Re: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's

2020-09-14 Thread Khem Raj 
2.1.0 will be next release whenever it happens, Current naming allows 
that to drop the string after ~ and 2.1.0 will sort above that. you 
might do somehting like  2.1.0~beta3+ perhaps.


On 9/14/20 9:09 AM, Slater, Joseph wrote:

Yeah, I should have checked that out, but why below 2.1.0?  If we change the 
format, we will never have a 2.1.0,
But maybe a format of 2.1.0~? or 2.1.0-? would be better.

Joe

-Original Message-
From: Khem Raj 
Sent: Friday, September 11, 2020 9:49 PM
To: Slater, Joseph ; 
openembedded-devel@lists.openembedded.org
Cc: MacLeod, Randy 
Subject: Re: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's



On 9/11/20 3:06 PM, Joe Slater wrote:

No comments on this?   I do not see it has been accepted. Joe


Thanks for reminder, there was a comment I made

https://lists.openembedded.org/g/openembedded-devel/topic/76607300#86861

patchwork also noticed it.

https://patchwork.openembedded.org/patch/176016/



-Original Message-
From: openembedded-devel@lists.openembedded.org 
 On Behalf Of Joe Slater
Sent: Thursday, September 3, 2020 6:58 AM
To: openembedded-devel@lists.openembedded.org
Cc: Slater, Joseph ; MacLeod, Randy 

Subject: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's

Fix CVE-2020-15890 and CVE-2020-24372.

Also change PV format because the reference to 2.1.0-beta3 was already far 
behind the SRCREV.  Now, base PV on the branch name and date of SRCREV commit.

Signed-off-by: Joe Slater 
---
  meta-oe/recipes-devtools/luajit/luajit_git.bb | 6 --
  1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/meta-oe/recipes-devtools/luajit/luajit_git.bb 
b/meta-oe/recipes-devtools/luajit/luajit_git.bb
index cc9039416..820722195 100644
--- a/meta-oe/recipes-devtools/luajit/luajit_git.bb
+++ b/meta-oe/recipes-devtools/luajit/luajit_git.bb
@@ -3,13 +3,15 @@ LICENSE = "MIT"
  LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=d739bb9250a55c124a545b588fd76771"
  HOMEPAGE = "http://luajit.org";
  
-PV = "2.1.0~beta3"

-SRCREV = "0ad60ccbc3768fa8e3e726858adf261950edbc22"
  SRC_URI = "git://luajit.org/git/luajit-2.0.git;protocol=http;branch=v2.1 \
 
file://0001-Do-not-strip-automatically-this-leaves-the-stripping.patch \
 file://clang.patch \
 "
  
+# Set PV to the branch and date associated with SRCREV.

+PV = "v2.1-200809"
+SRCREV = "94d4abcca966df2cc423e821bcacd04898f73117"
+
  S = "${WORKDIR}/git"
  
  inherit pkgconfig binconfig siteinfo

--
2.17.1




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#87061): 
https://lists.openembedded.org/g/openembedded-devel/message/87061
Mute This Topic: https://lists.openembedded.org/mt/76607300/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's

2020-09-14 Thread Joe Slater 
Yeah, I should have checked that out, but why below 2.1.0?  If we change the 
format, we will never have a 2.1.0,
But maybe a format of 2.1.0~? or 2.1.0-? would be better.

Joe

-Original Message-
From: Khem Raj  
Sent: Friday, September 11, 2020 9:49 PM
To: Slater, Joseph ; 
openembedded-devel@lists.openembedded.org
Cc: MacLeod, Randy 
Subject: Re: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's



On 9/11/20 3:06 PM, Joe Slater wrote:
> No comments on this?   I do not see it has been accepted. Joe

Thanks for reminder, there was a comment I made

https://lists.openembedded.org/g/openembedded-devel/topic/76607300#86861

patchwork also noticed it.

https://patchwork.openembedded.org/patch/176016/

> 
> -Original Message-
> From: openembedded-devel@lists.openembedded.org 
>  On Behalf Of Joe Slater
> Sent: Thursday, September 3, 2020 6:58 AM
> To: openembedded-devel@lists.openembedded.org
> Cc: Slater, Joseph ; MacLeod, Randy 
> 
> Subject: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's
> 
> Fix CVE-2020-15890 and CVE-2020-24372.
> 
> Also change PV format because the reference to 2.1.0-beta3 was already far 
> behind the SRCREV.  Now, base PV on the branch name and date of SRCREV commit.
> 
> Signed-off-by: Joe Slater 
> ---
>  meta-oe/recipes-devtools/luajit/luajit_git.bb | 6 --
>  1 file changed, 4 insertions(+), 2 deletions(-)
> 
> diff --git a/meta-oe/recipes-devtools/luajit/luajit_git.bb 
> b/meta-oe/recipes-devtools/luajit/luajit_git.bb
> index cc9039416..820722195 100644
> --- a/meta-oe/recipes-devtools/luajit/luajit_git.bb
> +++ b/meta-oe/recipes-devtools/luajit/luajit_git.bb
> @@ -3,13 +3,15 @@ LICENSE = "MIT"
>  LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=d739bb9250a55c124a545b588fd76771"
>  HOMEPAGE = "http://luajit.org";
>
> -PV = "2.1.0~beta3"
> -SRCREV = "0ad60ccbc3768fa8e3e726858adf261950edbc22"
>  SRC_URI = "git://luajit.org/git/luajit-2.0.git;protocol=http;branch=v2.1 \
> 
> file://0001-Do-not-strip-automatically-this-leaves-the-stripping.patch \
> file://clang.patch \
> "
>
> +# Set PV to the branch and date associated with SRCREV.
> +PV = "v2.1-200809"
> +SRCREV = "94d4abcca966df2cc423e821bcacd04898f73117"
> +
>  S = "${WORKDIR}/git"
>
>  inherit pkgconfig binconfig siteinfo
> --
> 2.17.1
> 
> 
> 
> 
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#87059): 
https://lists.openembedded.org/g/openembedded-devel/message/87059
Mute This Topic: https://lists.openembedded.org/mt/76607300/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's

2020-09-11 Thread Khem Raj 


On 9/11/20 3:06 PM, Joe Slater wrote:
> No comments on this?   I do not see it has been accepted. Joe

Thanks for reminder, there was a comment I made

https://lists.openembedded.org/g/openembedded-devel/topic/76607300#86861

patchwork also noticed it.

https://patchwork.openembedded.org/patch/176016/

> 
> -Original Message-
> From: openembedded-devel@lists.openembedded.org 
>  On Behalf Of Joe Slater
> Sent: Thursday, September 3, 2020 6:58 AM
> To: openembedded-devel@lists.openembedded.org
> Cc: Slater, Joseph ; MacLeod, Randy 
> 
> Subject: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's
> 
> Fix CVE-2020-15890 and CVE-2020-24372.
> 
> Also change PV format because the reference to 2.1.0-beta3 was already far 
> behind the SRCREV.  Now, base PV on the branch name and date of SRCREV commit.
> 
> Signed-off-by: Joe Slater 
> ---
>  meta-oe/recipes-devtools/luajit/luajit_git.bb | 6 --
>  1 file changed, 4 insertions(+), 2 deletions(-)
> 
> diff --git a/meta-oe/recipes-devtools/luajit/luajit_git.bb 
> b/meta-oe/recipes-devtools/luajit/luajit_git.bb
> index cc9039416..820722195 100644
> --- a/meta-oe/recipes-devtools/luajit/luajit_git.bb
> +++ b/meta-oe/recipes-devtools/luajit/luajit_git.bb
> @@ -3,13 +3,15 @@ LICENSE = "MIT"
>  LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=d739bb9250a55c124a545b588fd76771"
>  HOMEPAGE = "http://luajit.org";
>
> -PV = "2.1.0~beta3"
> -SRCREV = "0ad60ccbc3768fa8e3e726858adf261950edbc22"
>  SRC_URI = "git://luajit.org/git/luajit-2.0.git;protocol=http;branch=v2.1 \
> 
> file://0001-Do-not-strip-automatically-this-leaves-the-stripping.patch \
> file://clang.patch \
> "
>
> +# Set PV to the branch and date associated with SRCREV.
> +PV = "v2.1-200809"
> +SRCREV = "94d4abcca966df2cc423e821bcacd04898f73117"
> +
>  S = "${WORKDIR}/git"
>
>  inherit pkgconfig binconfig siteinfo
> --
> 2.17.1
> 
> 
> 
> 


pEpkey.asc
Description: application/pgp-keys
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#87018): 
https://lists.openembedded.org/g/openembedded-devel/message/87018
Mute This Topic: https://lists.openembedded.org/mt/76607300/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's

2020-09-11 Thread Joe Slater 
No comments on this?   I do not see it has been accepted. Joe

-Original Message-
From: openembedded-devel@lists.openembedded.org 
 On Behalf Of Joe Slater
Sent: Thursday, September 3, 2020 6:58 AM
To: openembedded-devel@lists.openembedded.org
Cc: Slater, Joseph ; MacLeod, Randy 

Subject: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's

Fix CVE-2020-15890 and CVE-2020-24372.

Also change PV format because the reference to 2.1.0-beta3 was already far 
behind the SRCREV.  Now, base PV on the branch name and date of SRCREV commit.

Signed-off-by: Joe Slater 
---
 meta-oe/recipes-devtools/luajit/luajit_git.bb | 6 --
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/meta-oe/recipes-devtools/luajit/luajit_git.bb 
b/meta-oe/recipes-devtools/luajit/luajit_git.bb
index cc9039416..820722195 100644
--- a/meta-oe/recipes-devtools/luajit/luajit_git.bb
+++ b/meta-oe/recipes-devtools/luajit/luajit_git.bb
@@ -3,13 +3,15 @@ LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=d739bb9250a55c124a545b588fd76771"
 HOMEPAGE = "http://luajit.org";
 
-PV = "2.1.0~beta3"
-SRCREV = "0ad60ccbc3768fa8e3e726858adf261950edbc22"
 SRC_URI = "git://luajit.org/git/luajit-2.0.git;protocol=http;branch=v2.1 \

file://0001-Do-not-strip-automatically-this-leaves-the-stripping.patch \
file://clang.patch \
"
 
+# Set PV to the branch and date associated with SRCREV.
+PV = "v2.1-200809"
+SRCREV = "94d4abcca966df2cc423e821bcacd04898f73117"
+
 S = "${WORKDIR}/git"
 
 inherit pkgconfig binconfig siteinfo
--
2.17.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#87010): 
https://lists.openembedded.org/g/openembedded-devel/message/87010
Mute This Topic: https://lists.openembedded.org/mt/76607300/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [oe] [meta-oe][PATCH 1/1] luajit: advance SRCREV to fix two CVE's

2020-09-03 Thread Khem Raj 
On Thu, Sep 3, 2020 at 6:58 AM Joe Slater  wrote:
>
> Fix CVE-2020-15890 and CVE-2020-24372.
>
> Also change PV format because the reference to 2.1.0-beta3
> was already far behind the SRCREV.  Now, base PV on the branch
> name and date of SRCREV commit.
>
> Signed-off-by: Joe Slater 
> ---
>  meta-oe/recipes-devtools/luajit/luajit_git.bb | 6 --
>  1 file changed, 4 insertions(+), 2 deletions(-)
>
> diff --git a/meta-oe/recipes-devtools/luajit/luajit_git.bb 
> b/meta-oe/recipes-devtools/luajit/luajit_git.bb
> index cc9039416..820722195 100644
> --- a/meta-oe/recipes-devtools/luajit/luajit_git.bb
> +++ b/meta-oe/recipes-devtools/luajit/luajit_git.bb
> @@ -3,13 +3,15 @@ LICENSE = "MIT"
>  LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=d739bb9250a55c124a545b588fd76771"
>  HOMEPAGE = "http://luajit.org";
>
> -PV = "2.1.0~beta3"
> -SRCREV = "0ad60ccbc3768fa8e3e726858adf261950edbc22"
>  SRC_URI = "git://luajit.org/git/luajit-2.0.git;protocol=http;branch=v2.1 \
> 
> file://0001-Do-not-strip-automatically-this-leaves-the-stripping.patch \
> file://clang.patch \
> "
>
> +# Set PV to the branch and date associated with SRCREV.
> +PV = "v2.1-200809"

does this sort above 2.1.0~beta3 ? and below 2.1.0

> +SRCREV = "94d4abcca966df2cc423e821bcacd04898f73117"
> +
>  S = "${WORKDIR}/git"
>
>  inherit pkgconfig binconfig siteinfo
> --
> 2.17.1
>
> 
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#86861): 
https://lists.openembedded.org/g/openembedded-devel/message/86861
Mute This Topic: https://lists.openembedded.org/mt/76607300/21656
Group Owner: openembedded-devel+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-