[packages/erlang] Up to 29.1.2; SECURITY fixes

arekm arekm at pld-linux.org
Thu Oct 15 00:18:13 CEST 2026


commit 052196824aaf88ad09788d9daf854510fdd3cf5a
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Thu Oct 15 00:14:35 2026 +0200

    Up to 29.1.2; SECURITY fixes
    
    CVE-2016-1000107, CVE-2025-48038, CVE-2025-48039, CVE-2025-48040, CVE-2025-48041, CVE-2026-21620, CVE-2026-23941, CVE-2026-23942, CVE-2026-23943, CVE-2026-28808, CVE-2026-28810, CVE-2026-32144, CVE-2026-32147, CVE-2026-42789, CVE-2026-42790, CVE-2026-42791, CVE-2026-42792, CVE-2026-47078, CVE-2026-48855, CVE-2026-48856, CVE-2026-48858, CVE-2026-48860, CVE-2026-49759, CVE-2026-49760, CVE-2026-53422, CVE-2026-54886, CVE-2026-54887, CVE-2026-54890, CVE-2026-54891, CVE-2026-55737, CVE-2026-55950, CVE-2026-55951, CVE-2026-55952, CVE-2026-55953, CVE-2026-58227, CVE-2026-59250, CVE-2026-59251, CVE-2026-59696, CVE-2026-65634, CVE-2026-66357, CVE-2026-66835, CVE-2026-68956, CVE-2026-69664, CVE-2026-70399, CVE-2026-70405, CVE-2026-70409, CVE-2026-71380, CVE-2026-71562, CVE-2026-73270, CVE-2026-73276, CVE-2026-73812, CVE-2026-74835, CVE-2026-74994, CVE-2026-75538, CVE-2026-89422, CVE-2026-94200, CVE-2026-105236

 erlang.spec      | 44 +++++++++++++++++++++++++++++---------------
 no-file-fd.patch | 11 -----------
 2 files changed, 29 insertions(+), 26 deletions(-)
---
diff --git a/erlang.spec b/erlang.spec
index 55e3a32..3a65f6e 100644
--- a/erlang.spec
+++ b/erlang.spec
@@ -12,47 +12,52 @@
 %bcond_without	odbc		# without unixODBC support
 %bcond_without	doc		# build documentation
 %bcond_without	systemd		# systemd support
+%bcond_without	wx		# wxWidgets GUI (observer, debugger, et)
 #
 
 %define		otp		%(echo %version | cut -f1 -d.)
-%define		erts_version	15.2.7
+%define		erts_version	17.1.1
 
 Summary:	OpenSource Erlang/OTP
 Summary(pl.UTF-8):	Erlang/OTP z otwartymi źródłami
 Name:		erlang
-Version:	27.3.4.1
+Version:	29.1.2
 Release:	1
 Epoch:		2
 %define		_version	%(echo %{version} | tr _ -)
 License:	APLv2
 Group:		Development/Languages
 Source0:	https://github.com/erlang/otp/archive/OTP-%{version}.tar.gz
-# Source0-md5:	0a299cd8e440b10a71a837978fb6bdbc
+# Source0-md5:	5ee3e77d6badc04dbd8e96dcf53ede5f
 Source2:	epmd.service
 Source3:	epmd.socket
 Source4:	epmd at .service
 Source5:	epmd at .socket
 Patch0:		%{name}-fPIC.patch
 Patch1:		x32.patch
-Patch2:		no-file-fd.patch
 Patch3:		%{name}-ac.patch
 URL:		http://www.erlang.org/
 %{?with_java:BuildRequires:	/usr/bin/jar}
 BuildRequires:	autoconf >= 2.69
-BuildRequires:	automake
-%{?with_doc:BuildRequires:	ex_doc}
+%{?with_doc:BuildRequires:	ex_doc >= 0.40.4}
 BuildRequires:	flex
 %{?with_java:BuildRequires:	jdk >= 1.2}
+%{?with_wx:BuildRequires:	OpenGL-GLU-devel}
+%{?with_wx:BuildRequires:	OpenGL-devel}
 BuildRequires:	libsctp-devel
 BuildRequires:	libstdc++-devel
 BuildRequires:	ncurses-devel
 BuildRequires:	openssl-devel >= 0.9.7
-BuildRequires:	openssl-tools
 BuildRequires:	perl-base
 BuildRequires:	rpm-build >= 4.6
 BuildRequires:	rpmbuild(macros) >= 2.007
 %{?with_systemd:BuildRequires:	systemd-devel}
-BuildRequires:	xorg-lib-libX11-devel
+%if %{with wx}
+BuildRequires:	wxGTK3-unicode-devel >= 1:3.0.2
+BuildRequires:	wxGTK3-unicode-gl-devel >= 1:3.0.2
+%endif
+BuildRequires:	zlib-devel
+BuildRequires:	zstd-static >= 1.5.6
 %if %{with odbc}
 BuildRequires:	unixODBC-devel
 %else
@@ -103,12 +108,13 @@ Dokumentacja do Erlanga.
 %setup -q -n otp-OTP-%{_version}
 #%%patch -P0 -p1
 %patch -P1 -p1
-%patch -P2 -p1
 %patch -P3 -p1
 
 %build
 ./otp_build update_configure --no-commit
 
+# --without-wx breaks the build of debugger, observer and et (they need the wx
+# beams), so without wx only wx-config is hidden and the wx driver is skipped
 %configure \
 %ifarch %{ix86}
 %ifnarch %{x86_with_sse2}
@@ -118,19 +124,27 @@ Dokumentacja do Erlanga.
 %ifarch sparc
 	CFLAGS="%{rpmcflags} -mv8plus" \
 %endif
-%ifarch x32
-	--disable-hipe \
+%if %{with wx}
+	WX_CONFIG_NAME=%{_bindir}/wx-gtk3-unicode-config \
+%else
+	ac_cv_path_WX_CONFIG_PATH=no \
 %endif
+	--disable-builtin-zlib \
+	--disable-builtin-zstd \
 	--disable-silent-rules \
-	--enable-smp-support \
 	%{__enable_disable systemd} \
 	--with-javac%{!?with_java:=no} \
-	--with-ssl-lib-subdir=%{_lib}
+	--with-ssl-lib-subdir=%{_lib} \
+	%{?with_odbc:--with-odbc} \
+	%{?with_wx:--with-wx}
 
 rm -f lib/ssl/SKIP
 ERL_TOP=`pwd`; export ERL_TOP
+# lib/odbc builds odbcserver only when ODBC_CAN_BUILD_DRIVER is set in make's
+# environment, configure does not export it: https://github.com/erlang/otp/issues/11705
  %{__make} -j1 \
 	TARGET="%{_erl_target}" \
+	%{?with_odbc:ODBC_CAN_BUILD_DRIVER=true} \
 	|| { find . -name erl_crash.dump | xargs cat ; exit 1 ; }
 
 %{?with_doc:LC_ALL=C.UTF-8 %{__make} -j1 docs}
@@ -140,6 +154,7 @@ rm -rf $RPM_BUILD_ROOT
 
 %{__make} -j1 install \
 	TARGET="%{_erl_target}" \
+	%{?with_odbc:ODBC_CAN_BUILD_DRIVER=true} \
 	INSTALL_PREFIX=$RPM_BUILD_ROOT
 
 %if %{with doc}
@@ -161,7 +176,6 @@ install -D -p %{SOURCE5} $RPM_BUILD_ROOT%{systemdunitdir}/epmd at .socket
 %{__sed} -i -e '1s,/usr/bin/env escript,/usr/bin/escript,' \
 	$RPM_BUILD_ROOT%{_libdir}/%{name}/lib/diameter-*/bin/diameterc \
 	$RPM_BUILD_ROOT%{_libdir}/%{name}/lib/edoc-*/bin/edoc \
-	$RPM_BUILD_ROOT%{_libdir}/%{name}/lib/reltool-*/examples/{display_args,mnesia_core_dump_viewer} \
 	$RPM_BUILD_ROOT%{_libdir}/%{name}/lib/snmp-*/bin/snmpc \
 	$RPM_BUILD_ROOT%{_libdir}/%{name}/lib/snmp-*/src/compiler/snmpc.src
 
@@ -248,12 +262,12 @@ fi
 %dir %{_libdir}/%{name}/erts-%{erts_version}/lib/internal
 %{_libdir}/%{name}/erts-%{erts_version}/lib/internal/liberts_internal*.a
 %{_libdir}/%{name}/erts-%{erts_version}/lib/internal/libethread.a
+%{_libdir}/%{name}/erts-%{erts_version}/lib/internal/README
 #%{_libdir}/%{name}/erts-%{erts_version}/*.ear
 %dir %{_libdir}/%{name}/erts-%{erts_version}/bin
 %attr(755,root,root) %{_libdir}/%{name}/erts-%{erts_version}/bin/beam*
 %attr(755,root,root) %{_libdir}/%{name}/erts-%{erts_version}/bin/ct_run
 %attr(755,root,root) %{_libdir}/%{name}/erts-%{erts_version}/bin/dialyzer
-%attr(755,root,root) %{_libdir}/%{name}/erts-%{erts_version}/bin/dyn_erl
 %attr(755,root,root) %{_libdir}/%{name}/erts-%{erts_version}/bin/e*
 %attr(755,root,root) %{_libdir}/%{name}/erts-%{erts_version}/bin/heart*
 %attr(755,root,root) %{_libdir}/%{name}/erts-%{erts_version}/bin/inet_gethost
diff --git a/no-file-fd.patch b/no-file-fd.patch
deleted file mode 100644
index ec1e8ef..0000000
--- a/no-file-fd.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- otp-OTP-27.1.2/make/ex_doc_wrapper.in.orig	2024-10-17 10:41:53.000000000 +0200
-+++ otp-OTP-27.1.2/make/ex_doc_wrapper.in	2024-12-10 14:36:39.118655074 +0100
-@@ -35,7 +35,7 @@
- 
- ## Running the command where we redirect stderr to fd 1 and stdout to fd 3.
- ## We then use tee on the stderr (which is now fd 1) to print that to fd 4
--OUTPUT="$( { escript at EXEEXT@ "${EX_DOC}" "${ARGS[@]}"; } 2>&1 1>&3 | tee /dev/fd/4 )"
-+OUTPUT="$( { escript at EXEEXT@ "${EX_DOC}" "${ARGS[@]}"; } 2>&1 1>&3 | tee ex_doc.stderr >&4 && cat ex_doc.stderr && rm ex_doc.stderr )"
- 
- ## Close fd 3 and 4
- exec 3>&- 4>&-
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/erlang.git/commitdiff/052196824aaf88ad09788d9daf854510fdd3cf5a



More information about the pld-cvs-commit mailing list