Thanks, applied as 8bc95742522b6c968f12e4f6a013d42e5581f278.

Michael

[sent from post-receive hook]

On Mon, 05 Aug 2024 08:49:49 +0200, Christian Melki 
<[email protected]> wrote:
> Minor changes.
> https://discourse.gstreamer.org/t/orc-0-4-39-release/1969
> 
> Plugs minor CVE:
> CVE-2024-40897 - Fix error message printing buffer overflow leading to 
> possible code execution in orcc.
> 
> Signed-off-by: Christian Melki <[email protected]>
> Message-Id: <[email protected]>
> Signed-off-by: Michael Olbrich <[email protected]>
> 
> diff --git a/rules/orc.make b/rules/orc.make
> index fd3b5bf36390..a26e110226fa 100644
> --- a/rules/orc.make
> +++ b/rules/orc.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ORC) += orc
>  #
>  # Paths and names
>  #
> -ORC_VERSION  := 0.4.38
> -ORC_MD5              := 309ed9f12724e861bed05e8e84e22968
> +ORC_VERSION  := 0.4.39
> +ORC_MD5              := 9e25d04059d581702dcd0aca214bb5e8
>  ORC          := orc-$(ORC_VERSION)
>  ORC_SUFFIX   := tar.xz
>  ORC_URL              := 
> http://gstreamer.freedesktop.org/data/src/orc/$(ORC).$(ORC_SUFFIX)

Reply via email to