No comments on this?   I do not see it has been accepted.     Joe

-----Original Message-----
From: openembedded-devel@lists.openembedded.org 
<openembedded-devel@lists.openembedded.org> On Behalf Of Joe Slater
Sent: Thursday, September 3, 2020 6:58 AM
To: openembedded-devel@lists.openembedded.org
Cc: Slater, Joseph <joe.sla...@windriver.com>; MacLeod, Randy 
<randy.macl...@windriver.com>
Subject: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's

Fix CVE-2020-15890 and CVE-2020-24372.

Also change PV format because the reference to 2.1.0-beta3 was already far 
behind the SRCREV.  Now, base PV on the branch name and date of SRCREV commit.

Signed-off-by: Joe Slater <joe.sla...@windriver.com>
---
 meta-oe/recipes-devtools/luajit/luajit_git.bb | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/meta-oe/recipes-devtools/luajit/luajit_git.bb 
b/meta-oe/recipes-devtools/luajit/luajit_git.bb
index cc9039416..820722195 100644
--- a/meta-oe/recipes-devtools/luajit/luajit_git.bb
+++ b/meta-oe/recipes-devtools/luajit/luajit_git.bb
@@ -3,13 +3,15 @@ LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=d739bb9250a55c124a545b588fd76771"
 HOMEPAGE = "http://luajit.org";
 
-PV = "2.1.0~beta3"
-SRCREV = "0ad60ccbc3768fa8e3e726858adf261950edbc22"
 SRC_URI = "git://luajit.org/git/luajit-2.0.git;protocol=http;branch=v2.1 \
            
file://0001-Do-not-strip-automatically-this-leaves-the-stripping.patch \
            file://clang.patch \
            "
 
+# Set PV to the branch and date associated with SRCREV.
+PV = "v2.1-200809"
+SRCREV = "94d4abcca966df2cc423e821bcacd04898f73117"
+
 S = "${WORKDIR}/git"
 
 inherit pkgconfig binconfig siteinfo
--
2.17.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#87010): 
https://lists.openembedded.org/g/openembedded-devel/message/87010
Mute This Topic: https://lists.openembedded.org/mt/76607300/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to