|
|
511.
|
|
|
Now that we have the source package, we need to patch it to fix the vulnerability. You may use whatever patch method that is appropriate for the package, but this example will use ``edit-patch`` (from the ubuntu-dev-tools package). ``edit-patch`` is the easiest way to patch packages and it is basically a wrapper around every other patch system you can imagine.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:39
|
|
|
512.
|
|
|
To create your patch using ``edit-patch``::
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:45
|
|
|
513.
|
|
|
This will apply the existing patches and put the packaging in a temporary directory. Now edit the files needed to fix the vulnerability. Often upstream will have provided a patch so you can apply that patch::
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:50
|
|
|
514.
|
|
|
After making the necessary changes, you just hit Ctrl-D or type exit to leave the temporary shell.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:56
|
|
|
515.
|
|
|
Formatting the changelog and patches
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:60
|
|
|
516.
|
|
|
After applying your patches you will want to update the changelog. The ``dch`` command is used to edit the ``debian/changelog`` file and ``edit-patch`` will launch ``dch`` automatically after un-applying all the patches. If you are not using ``edit-patch``, you can launch ``dch -i`` manually. Unlike with regular patches, you should use the following format (note the distribution name uses precise-security since this is a security update for Precise) for security updates::
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:62
|
|
|
517.
|
|
|
Update your patch to use the appropriate patch tags. Your patch should have at a minimum the Origin, Description and Bug-Ubuntu tags. For example, edit debian/patches/99-fix-a-vulnerability.patch to have something like::
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:79
|
|
|
518.
|
|
|
Multiple vulnerabilities can be fixed in the same security upload; just be sure to use different patches for different vulnerabilities.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:90
|
|
|
519.
|
|
|
Test and Submit your work
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:94
|
|
|
520.
|
|
|
At this point the process is the same as for :doc:`fixing a regular bug in Ubuntu<./fixing-a-bug>`. Specifically, you will want to:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../ubuntu-packaging-guide/security-and-stable-release-updates.rst:96
|
