syspatch','libX11','vmd','6.8','6.9']
|
||||
title: "Syspatch : libX11, vmd (2021/05/18)"
|
||||
---
|
||||
|
||||
## Correctifs de sécurité
|
||||
|
||||
1/ pour la libX11 :
|
||||
|
||||
**Les vérifications des longueurs de requêtes dans la bibliothèque libX11 étaient manquantes.**
|
||||
|
||||
- Architectures ciblées : toutes celles supportées par le projet OpenBSD.
|
||||
|
||||
2/ pour vmd :
|
||||
|
||||
**Les pilotes virtio des invités de vmd pouvaient provoquer des débordements de pile en fabriquant des longueurs de descripteurs virtio invalides.**
|
||||
|
||||
- Architecture ciblée : amd64.
|
||||
|
||||
---
|
||||
|
||||
Pour toutes les architectures supportées :
|
||||
- amd64, arm64, i386 par `syspatch`
|
||||
- armv7, hppa, landisk, loongson, luna88k, macppc, sparc64 par [recompilation](#recompilation)
|
||||
|
||||
---
|
||||
|
||||
## Syspatch
|
||||
|
||||
Cette étape ne concerne que les architectures amd64, arm64, i386 !
|
||||
|
||||
```ksh
|
||||
# syspatch
|
||||
```
|
||||
|
||||
Ensuite [redémarrez](#restart) le service, *si utilisé* !
|
||||
|
||||
## Recompilation
|
||||
|
||||
Pour toute autre architecture prise en charge par le projet OpenBSD, voici
|
||||
les étapes de recompilation nécessaires :
|
||||
|
||||
Après avoir téléchargé le correctif, vérifiez-le, et appliquez-le :
|
||||
|
||||
⇒ Pour la libX11 :
|
||||
|
||||
- pour 6.9
|
||||
|
||||
```ksh
|
||||
# wget https://ftp.openbsd.org/pub/OpenBSD/patches/6.9/common/002_libx11.patch.sig
|
||||
# signify -Vep /etc/signify/openbsd-69-base.pub -x 002_libx11.patch.sig \
|
||||
-m - | (cd /usr/src && patch -p0)
|
||||
```
|
||||
|
||||
- pour 6.8
|
||||
|
||||
```ksh
|
||||
# wget https://ftp.openbsd.org/pub/OpenBSD/patches/6.8/common/019_libx11.patch.sig
|
||||
# signify -Vep /etc/signify/openbsd-68-base.pub -x 019_libx11.patch.sig \
|
||||
-m - | (cd /usr/src && patch -p0)
|
||||
```
|
||||
|
||||
- la phase de recompilation :
|
||||
|
||||
```ksh
|
||||
$ cd /usr/xenocara/lib/libX11
|
||||
# make -f Makefile.bsd-wrapper obj
|
||||
# make -f Makefile.bsd-wrapper build
|
||||
```
|
||||
|
||||
Ensuite [redémarrez](#restart) le service **xenodm**, *si utilisé* !
|
||||
|
||||
⇒ pour vmd, utilisez simplement `syspatch`…
|
||||
|
||||
Ensuite [redémarrez](#restart) le service **vmd**, voire les VM, *si utilisés* !
|
||||
|
||||
## Restart
|
||||
|
||||
```ksh
|
||||
# rcctl restart vmd xenodm
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
Plus d'informations sur les pages d'Errata [6.9][1] et [6.8][2]… <br>
|
||||
*et leurs versions FR respectives : [6.9 FR][3] et [6.8 FR][4].*
|
||||
|
||||
---
|
||||
|
||||
[1]: https://openbsd.org/errata69html
|
||||
[2]: https://openbsd.org/errata68.html
|
||||
[3]: https://wiki.openbsd.fr.eu.org/doku.php/openbsd.org/errata69
|
||||
[4]: https://wiki.openbsd.fr.eu.org/doku.php/openbsd.org/errata68
|
||||
|
||||
|
||||
|
||||
|
|
@ -58,7 +58,7 @@ Ensuite, préférez [redémarrer](#restart) le service et vos VM.
|
|||
---
|
||||
|
||||
Plus d'informations sur les pages d'Errata [6.9][1]… <br>
|
||||
*et leurs versions FR respectives : [6.9 FR][3].*
|
||||
*et la versions FR respective : [6.9 FR][3].*
|
||||
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@
|
|||
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="fr">
|
||||
<title type="text">OpenBSD Pour Tous 🐡</title>
|
||||
<subtitle type="html">OBSD4* : Site de la communauté francophone autour d'OpenBSD.</subtitle>
|
||||
<updated>2021-05-04T12:47:31+02:00</updated>
|
||||
<updated>2021-05-04T12:52:50+02:00</updated>
|
||||
<id>https://openbsd.fr.eu.org/</id>
|
||||
<link rel="alternate" type="text/html" href="https://openbsd.fr.eu.org/" />
|
||||
<link rel="self" type="application/atom+xml" href="https://openbsd.fr.eu.org/atom.xml" />
|
||||
|
|
@ -323,7 +323,7 @@ X509_policy_check(3) repeatedly.
|
|||
<title type="text">Syspatch : vmd (2021/05/04)</title>
|
||||
<link rel="alternate" type="text/html" href="https://openbsd.fr.eu.org/posts/2021/05/04/syspatch-vmd-6.9/" />
|
||||
<id>https://openbsd.fr.eu.org/posts/2021/05/04/syspatch-vmd-6.9/</id>
|
||||
<updated>2021-05-04T12:34:08+02:00</updated>
|
||||
<updated>2021-05-04T12:52:04+02:00</updated>
|
||||
<published>2021-05-04T12:26:10+02:00</published>
|
||||
<author>
|
||||
<name>OBSD4a</name>
|
||||
|
|
@ -336,8 +336,7 @@ X509_policy_check(3) repeatedly.
|
|||
<p><strong>Les VM invités de vmd peuvent déclencher des messages de journalisation excessifs sur l&rsquo;hôte par l&rsquo;envoi de certains paquets réseaux.</strong></p>
|
||||
<p>Pour toutes les architectures supportées :</p>
|
||||
<ul>
|
||||
<li>amd64, arm64, i386 par <code>syspatch</code></li>
|
||||
<li>armv7, hppa, landisk, loongson, luna88k, macppc, sparc64 par <a href="https://openbsd.fr.eu.org/posts/2021/05/04/syspatch-vmd-6.9/#recompilation">recompilation</a></li>
|
||||
<li>amd64 par <code>syspatch</code> ou par <a href="https://openbsd.fr.eu.org/posts/2021/05/04/syspatch-vmd-6.9/#recompilation">recompilation</a></li>
|
||||
</ul>
|
||||
<hr>
|
||||
<h2 id="syspatch">Syspatch</h2>
|
||||
|
|
@ -352,12 +351,8 @@ X509_policy_check(3) repeatedly.
|
|||
</div>
|
||||
</div><p>Ensuite, préférez <a href="https://openbsd.fr.eu.org/posts/2021/05/04/syspatch-vmd-6.9/#restart">redémarrer</a> le service et vos VM.</p>
|
||||
<h2 id="recompilation">Recompilation</h2>
|
||||
<p>Pour toute autre architecture prise en charge par le projet OpenBSD, voici
|
||||
les étapes de recompilation nécessaires :</p>
|
||||
<p>Voici les étapes de recompilation nécessaires :</p>
|
||||
<p>⇒ Après avoir téléchargé le correctif, vérifiez-le, et appliquez-le :</p>
|
||||
<ul>
|
||||
<li>Pour 6.9 :</li>
|
||||
</ul>
|
||||
<div class="highlight"><div class="chroma">
|
||||
<table class="lntable"><tr><td class="lntd">
|
||||
<pre class="chroma"><code><span class="lnt">1
|
||||
|
|
|
|||
|
|
@ -54,7 +54,7 @@
|
|||
"@context": "https://schema.org",
|
||||
"@type": "WebPage",
|
||||
"datePublished": "2016-09-01T01:01:01+00:00",
|
||||
"dateModified": "2021-05-04T12:44:24+02:00",
|
||||
"dateModified": "2021-05-04T12:52:04+02:00",
|
||||
"url": "https://openbsd.fr.eu.org/categories/",
|
||||
"name": "Categories",
|
||||
"description": "OBSD4* : Site de la communauté francophone autour d'OpenBSD.",
|
||||
|
|
|
|||
|
|
@ -54,7 +54,7 @@
|
|||
"@context": "https://schema.org",
|
||||
"@type": "WebPage",
|
||||
"datePublished": "2016-09-01T01:01:01+00:00",
|
||||
"dateModified": "2021-05-04T12:34:08+02:00",
|
||||
"dateModified": "2021-05-04T12:52:04+02:00",
|
||||
"url": "https://openbsd.fr.eu.org/categories/syspatch/",
|
||||
"name": "Categories: Syspatch",
|
||||
"description": "OBSD4* : Site de la communauté francophone autour d'OpenBSD.",
|
||||
|
|
|
|||
|
|
@ -56,7 +56,7 @@
|
|||
"@context": "https://schema.org",
|
||||
"@type": "WebSite",
|
||||
"datePublished": "2016-09-01T01:01:01+00:00",
|
||||
"dateModified": "2021-05-04T12:44:24+02:00",
|
||||
"dateModified": "2021-05-04T12:52:04+02:00",
|
||||
"url": "https://openbsd.fr.eu.org/",
|
||||
"description": "OBSD4* : Site de la communauté francophone autour d'OpenBSD.",
|
||||
"image": "https://openbsd.fr.eu.org/Puffy.svg",
|
||||
|
|
@ -282,7 +282,7 @@ Cette version inclut les changements suivants :
|
|||
|
||||
|
||||
|
||||
<time datetime="2021-05-04T12:34:08+02:00" class="post-meta-item modified dt-updated"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" class="icon post-meta-icon"><path d="M400 64h-48V12c0-6.627-5.373-12-12-12h-40c-6.627 0-12 5.373-12 12v52H160V12c0-6.627-5.373-12-12-12h-40c-6.627 0-12 5.373-12 12v52H48C21.49 64 0 85.49 0 112v352c0 26.51 21.49 48 48 48h352c26.51 0 48-21.49 48-48V112c0-26.51-21.49-48-48-48zm-6 400H54a6 6 0 0 1-6-6V160h352v298a6 6 0 0 1-6 6zm-52.849-200.65L198.842 404.519c-4.705 4.667-12.303 4.637-16.971-.068l-75.091-75.699c-4.667-4.705-4.637-12.303.068-16.971l22.719-22.536c4.705-4.667 12.303-4.637 16.97.069l44.104 44.461 111.072-110.181c4.705-4.667 12.303-4.637 16.971.068l22.536 22.718c4.667 4.705 4.636 12.303-.069 16.97z"/></svg> 2021.5.4</time>
|
||||
<time datetime="2021-05-04T12:52:04+02:00" class="post-meta-item modified dt-updated"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" class="icon post-meta-icon"><path d="M400 64h-48V12c0-6.627-5.373-12-12-12h-40c-6.627 0-12 5.373-12 12v52H160V12c0-6.627-5.373-12-12-12h-40c-6.627 0-12 5.373-12 12v52H48C21.49 64 0 85.49 0 112v352c0 26.51 21.49 48 48 48h352c26.51 0 48-21.49 48-48V112c0-26.51-21.49-48-48-48zm-6 400H54a6 6 0 0 1-6-6V160h352v298a6 6 0 0 1-6 6zm-52.849-200.65L198.842 404.519c-4.705 4.667-12.303 4.637-16.971-.068l-75.091-75.699c-4.667-4.705-4.637-12.303.068-16.971l22.719-22.536c4.705-4.667 12.303-4.637 16.97.069l44.104 44.461 111.072-110.181c4.705-4.667 12.303-4.637 16.971.068l22.536 22.718c4.667 4.705 4.636 12.303-.069 16.97z"/></svg> 2021.5.4</time>
|
||||
|
||||
|
||||
|
||||
|
|
@ -296,7 +296,7 @@ Cette version inclut les changements suivants :
|
|||
|
||||
|
||||
|
||||
<span class="post-meta-item wordcount"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" class="icon post-meta-icon"><path d="M497.9 142.1l-46.1 46.1c-4.7 4.7-12.3 4.7-17 0l-111-111c-4.7-4.7-4.7-12.3 0-17l46.1-46.1c18.7-18.7 49.1-18.7 67.9 0l60.1 60.1c18.8 18.7 18.8 49.1 0 67.9zM284.2 99.8L21.6 362.4.4 483.9c-2.9 16.4 11.4 30.6 27.8 27.8l121.5-21.3 262.6-262.6c4.7-4.7 4.7-12.3 0-17l-111-111c-4.8-4.7-12.4-4.7-17.1 0zM124.1 339.9c-5.5-5.5-5.5-14.3 0-19.8l154-154c5.5-5.5 14.3-5.5 19.8 0s5.5 14.3 0 19.8l-154 154c-5.5 5.5-14.3 5.5-19.8 0zM88 424h48v36.3l-64.5 11.3-31.1-31.1L51.7 376H88v48z"/></svg> 171</span>
|
||||
<span class="post-meta-item wordcount"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" class="icon post-meta-icon"><path d="M497.9 142.1l-46.1 46.1c-4.7 4.7-12.3 4.7-17 0l-111-111c-4.7-4.7-4.7-12.3 0-17l46.1-46.1c18.7-18.7 49.1-18.7 67.9 0l60.1 60.1c18.8 18.7 18.8 49.1 0 67.9zM284.2 99.8L21.6 362.4.4 483.9c-2.9 16.4 11.4 30.6 27.8 27.8l121.5-21.3 262.6-262.6c4.7-4.7 4.7-12.3 0-17l-111-111c-4.8-4.7-12.4-4.7-17.1 0zM124.1 339.9c-5.5-5.5-5.5-14.3 0-19.8l154-154c5.5-5.5 14.3-5.5 19.8 0s5.5 14.3 0 19.8l-154 154c-5.5 5.5-14.3 5.5-19.8 0zM88 424h48v36.3l-64.5 11.3-31.1-31.1L51.7 376H88v48z"/></svg> 149</span>
|
||||
|
||||
|
||||
|
||||
|
|
@ -310,7 +310,7 @@ Cette version inclut les changements suivants :
|
|||
<summary class="summary p-summary">
|
||||
Correctif de fiabilité : vmd Les VM invités de vmd peuvent déclencher des messages de journalisation excessifs sur l’hôte par l’envoi de certains paquets réseaux.
|
||||
Pour toutes les architectures supportées :
|
||||
amd64, arm64, i386 par syspatch armv7, hppa, landisk, loongson, luna88k, macppc, sparc64 par recompilation Syspatch Cette étape ne concerne que les architectures amd64, arm64, i386 !
|
||||
amd64 par syspatch ou par recompilation Syspatch Cette étape ne concerne que les architectures amd64, arm64, i386 !
|
||||
</summary>
|
||||
|
||||
<div class="read-more-container">
|
||||
|
|
|
|||
|
|
@ -54,7 +54,7 @@
|
|||
"@context": "https://schema.org",
|
||||
"@type": "WebPage",
|
||||
"datePublished": "2016-09-01T01:01:01+00:00",
|
||||
"dateModified": "2021-05-04T12:44:24+02:00",
|
||||
"dateModified": "2021-05-04T12:52:04+02:00",
|
||||
"url": "https://openbsd.fr.eu.org/posts/",
|
||||
"name": "Posts",
|
||||
"description": "OBSD4* : Site de la communauté francophone autour d'OpenBSD.",
|
||||
|
|
|
|||
|
|
@ -23,7 +23,7 @@
|
|||
|
||||
<copyright>[CC 0](https://creativecommons.org/publicdomain/zero/1.0/deed.fr)</copyright>
|
||||
|
||||
<lastBuildDate>Tue, 04 May 2021 12:47:31 +0200</lastBuildDate>
|
||||
<lastBuildDate>Tue, 04 May 2021 12:52:50 +0200</lastBuildDate>
|
||||
|
||||
<atom:link rel="self" type="application/rss+xml" href="https://openbsd.fr.eu.org/rss.xml" />
|
||||
|
||||
|
|
@ -342,8 +342,7 @@ X509_policy_check(3) repeatedly.
|
|||
<p><strong>Les VM invités de vmd peuvent déclencher des messages de journalisation excessifs sur l&rsquo;hôte par l&rsquo;envoi de certains paquets réseaux.</strong></p>
|
||||
<p>Pour toutes les architectures supportées :</p>
|
||||
<ul>
|
||||
<li>amd64, arm64, i386 par <code>syspatch</code></li>
|
||||
<li>armv7, hppa, landisk, loongson, luna88k, macppc, sparc64 par <a href="https://openbsd.fr.eu.org/posts/2021/05/04/syspatch-vmd-6.9/#recompilation">recompilation</a></li>
|
||||
<li>amd64 par <code>syspatch</code> ou par <a href="https://openbsd.fr.eu.org/posts/2021/05/04/syspatch-vmd-6.9/#recompilation">recompilation</a></li>
|
||||
</ul>
|
||||
<hr>
|
||||
<h2 id="syspatch">Syspatch</h2>
|
||||
|
|
@ -358,12 +357,8 @@ X509_policy_check(3) repeatedly.
|
|||
</div>
|
||||
</div><p>Ensuite, préférez <a href="https://openbsd.fr.eu.org/posts/2021/05/04/syspatch-vmd-6.9/#restart">redémarrer</a> le service et vos VM.</p>
|
||||
<h2 id="recompilation">Recompilation</h2>
|
||||
<p>Pour toute autre architecture prise en charge par le projet OpenBSD, voici
|
||||
les étapes de recompilation nécessaires :</p>
|
||||
<p>Voici les étapes de recompilation nécessaires :</p>
|
||||
<p>⇒ Après avoir téléchargé le correctif, vérifiez-le, et appliquez-le :</p>
|
||||
<ul>
|
||||
<li>Pour 6.9 :</li>
|
||||
</ul>
|
||||
<div class="highlight"><div class="chroma">
|
||||
<table class="lntable"><tr><td class="lntd">
|
||||
<pre class="chroma"><code><span class="lnt">1
|
||||
|
|
|
|||
File diff suppressed because one or more lines are too long
|
|
@ -9,7 +9,7 @@
|
|||
|
||||
<url>
|
||||
<loc>https://openbsd.fr.eu.org/categories/</loc>
|
||||
<lastmod>2021-05-04T12:44:24+02:00</lastmod>
|
||||
<lastmod>2021-05-04T12:52:04+02:00</lastmod>
|
||||
</url>
|
||||
|
||||
<url>
|
||||
|
|
@ -29,42 +29,42 @@
|
|||
|
||||
<url>
|
||||
<loc>https://openbsd.fr.eu.org/</loc>
|
||||
<lastmod>2021-05-04T12:44:24+02:00</lastmod>
|
||||
<lastmod>2021-05-04T12:52:04+02:00</lastmod>
|
||||
</url>
|
||||
|
||||
<url>
|
||||
<loc>https://openbsd.fr.eu.org/posts/</loc>
|
||||
<lastmod>2021-05-04T12:44:24+02:00</lastmod>
|
||||
<lastmod>2021-05-04T12:52:04+02:00</lastmod>
|
||||
</url>
|
||||
|
||||
<url>
|
||||
<loc>https://openbsd.fr.eu.org/tags/</loc>
|
||||
<lastmod>2021-05-04T12:44:24+02:00</lastmod>
|
||||
<lastmod>2021-05-04T12:52:04+02:00</lastmod>
|
||||
</url>
|
||||
|
||||
<url>
|
||||
<loc>https://openbsd.fr.eu.org/tags/6.9/</loc>
|
||||
<lastmod>2021-05-04T12:34:08+02:00</lastmod>
|
||||
<lastmod>2021-05-04T12:52:04+02:00</lastmod>
|
||||
</url>
|
||||
|
||||
<url>
|
||||
<loc>https://openbsd.fr.eu.org/tags/syspatch/</loc>
|
||||
<lastmod>2021-05-04T12:34:08+02:00</lastmod>
|
||||
<lastmod>2021-05-04T12:52:04+02:00</lastmod>
|
||||
</url>
|
||||
|
||||
<url>
|
||||
<loc>https://openbsd.fr.eu.org/categories/syspatch/</loc>
|
||||
<lastmod>2021-05-04T12:34:08+02:00</lastmod>
|
||||
<lastmod>2021-05-04T12:52:04+02:00</lastmod>
|
||||
</url>
|
||||
|
||||
<url>
|
||||
<loc>https://openbsd.fr.eu.org/posts/2021/05/04/syspatch-vmd-6.9/</loc>
|
||||
<lastmod>2021-05-04T12:34:08+02:00</lastmod>
|
||||
<lastmod>2021-05-04T12:52:04+02:00</lastmod>
|
||||
</url>
|
||||
|
||||
<url>
|
||||
<loc>https://openbsd.fr.eu.org/tags/vmd/</loc>
|
||||
<lastmod>2021-05-04T12:34:08+02:00</lastmod>
|
||||
<lastmod>2021-05-04T12:52:04+02:00</lastmod>
|
||||
</url>
|
||||
|
||||
<url>
|
||||
|
|
|
|||
|
|
@ -54,7 +54,7 @@
|
|||
"@context": "https://schema.org",
|
||||
"@type": "WebPage",
|
||||
"datePublished": "2016-09-01T01:01:01+00:00",
|
||||
"dateModified": "2021-05-04T12:44:24+02:00",
|
||||
"dateModified": "2021-05-04T12:52:04+02:00",
|
||||
"url": "https://openbsd.fr.eu.org/tags/",
|
||||
"name": "Tags",
|
||||
"description": "OBSD4* : Site de la communauté francophone autour d'OpenBSD.",
|
||||
|
|
|
|||
|
|
@ -54,7 +54,7 @@
|
|||
"@context": "https://schema.org",
|
||||
"@type": "WebPage",
|
||||
"datePublished": "2016-09-01T01:01:01+00:00",
|
||||
"dateModified": "2021-05-04T12:34:08+02:00",
|
||||
"dateModified": "2021-05-04T12:52:04+02:00",
|
||||
"url": "https://openbsd.fr.eu.org/tags/syspatch/",
|
||||
"name": "Tags: Syspatch",
|
||||
"description": "OBSD4* : Site de la communauté francophone autour d'OpenBSD.",
|
||||
|
|
|
|||
Reference in New Issue