All of lore.kernel.org
 help / color / mirror / Atom feed
* [meta-gnome][PATCH] gvfs: upgrade 1.40.2 -> 1.41.2 for CVE fixes
@ 2019-09-11 15:11 Trevor Gamblin
  0 siblings, 0 replies; only message in thread
From: Trevor Gamblin @ 2019-09-11 15:11 UTC (permalink / raw)
  To: openembedded-devel

From: Trevor Gamblin <trevor.gamblin@windriver.com>

The following CVEs are fixed as of gvfs 1.41.2:

CVE-2019-12447
CVE-2019-12448
CVE-2019-12449

See merge request: https://gitlab.gnome.org/GNOME/gvfs/merge_requests/48

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
---
 meta-gnome/recipes-gnome/gvfs/{gvfs_1.40.2.bb => gvfs_1.41.2.bb} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-gnome/recipes-gnome/gvfs/{gvfs_1.40.2.bb => gvfs_1.41.2.bb} (95%)

diff --git a/meta-gnome/recipes-gnome/gvfs/gvfs_1.40.2.bb b/meta-gnome/recipes-gnome/gvfs/gvfs_1.41.2.bb
similarity index 95%
rename from meta-gnome/recipes-gnome/gvfs/gvfs_1.40.2.bb
rename to meta-gnome/recipes-gnome/gvfs/gvfs_1.41.2.bb
index 4fca107..27e3f92 100644
--- a/meta-gnome/recipes-gnome/gvfs/gvfs_1.40.2.bb
+++ b/meta-gnome/recipes-gnome/gvfs/gvfs_1.41.2.bb
@@ -9,8 +9,8 @@ DEPENDS += "libsecret glib-2.0 glib-2.0-native gconf libgudev shadow-native"
 
 SRC_URI = "https://download.gnome.org/sources/${BPN}/${@gnome_verdir("${PV}")}/${BPN}-${PV}.tar.xz;name=archive"
 
-SRC_URI[archive.md5sum] = "47db9bec616e089513b7f1386e5c7d5f"
-SRC_URI[archive.sha256sum] = "bdefe8fec6a1097f0c126fa2a4533667c98a86e237ac640518000e16b363971e"
+SRC_URI[archive.md5sum] = "9a9a97a63bb9e87258d48086a6bdacaa"
+SRC_URI[archive.sha256sum] = "f311b7c5f855ebe259960c00c7d03c812e040928ecb0ec093b50a4f16b3bcf26"
 
 
 EXTRA_OEMESON = " \
-- 
2.7.4



^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2019-09-11 15:12 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-09-11 15:11 [meta-gnome][PATCH] gvfs: upgrade 1.40.2 -> 1.41.2 for CVE fixes Trevor Gamblin

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.