-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hi,
recently the expat upstream sources have been renamed to
${PN}-{PV}-RENAMED-VULNERABLE-PLEASE-USE-2.4.1-INSTEAD.tar.xz
which causes the fetch to fail. This effects all layers except master.
IMO we now have two options:
1. change the SRC_URI and backport security fixes (which seems sensible
for the dunfell LTS branch)
2. update the recipes to use 2.4.1
- --
With best regards
Jasper Orschulko
DevOps Engineer
Tel. +49 30 58 58 14 265
Fax +49 30 58 58 14 999
jasper.orschu...@iris-sensing.com
• • • • • • • • • • • • • • • • • • • • • • • • • •
iris-GmbH
infrared & intelligent sensors
Ostendstraße 1-14 | 12459 Berlin
https://iris-sensing.com/
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEE4WyPMIC5Ap4+Ooo1Ygqew07VMNUFAmDJ4sYACgkQYgqew07V
MNVEMAf9GQsWGjXK1vX+EQAU63VejQexh+KogMmHbRgT2e/9DwOXxs78zfL0/BLh
wWg9ijseom12nApdZHzjeSGs6ZAJUVVIDJfEqjfHAT06ft1yJ0K06tf06zXxr2bI
YTu9yXwn4wugXwmAjfEKn5j0lUMZvgGaE2PsTi40u70GjAK5dTTzZ29apwkfQOG9
qSZ75aL1DjEa2RM8LmgmHZlpFSIZsBTHPgf1WQmlcOupURSRAMJ2wqPDUuu3Zy1Q
IeMiEF6sQVI7M5m69Ia8U2t9l/5eR4x8vfnJJEbBmC8EJAwbDp987dey35Q5cex7
N0ocaNz+Gei2Aenot+qd30mgE1so1w==
=7Zqx
-----END PGP SIGNATURE-----
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#153005):
https://lists.openembedded.org/g/openembedded-core/message/153005
Mute This Topic: https://lists.openembedded.org/mt/83578374/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
