[meta-oe][dunfell][PATCH] c-ares: Bump PV to 1.16.1

[meta-oe][dunfell][PATCH] c-ares: Bump PV to 1.16.1

[Ernst Sjöstrand]

Signed-off-by: Ernst Sjöstrand <ernst.sjostrand@verisure.com>
---
 meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb b/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
index b77604797..692a5f0d6 100644
--- a/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
+++ b/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
@@ -5,7 +5,7 @@ SECTION = "libs"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE.md;md5=fb997454c8d62aa6a47f07a8cd48b006"
 
-PV = "1.16.0+gitr${SRCPV}"
+PV = "1.16.1+gitr${SRCPV}"
 
 SRC_URI = "\
     git://github.com/c-ares/c-ares.git;branch=main;protocol=https \
-- 
2.34.0

Re: [oe] [meta-oe][dunfell][PATCH] c-ares: Bump PV to 1.16.1

[Khem Raj]

[-- Attachment #1: Type: text/plain, Size: 1408 bytes --]

On Tue, Jan 11, 2022 at 4:54 AM Ernst Sjöstrand <
ernst.sjostrand@lists.verisure.com> wrote:

> Signed-off-by: Ernst Sjöstrand <ernst.sjostrand@verisure.com>
> ---
>  meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
> b/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
> index b77604797..692a5f0d6 100644
> --- a/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
> +++ b/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
> @@ -5,7 +5,7 @@ SECTION = "libs"
>  LICENSE = "MIT"
>  LIC_FILES_CHKSUM =
> "file://LICENSE.md;md5=fb997454c8d62aa6a47f07a8cd48b006"
>
> -PV = "1.16.0+gitr${SRCPV}"
> +PV = "1.16.1+gitr${SRCPV}"


If it is release tag which is being used for srcrev then drop the part
after +

>
>
>  SRC_URI = "\
>      git://github.com/c-ares/c-ares.git;branch=main;protocol=https \
> --
> 2.34.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#94744):
> https://lists.openembedded.org/g/openembedded-devel/message/94744
> Mute This Topic: https://lists.openembedded.org/mt/88347585/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

[-- Attachment #2: Type: text/html, Size: 2958 bytes --]

[meta-oe][dunfell][PATCH] c-ares: Fix forgotten PV bump to 1.16.1

[Ernst Sjöstrand]

Since SRCREV is pointing to the release tag we can drop the PV part and
just use it from the filename.

Signed-off-by: Ernst Sjöstrand <ernst.sjostrand@verisure.com>
---
 meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb | 2 --
 1 file changed, 2 deletions(-)

diff --git a/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb b/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
index b77604797..462ed5c45 100644
--- a/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
+++ b/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
@@ -5,8 +5,6 @@ SECTION = "libs"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE.md;md5=fb997454c8d62aa6a47f07a8cd48b006"
 
-PV = "1.16.0+gitr${SRCPV}"
-
 SRC_URI = "\
     git://github.com/c-ares/c-ares.git;branch=main;protocol=https \
     file://cmake-install-libcares.pc.patch \
-- 
2.34.1

Re: [meta-oe][dunfell][PATCH] c-ares: Fix forgotten PV bump to 1.16.1

[Ranjitsinh Rathod]

[-- Attachment #1: Type: text/plain, Size: 437 bytes --]

Hi all,

I think during https://git.openembedded.org/meta-openembedded-contrib/commit/?h=stable/dunfell-nut&id=9ce3df8c2a10b45aa3695cf257aa27fd346d52a7 patch merge, PV variable is not updated and so CVE-2020-14354 is reported by cve tool. So removing PV can solve this.

I have verified using "bitbake -c cve_check c-ares" and after removing the PV variable, cve tool is not reporting CVE-2020-14354 anymore.

Thanks,
Ranjitsinh

[-- Attachment #2: Type: text/html, Size: 916 bytes --]

Re: [meta-oe][dunfell][PATCH] c-ares: Fix forgotten PV bump to 1.16.1

[Ernst Sjöstrand]

Hi Armin,

did you see this updated patch?
It just aligns the PV with the actual version, and it silences cve-check also.

Regards
//Ernst

On Wed, 2022-01-12 at 08:06 +0100, Ernst Sjöstrand wrote:
> Since SRCREV is pointing to the release tag we can drop the PV part and
> just use it from the filename.
> 
> Signed-off-by: Ernst Sjöstrand <ernst.sjostrand@verisure.com>
> ---
>  meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb | 2 --
>  1 file changed, 2 deletions(-)
> 
> diff --git a/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb b/meta-
> oe/recipes-support/c-ares/c-ares_1.16.1.bb
> index b77604797..462ed5c45 100644
> --- a/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
> +++ b/meta-oe/recipes-support/c-ares/c-ares_1.16.1.bb
> @@ -5,8 +5,6 @@ SECTION = "libs"
>  LICENSE = "MIT"
>  LIC_FILES_CHKSUM = "file://LICENSE.md;md5=fb997454c8d62aa6a47f07a8cd48b006"
>  
> -PV = "1.16.0+gitr${SRCPV}"
> -
>  SRC_URI = "\
>      git://github.com/c-ares/c-ares.git;branch=main;protocol=https \
>      file://cmake-install-libcares.pc.patch \