From 433d887dbf8db849fb011ac8aa1e3ed8faa72b18 Mon Sep 17 00:00:00 2001 From: "Slater, Joseph" Date: Mon, 14 Sep 2020 13:18:07 -0700 Subject: [PATCH] luajit: advance SRCREV to fix two CVE's Fix CVE-2020-15890 and CVE-2020-24372. Also change PV format because the reference to 2.1.0-beta3 was already far behind the SRCREV. Now, base PV on a tag and date of SRCREV commit if it is later. Sort order is 2.1.0~beta3 -> 2.1.0~beta-yymmdd -> 2.1.0 -> 2.1.0-yymmdd. Signed-off-by: Joe Slater Signed-off-by: Khem Raj --- meta-oe/recipes-devtools/luajit/luajit_git.bb | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/meta-oe/recipes-devtools/luajit/luajit_git.bb b/meta-oe/recipes-devtools/luajit/luajit_git.bb index cc90394163..6573efcd93 100644 --- a/meta-oe/recipes-devtools/luajit/luajit_git.bb +++ b/meta-oe/recipes-devtools/luajit/luajit_git.bb @@ -3,13 +3,15 @@ LICENSE = "MIT" LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=d739bb9250a55c124a545b588fd76771" HOMEPAGE = "http://luajit.org" -PV = "2.1.0~beta3" -SRCREV = "0ad60ccbc3768fa8e3e726858adf261950edbc22" SRC_URI = "git://luajit.org/git/luajit-2.0.git;protocol=http;branch=v2.1 \ file://0001-Do-not-strip-automatically-this-leaves-the-stripping.patch \ file://clang.patch \ " +# Set PV to a version tag and date associated with SRCREV if it is later. +PV = "2.1.0~beta3-200809" +SRCREV = "94d4abcca966df2cc423e821bcacd04898f73117" + S = "${WORKDIR}/git" inherit pkgconfig binconfig siteinfo