I won't be able to take this patch until it hits master first. Steve
On Tue, Jul 30, 2024 at 3:10 AM Vijay Anusuri via lists.openembedded.org <vanusuri=mvista....@lists.openembedded.org> wrote: > > From: Vijay Anusuri <vanus...@mvista.com> > > Changelog: > > - Security: Fix error message printing buffer overflow leading to possible > code executation in orcc with specific input files (CVE-2024-40897). This > only affects developers and CI environments using orcc, not users of liborc > (Sebastian Dröge, L. E. Segovia) > - div255w: fix off-by-one error in the implementations (L. E. Segovia) > - x86: only run AVX detection if xgetbv is available (L. E. Segovia) > - x86: fix AVX detection by implementing the check recommended by Intel (L. > E. Segovia) > - Only enable JIT compilation on Apple arm64 if running on macOS, fixes > crashes on iOS (Piotr Brzeziński) > - Fix potential crash in emulation mode if logging is enabled (L. E. Segovia) > - Handle undefined TARGET_OS_OSX correctly (Joshua Root) > - orconce: Fix typo in GCC __sync-based implementation (Jakub Vaněk) > - orconce: Fix usage of __STDC_NO_ATOMICS__ (Alexander Slobodeniuk) > - Fix build with MSVC 17.10 + C11 (L. E. Segovia) > - Support stack unwinding on Windows (L. E. Segovia) > - Major opcode and instruction set code clean-ups and refactoring (Jorge > Zapata) > - Refactor allocation and chunk initialization of code regions (L. E. Segovia) > - Fall back to emulation on Linux if JIT support is not available, > e.g. because of SELinux sandboxing or noexec mounting) (L. E. Segovia) > > Ref: https://github.com/GStreamer/orc/blob/0.4.39/RELEASE > > Signed-off-by: Vijay Anusuri <vanus...@mvista.com> > --- > meta/recipes-devtools/orc/{orc_0.4.38.bb => orc_0.4.39.bb} | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > rename meta/recipes-devtools/orc/{orc_0.4.38.bb => orc_0.4.39.bb} (92%) > > diff --git a/meta/recipes-devtools/orc/orc_0.4.38.bb > b/meta/recipes-devtools/orc/orc_0.4.39.bb > similarity index 92% > rename from meta/recipes-devtools/orc/orc_0.4.38.bb > rename to meta/recipes-devtools/orc/orc_0.4.39.bb > index 5d2296694a..320abf536a 100644 > --- a/meta/recipes-devtools/orc/orc_0.4.38.bb > +++ b/meta/recipes-devtools/orc/orc_0.4.39.bb > @@ -5,7 +5,7 @@ LICENSE = "BSD-2-Clause & BSD-3-Clause" > LIC_FILES_CHKSUM = "file://COPYING;md5=1400bd9d09e8af56b9ec982b3d85797e" > > SRC_URI = "http://gstreamer.freedesktop.org/src/orc/orc-${PV}.tar.xz"; > -SRC_URI[sha256sum] = > "a55a98d4772567aa3faed8fb84d540c3db77eaba16d3e2e10b044fbc9228668d" > +SRC_URI[sha256sum] = > "33ed2387f49b825fa1b9c3b0072e05f259141b895474ad085ae51143d3040cc0" > > inherit meson pkgconfig gtk-doc > > -- > 2.25.1 > > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#202677): https://lists.openembedded.org/g/openembedded-core/message/202677 Mute This Topic: https://lists.openembedded.org/mt/107625073/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
