[oe] [meta-gnome][PATCH] gvfs: upgrade 1.40.2 -> 1.41.2 for CVE fixes

Trevor Gamblin trevor.gamblin at windriver.com
Wed Sep 11 15:11:56 UTC 2019


From: Trevor Gamblin <trevor.gamblin at windriver.com>

The following CVEs are fixed as of gvfs 1.41.2:

CVE-2019-12447
CVE-2019-12448
CVE-2019-12449

See merge request: https://gitlab.gnome.org/GNOME/gvfs/merge_requests/48

Signed-off-by: Trevor Gamblin <trevor.gamblin at windriver.com>
---
 meta-gnome/recipes-gnome/gvfs/{gvfs_1.40.2.bb => gvfs_1.41.2.bb} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-gnome/recipes-gnome/gvfs/{gvfs_1.40.2.bb => gvfs_1.41.2.bb} (95%)

diff --git a/meta-gnome/recipes-gnome/gvfs/gvfs_1.40.2.bb b/meta-gnome/recipes-gnome/gvfs/gvfs_1.41.2.bb
similarity index 95%
rename from meta-gnome/recipes-gnome/gvfs/gvfs_1.40.2.bb
rename to meta-gnome/recipes-gnome/gvfs/gvfs_1.41.2.bb
index 4fca107..27e3f92 100644
--- a/meta-gnome/recipes-gnome/gvfs/gvfs_1.40.2.bb
+++ b/meta-gnome/recipes-gnome/gvfs/gvfs_1.41.2.bb
@@ -9,8 +9,8 @@ DEPENDS += "libsecret glib-2.0 glib-2.0-native gconf libgudev shadow-native"
 
 SRC_URI = "https://download.gnome.org/sources/${BPN}/${@gnome_verdir("${PV}")}/${BPN}-${PV}.tar.xz;name=archive"
 
-SRC_URI[archive.md5sum] = "47db9bec616e089513b7f1386e5c7d5f"
-SRC_URI[archive.sha256sum] = "bdefe8fec6a1097f0c126fa2a4533667c98a86e237ac640518000e16b363971e"
+SRC_URI[archive.md5sum] = "9a9a97a63bb9e87258d48086a6bdacaa"
+SRC_URI[archive.sha256sum] = "f311b7c5f855ebe259960c00c7d03c812e040928ecb0ec093b50a4f16b3bcf26"
 
 
 EXTRA_OEMESON = " \
-- 
2.7.4



More information about the Openembedded-devel mailing list