Snapshots are not releases, but rather in-progress development work towards the next release. If the goal is to fix a CVE, then you should backport the patch.
As explained here: https://invisible-island.net/ncurses/ncurses.faq.html#latest_version Alex On Wed, 17 May 2023 at 10:22, Florin Diaconescu <florin.diaconescu...@gmail.com> wrote: > > Latest patch in ncurses GitHub mirror > Includes the fix for CVE-2023-29491, done in 6.4+20230408 > > Signed-off-by: Florin Diaconescu <florin.diaconescu...@gmail.com> > --- > .../ncurses/{ncurses_6.4.bb => ncurses_6.4+20230514.bb} | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > rename meta/recipes-core/ncurses/{ncurses_6.4.bb => ncurses_6.4+20230514.bb} > (78%) > > diff --git a/meta/recipes-core/ncurses/ncurses_6.4.bb > b/meta/recipes-core/ncurses/ncurses_6.4+20230514.bb > similarity index 78% > rename from meta/recipes-core/ncurses/ncurses_6.4.bb > rename to meta/recipes-core/ncurses/ncurses_6.4+20230514.bb > index 166e30713c..44aaac3613 100644 > --- a/meta/recipes-core/ncurses/ncurses_6.4.bb > +++ b/meta/recipes-core/ncurses/ncurses_6.4+20230514.bb > @@ -6,10 +6,10 @@ SRC_URI += "file://0001-tic-hang.patch \ > file://exit_prototype.patch \ > " > # commit id corresponds to the revision in package version > -SRCREV = "1003914e200fd622a27237abca155ce6bf2e6030" > +SRCREV = "b9f9d6304f6abd71a5fdbfd500a645e521edf8b6" > S = "${WORKDIR}/git" > EXTRA_OECONF += "--with-abi-version=5" > UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>\d+(\.\d+)+)$" > > # This is needed when using patchlevel versions like 6.1+20181013 > -#CVE_VERSION = > "${@d.getVar("PV").split('+')[0]}.${@d.getVar("PV").split('+')[1]}" > +CVE_VERSION = > "${@d.getVar("PV").split('+')[0]}.${@d.getVar("PV").split('+')[1]}" > -- > 2.25.1 > > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#181474): https://lists.openembedded.org/g/openembedded-core/message/181474 Mute This Topic: https://lists.openembedded.org/mt/98944133/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
