From patchwork Tue Nov 5 15:24:17 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 178530 Delivered-To: patch@linaro.org Received: by 2002:a92:38d5:0:0:0:0:0 with SMTP id g82csp904625ilf; Tue, 5 Nov 2019 07:24:29 -0800 (PST) X-Google-Smtp-Source: APXvYqx2Bi+8rHvfJdi67BZ2O/buTOAQafvaJ4dHm/LxletfnVtjQPJO9fy5RMW/UaWjm8r32PBS X-Received: by 2002:a17:90a:37e4:: with SMTP id v91mr7547660pjb.8.1572967469431; Tue, 05 Nov 2019 07:24:29 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1572967469; cv=none; d=google.com; s=arc-20160816; b=bPW/xXmRsiNczgmriA03eI482TFw5e0GehKwStXfNEmgBs7YnHBZiZ07OpoBq1BzAu Cvx60//JQTRhNs11nty/eAvmFua5tQ6okfEqfALPORQocF+Damtxl1yRIC6NARuPQ0qE gbU5dg0toVitXKI6fjyB2yzYJZGr2Z4InytDYXt+1wPV/T6DtO85Pgjl47ybkytXQSF6 oJGsJLhRO6I54nNcruisnubowRM7aavE8lnIejEQ+YsIQO5BEohhVYUyGPlO2X01ZhZW rauFoknXcTJeXhF8jyoQ6EnQ0u2eob7FE5uGUI3P4h/22yUkdKCsjRTHLVTDI5UZ0K7j QcyA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:message-id:date:to:from:dkim-signature:delivered-to; bh=APBcrQcsHFL4Aa4cGd6ew+2XdH3gIcotULGojLduylI=; b=fjmxtTLUIp4VMUud5j5frOm7rQ2TcViFbX9kNJWoMnb+/Aym0u3Y+El0Psf5kaB1N1 l7XgYsXDdWDZHn8ykjKtSPdQxpOhvV7kjUIENdybxDO/tbOPB9G7k5HsI6Ys9WDjK5Yj jJxHao4haftHz1AGxYeecCUBub0DFq9cPlwFHmkpQUUgLuhsA487DN4Rhlv7PQAp/oPc FMnCI8gmeF2r/U3hWHPjiSZ0iisOBfu/c+Ay8OUBUm5PHTVgzvb2KfR0Pb4yVuNj9l51 KGRZS1aavByT2I1UeTyGytIfE/bfRb6EYn5kj1QI4PXr4GaFHDIL0W6sPWFfEcjlz/MA HQXw== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@intel-com.20150623.gappssmtp.com header.s=20150623 header.b=moo8r25r; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id b4si8646721pgw.470.2019.11.05.07.24.28; Tue, 05 Nov 2019 07:24:29 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@intel-com.20150623.gappssmtp.com header.s=20150623 header.b=moo8r25r; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: from ec2-34-214-78-129.us-west-2.compute.amazonaws.com (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 2F89F7FA25; Tue, 5 Nov 2019 15:24:23 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-wr1-f49.google.com (mail-wr1-f49.google.com [209.85.221.49]) by mail.openembedded.org (Postfix) with ESMTP id 4F12671BB9 for ; Tue, 5 Nov 2019 15:24:21 +0000 (UTC) Received: by mail-wr1-f49.google.com with SMTP id l10so21864097wrb.2 for ; Tue, 05 Nov 2019 07:24:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel-com.20150623.gappssmtp.com; s=20150623; h=from:to:subject:date:message-id:mime-version :content-transfer-encoding; bh=h9hNakzFnzZGthZyYCqw/7TwP6bAP/6ovf9ucyRH2sQ=; b=moo8r25rcDHh2/FIgVzC+okZyOLCbtbyWZftF/GG/I7LH2qXLLz5hBAyQMJjmNxGkU D48R3ydzG6h2aWpZ7kHzJlCB+YRbnVScjGAotrrLkbV+hucieWPUpQqfNJ0KGNep4r9s GqaBPpGMRpHWW1nvk7i6JnqxZI/gt7x6iklXCYXXk5c5tUzwWQxtmABSb5S9FUeVWjmk jAPT3C84mr+x6o9qI1n5XjpCwm2UcniwvEzwFLm7bePutrnYHWXUH9/gOJuMDES+h9DU 37WKYf3O02o00anVySQS5uARDZtG2ZXeM3VDs0L5rYAf1JA6blSaDc739+Isse2yYF45 rfZA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:mime-version :content-transfer-encoding; bh=h9hNakzFnzZGthZyYCqw/7TwP6bAP/6ovf9ucyRH2sQ=; b=nLYQYgNRZhamtnSVJBLe9NBL6mY5dx4tZHQGq7QIw+ZLGyVfZFkYk5k6HE6LUm9ngj ZoUYnfMXDxrgUISmBFchcBz8DMkO7fPSLJw5SCQYKrHxkHVlSJvnC8sRwvXaE2F8H5dq dw49F3YqMC5rqPxdJ+DLQyNyXJbPN6FVvWD1UbDHptSC6niC9XlKHy/m81EGDxuYJ+bH U/MgPRyseaX7bF1oIXkznNqqZpLftIZgCTqT2p3FszD+s7laHMUENT/9k1jp14aosWcY OnrviyqydFBbxr4QSMDcFIS4BeYC9ZBJp5FIpbW0C97KcLO8YKwDbXHjAODrzsvqZ3Vj lGcw== X-Gm-Message-State: APjAAAXAjZoTszJ5CL6tJMWpjGi4blny3G9O5Lu8lyuKybEaKALzdfGA kQ4FzcYY55kNQPHq+sjX8Mlpz7xF5sg= X-Received: by 2002:a5d:414a:: with SMTP id c10mr12053153wrq.100.1572967461635; Tue, 05 Nov 2019 07:24:21 -0800 (PST) Received: from flashheart.burtonini.com (35.106.2.81.in-addr.arpa. [81.2.106.35]) by smtp.gmail.com with ESMTPSA id z14sm9569627wrl.60.2019.11.05.07.24.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 05 Nov 2019 07:24:20 -0800 (PST) From: Ross Burton To: openembedded-core@lists.openembedded.org Date: Tue, 5 Nov 2019 15:24:17 +0000 Message-Id: <20191105152418.24717-1-ross.burton@intel.com> X-Mailer: git-send-email 2.20.1 MIME-Version: 1.0 Subject: [OE-core] [PATCH 1/2] libsoup: set CVE_PRODUCT X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Signed-off-by: Ross Burton --- meta/recipes-support/libsoup/libsoup-2.4_2.66.2.bb | 2 ++ 1 file changed, 2 insertions(+) -- 2.20.1 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-support/libsoup/libsoup-2.4_2.66.2.bb b/meta/recipes-support/libsoup/libsoup-2.4_2.66.2.bb index 357f2fd3db9..3a735cf27a8 100644 --- a/meta/recipes-support/libsoup/libsoup-2.4_2.66.2.bb +++ b/meta/recipes-support/libsoup/libsoup-2.4_2.66.2.bb @@ -15,6 +15,8 @@ SRC_URI = "${GNOME_MIRROR}/libsoup/${SHRT_VER}/libsoup-${PV}.tar.xz \ SRC_URI[md5sum] = "66c2ae89d6031b01337d78a2c57c75d5" SRC_URI[sha256sum] = "bd2ea602eba642509672812f3c99b77cbec2f3de02ba1cc8cb7206bf7de0ae2a" +CVE_PRODUCT = "libsoup" + S = "${WORKDIR}/libsoup-${PV}" inherit meson gettext pkgconfig upstream-version-is-even gobject-introspection gtk-doc From patchwork Tue Nov 5 15:24:18 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 178531 Delivered-To: patch@linaro.org Received: by 2002:a92:38d5:0:0:0:0:0 with SMTP id g82csp905273ilf; Tue, 5 Nov 2019 07:25:01 -0800 (PST) X-Google-Smtp-Source: APXvYqwEX1lJB0TzP4NTHZLXm51HXRqZgxui07YZzHQnB6LaL60ixiix0jjoRc+v+cSmau1NqB9s X-Received: by 2002:a63:33ca:: with SMTP id z193mr21917419pgz.83.1572967501406; Tue, 05 Nov 2019 07:25:01 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1572967501; cv=none; d=google.com; s=arc-20160816; b=Ey4Fgl7GIEUDGRya6koUfQnf4gMQJcIM1srEqpdsPXiTmENtZsaxs4ddYf1Z7H1MUp KgwHGVbNgdnmBQJuzS9rQGj8BhYK3+pSY2sx1eVQNbiSdr8SP58Em2wZxUx7UWBQe0ND 6W7T0equUzMdeDBoaRs6bAu/0AU32AWKSoJw517NCZguetg51GaGelncwHbJB4lcLTLK C+pkWOqd/qn7UP901USWSGLyWjCwrM5DeQIkcyJK0gEdRXcfIPci340CIUp7InVUvgcW HTPSQVsctO6JYssNB513Iqm1gbU1F6+xK7x8agaNauv0LP0GFmKjH39d31In7HzAd7+2 EFpw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:references:in-reply-to:message-id:date:to:from :dkim-signature:delivered-to; bh=8LJL1+l/cTFN4eYxMzieJVAlOMZYlO9VghOmtDM8l6k=; b=NG75pNxjIq9Nn2Fhklj0YD4DS6YcTWR0nzzSFmGBz4ecOHG4nmz1QECLDMTVGWhSgF FFBo2EA5yCJL4pw6JP0Ma6ae/3A8Y9YXebzPCIpkrao9RN1Cn0Y5nnc23GEl823lsunV tUg6P6LIj6QmSyuh2q/HvVvNKywG9vcPk5qlLxERlg8aFIrOEhKCJ4zy+0YDsFnwd3cf PpH3bDYqxeFsBdV81wuhdKxLn9vORe/rsI/4A4htjTgAczrkyFAvH5vERIeaqpJSlTI8 +UG8BOSOkqrPF2Q6DeSgU/FCtSF95qF2YV7hUwUg93ICsu+qg9r58x+mNRUTCSCPfCR7 quQw== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@intel-com.20150623.gappssmtp.com header.s=20150623 header.b=0BKWpkyT; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id 74si2379239pgc.551.2019.11.05.07.25.01; Tue, 05 Nov 2019 07:25:01 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@intel-com.20150623.gappssmtp.com header.s=20150623 header.b=0BKWpkyT; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: from ec2-34-214-78-129.us-west-2.compute.amazonaws.com (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 542A87FA2D; Tue, 5 Nov 2019 15:24:59 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-wr1-f68.google.com (mail-wr1-f68.google.com [209.85.221.68]) by mail.openembedded.org (Postfix) with ESMTP id 3EED271BB9 for ; Tue, 5 Nov 2019 15:24:22 +0000 (UTC) Received: by mail-wr1-f68.google.com with SMTP id a15so21851168wrf.9 for ; Tue, 05 Nov 2019 07:24:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel-com.20150623.gappssmtp.com; s=20150623; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=GU2yiKby7g12o3XAvMCXG8mIOICXnaP0+kcDD/D7dLw=; b=0BKWpkyTc1wF54Tam90T/Ml/yMZsUdgN7keP2+R7EHl6cE/v/gH9V/+vWTGtvSHPYe AHVDUJ44j+E6Z2fBH3De5WKjCr+QbpVU1pbfR7G7AMzWqpwVHlrNz2Uj3/+uQ8Wrcj7A tbWAHSS54YV4wPlgrrhIFRoTi0msV0nBHaQmzAbA4XXTSo7ws7uqs2V0XiTjBXSUhAs1 ez6tYtosuVjlsjUWTvlReeAY2LiKsAamz66Rw3DiqVtxQLzchYVMs2mob3uy4oaJwtcL YgTcNAyavlraxcAvKaDMyAhwOd3uM9MpwZ27dudf4lCo1yFmRF9/cZOjZ7aQKNQKz6BX SzFw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=GU2yiKby7g12o3XAvMCXG8mIOICXnaP0+kcDD/D7dLw=; b=eX6qoP0X66u8YvNfy9wIAQFo4R0WOHgHHEcJFRWv71reGqxxx2VsYiggCRVXn3JO2v yu19aKnK9+G5edaIpDRRrD84TtEa+7kmzuuFmdamckOILi2EXL3EYRvmoGNPAaayfqP2 WfoWE77k/JtnJDT2gB863Ul2yUlL4ZnRQZOWsrCxloqmlPf53cPpKUbKCu96z/nOzdfV Ia04+y+mmWc4q2KNscIytNnFkt/blXPBRh/ZzeTFx23yTBgklM+t6gKEOhxlOwxv0YLk PDRA/x5CaAE+LPpznPQ6W9MHBhrpvZVw03ctM0h/uF93NyZmjrL88vHGEuefACN2gi69 jdcg== X-Gm-Message-State: APjAAAX2+1HKaPLURtIxvmePUL6uvb76RmUQ9baSl1PKzEx6QSsZMFuK qnzUm7cLnhJHUkA3hWfstal2LKGPo4g= X-Received: by 2002:a05:6000:1008:: with SMTP id a8mr28438842wrx.60.1572967462797; Tue, 05 Nov 2019 07:24:22 -0800 (PST) Received: from flashheart.burtonini.com (35.106.2.81.in-addr.arpa. [81.2.106.35]) by smtp.gmail.com with ESMTPSA id z14sm9569627wrl.60.2019.11.05.07.24.21 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 05 Nov 2019 07:24:22 -0800 (PST) From: Ross Burton To: openembedded-core@lists.openembedded.org Date: Tue, 5 Nov 2019 15:24:18 +0000 Message-Id: <20191105152418.24717-2-ross.burton@intel.com> X-Mailer: git-send-email 2.20.1 In-Reply-To: <20191105152418.24717-1-ross.burton@intel.com> References: <20191105152418.24717-1-ross.burton@intel.com> MIME-Version: 1.0 Subject: [OE-core] [PATCH 2/2] libsoup-2.4: upgrade to 2.66.4 X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Fixes CVE-2019-17266. Signed-off-by: Ross Burton --- .../{libsoup-2.4_2.66.2.bb => libsoup-2.4_2.66.4.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename meta/recipes-support/libsoup/{libsoup-2.4_2.66.2.bb => libsoup-2.4_2.66.4.bb} (89%) -- 2.20.1 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-support/libsoup/libsoup-2.4_2.66.2.bb b/meta/recipes-support/libsoup/libsoup-2.4_2.66.4.bb similarity index 89% rename from meta/recipes-support/libsoup/libsoup-2.4_2.66.2.bb rename to meta/recipes-support/libsoup/libsoup-2.4_2.66.4.bb index 3a735cf27a8..7f5f910d3d6 100644 --- a/meta/recipes-support/libsoup/libsoup-2.4_2.66.2.bb +++ b/meta/recipes-support/libsoup/libsoup-2.4_2.66.4.bb @@ -12,8 +12,8 @@ SHRT_VER = "${@d.getVar('PV').split('.')[0]}.${@d.getVar('PV').split('.')[1]}" SRC_URI = "${GNOME_MIRROR}/libsoup/${SHRT_VER}/libsoup-${PV}.tar.xz \ file://0001-Do-not-enforce-no-introspection-when-cross-building.patch \ " -SRC_URI[md5sum] = "66c2ae89d6031b01337d78a2c57c75d5" -SRC_URI[sha256sum] = "bd2ea602eba642509672812f3c99b77cbec2f3de02ba1cc8cb7206bf7de0ae2a" +SRC_URI[md5sum] = "42016d80ecae4cf8eb416631049a273a" +SRC_URI[sha256sum] = "8308984f1eee1c4f8c113a9c1763b2b22d981bd811b0cc82a9f3f1aa63228779" CVE_PRODUCT = "libsoup" @@ -28,7 +28,7 @@ PACKAGECONFIG[gssapi] = "-Dgssapi=true,-Dgssapi=false,krb5" EXTRA_OEMESON_append = " -Dvapi=false" -GTKDOC_MESON_OPTION = "doc" +GTKDOC_MESON_OPTION = "gtk_doc" # When built without gnome support, libsoup-2.4 will contain only one shared lib # and will therefore become subject to renaming by debian.bbclass. Prevent