* [PATCHv2] git: bump version to 2.13.6
@ 2017-10-26 7:55 Ovidiu Panait
2017-10-26 8:12 ` Alexander Kanavin
0 siblings, 1 reply; 2+ messages in thread
From: Ovidiu Panait @ 2017-10-26 7:55 UTC (permalink / raw)
To: openembedded-core
Bump version to 2.13.6 in order to eliminate CVE-2017-14867 vulnerability.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-14867
Upstream patches:
https://github.com/git/git/commit/9a42c03cb71eaa9d41ba67275de38c997a791c32
https://github.com/git/git/commit/fce13af5d20cad8dcb2d0e47bcf01b6960f08e55
https://github.com/git/git/commit/27dd73871f814062737c327103ee43f1eb7f30d9
https://github.com/git/git/commit/46203ac24dc7e6b5a8d4f1b024ed93591705d47b
https://github.com/git/git/commit/5b4efea666951efe0770f8d5a301f8917015315f
https://github.com/git/git/commit/8d0fad0a7a6ba34fd706c148fa7ed1f8eb2b8b26
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
---
meta/recipes-devtools/git/git_2.13.3.bb | 11 -----------
meta/recipes-devtools/git/git_2.13.6.bb | 11 +++++++++++
2 files changed, 11 insertions(+), 11 deletions(-)
delete mode 100644 meta/recipes-devtools/git/git_2.13.3.bb
create mode 100644 meta/recipes-devtools/git/git_2.13.6.bb
diff --git a/meta/recipes-devtools/git/git_2.13.3.bb b/meta/recipes-devtools/git/git_2.13.3.bb
deleted file mode 100644
index b3e3887319..0000000000
--- a/meta/recipes-devtools/git/git_2.13.3.bb
+++ /dev/null
@@ -1,11 +0,0 @@
-require git.inc
-
-EXTRA_OECONF += "ac_cv_snprintf_returns_bogus=no \
- ac_cv_fread_reads_directories=${ac_cv_fread_reads_directories=yes} \
- "
-EXTRA_OEMAKE += "NO_GETTEXT=1"
-
-SRC_URI[tarball.md5sum] = "d2dc550f6693ba7e5b16212b2714f59f"
-SRC_URI[tarball.sha256sum] = "1497001772f630d49809e981672edfe3e3ce1a1d18e905cd539c4d2f4dbcd75a"
-SRC_URI[manpages.md5sum] = "3037d11a4f4cdd19435871c267ca48b4"
-SRC_URI[manpages.sha256sum] = "f9b302eeb08ce08934e7afb42280ce9294411fbf5f7b6ac3fcc236e8031f10c5"
diff --git a/meta/recipes-devtools/git/git_2.13.6.bb b/meta/recipes-devtools/git/git_2.13.6.bb
new file mode 100644
index 0000000000..c7e559c019
--- /dev/null
+++ b/meta/recipes-devtools/git/git_2.13.6.bb
@@ -0,0 +1,11 @@
+require git.inc
+
+EXTRA_OECONF += "ac_cv_snprintf_returns_bogus=no \
+ ac_cv_fread_reads_directories=${ac_cv_fread_reads_directories=yes} \
+ "
+EXTRA_OEMAKE += "NO_GETTEXT=1"
+
+SRC_URI[tarball.md5sum] = "b7a8f9de37cc45aef96035bd27dc98c8"
+SRC_URI[tarball.sha256sum] = "cb53e6b388d8d19189933366c1fe5c1ca500e8b227b9e707af39c3d879e41015"
+SRC_URI[manpages.md5sum] = "c4d966309cf8d6ad18d43624bf8ebc56"
+SRC_URI[manpages.sha256sum] = "c76071195596887a8eb5c73478b0be6a6e237f6af5b397e4fe8900ecda70642e"
--
2.11.0
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [PATCHv2] git: bump version to 2.13.6
2017-10-26 7:55 [PATCHv2] git: bump version to 2.13.6 Ovidiu Panait
@ 2017-10-26 8:12 ` Alexander Kanavin
0 siblings, 0 replies; 2+ messages in thread
From: Alexander Kanavin @ 2017-10-26 8:12 UTC (permalink / raw)
To: Ovidiu Panait, openembedded-core
On 10/26/2017 10:55 AM, Ovidiu Panait wrote:
> Bump version to 2.13.6 in order to eliminate CVE-2017-14867 vulnerability.
The latest version is 2.14.3, can you update to that please?
Alex
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2017-10-26 8:12 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-10-26 7:55 [PATCHv2] git: bump version to 2.13.6 Ovidiu Panait
2017-10-26 8:12 ` Alexander Kanavin
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.