From: akuster808 <akuster808@gmail.com>
To: Chen Qi <Qi.Chen@windriver.com>,
openembedded-devel@lists.openembedded.org
Subject: Re: [oe][meta-filesystem][hardknott][PATCH] ntfs-3g-ntfsprogs: upgrade to 2021.8.22
Date: Tue, 19 Oct 2021 08:09:26 -0700 [thread overview]
Message-ID: <b73a6500-6db3-57ec-2ccb-4616a719d276@gmail.com> (raw)
In-Reply-To: <20211019045923.51357-1-Qi.Chen@windriver.com>
On 10/18/21 9:59 PM, Chen Qi wrote:
> This upgrade revolves a bunch of CVEs. See more details in:
> https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp.
Seems reasonable to me.
-armin
>
> These CVEs cannot be reolved one by one. Upgrading the package
> is the only reasonable way.
>
> Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
> ---
> ...-ntfsprogs_2017.3.23.bb => ntfs-3g-ntfsprogs_2021.8.22.bb} | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
> rename meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/{ntfs-3g-ntfsprogs_2017.3.23.bb => ntfs-3g-ntfsprogs_2021.8.22.bb} (92%)
>
> diff --git a/meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/ntfs-3g-ntfsprogs_2017.3.23.bb b/meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/ntfs-3g-ntfsprogs_2021.8.22.bb
> similarity index 92%
> rename from meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/ntfs-3g-ntfsprogs_2017.3.23.bb
> rename to meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/ntfs-3g-ntfsprogs_2021.8.22.bb
> index 6f5cb6cee..19b2d6ca2 100644
> --- a/meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/ntfs-3g-ntfsprogs_2017.3.23.bb
> +++ b/meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/ntfs-3g-ntfsprogs_2021.8.22.bb
> @@ -10,8 +10,8 @@ SRC_URI = "http://tuxera.com/opensource/ntfs-3g_ntfsprogs-${PV}.tgz \
> file://0001-libntfs-3g-Makefile.am-fix-install-failed-while-host.patch \
> "
> S = "${WORKDIR}/ntfs-3g_ntfsprogs-${PV}"
> -SRC_URI[md5sum] = "d97474ae1954f772c6d2fa386a6f462c"
> -SRC_URI[sha256sum] = "3e5a021d7b761261836dcb305370af299793eedbded731df3d6943802e1262d5"
> +SRC_URI[md5sum] = "90da343e78877d388eb34cefae6799ae"
> +SRC_URI[sha256sum] = "55b883aa05d94b2ec746ef3966cb41e66bed6db99f22ddd41d1b8b94bb202efb"
>
> UPSTREAM_CHECK_URI = "https://www.tuxera.com/community/open-source-ntfs-3g/"
> UPSTREAM_CHECK_REGEX = "ntfs-3g_ntfsprogs-(?P<pver>\d+(\.\d+)+)\.tgz"
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#93456): https://lists.openembedded.org/g/openembedded-devel/message/93456
> Mute This Topic: https://lists.openembedded.org/mt/86433129/3616698
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [akuster808@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
next prev parent reply other threads:[~2021-10-19 15:09 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-10-19 4:59 [oe][meta-filesystem][hardknott][PATCH] ntfs-3g-ntfsprogs: upgrade to 2021.8.22 Chen Qi
2021-10-19 15:09 ` akuster808 [this message]
2021-10-20 17:06 ` Randy MacLeod
2021-10-21 2:10 ` Chen, Qi
2021-10-22 2:05 ` Chen, Qi
2021-10-22 4:31 ` Khem Raj
2021-10-22 5:27 ` ChenQi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=b73a6500-6db3-57ec-2ccb-4616a719d276@gmail.com \
--to=akuster808@gmail.com \
--cc=Qi.Chen@windriver.com \
--cc=openembedded-devel@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).