In message: [meta-virtualization][PATCH 2/2] grpc-go: Upgrade 1.41.0 -> 1.59.0
on 05/11/2023 Peter Marko via lists.yoctoproject.org wrote:

> From: Peter Marko <[email protected]>
> 
> CVE: CVE-2023-44487

There should also be a list of shortlogs covered by the update
(as you can see in most other recipe updates here)

> 
> Signed-off-by: Peter Marko <[email protected]>
> ---
>  recipes-devtools/go/grpc-go_git.bb | 7 ++++---
>  1 file changed, 4 insertions(+), 3 deletions(-)
> 
> diff --git a/recipes-devtools/go/grpc-go_git.bb 
> b/recipes-devtools/go/grpc-go_git.bb
> index b3b58ed4..8fe0875d 100644
> --- a/recipes-devtools/go/grpc-go_git.bb
> +++ b/recipes-devtools/go/grpc-go_git.bb
> @@ -7,10 +7,11 @@ LIC_FILES_CHKSUM = 
> "file://src/${PKG_NAME}/LICENSE;md5=3b83ef96387f14655fc854ddc
>  SRCNAME = "grpc-go"
>  
>  PKG_NAME = "google.golang.org/grpc"
> -SRC_URI = 
> "git://github.com/grpc/${SRCNAME}.git;destsuffix=git/src/${PKG_NAME};branch=master;protocol=https"
> +SRC_URI = 
> "git://github.com/grpc/${SRCNAME}.git;destsuffix=git/src/${PKG_NAME};branch=${BRANCH};protocol=https"
>  
> -SRCREV = "5d8e5aad40bedb696205b96b786f1d0e1326b3f8"
> -PV = "1.41.0+git"
> +SRCREV = "7765221f4bf6104973db7946d56936cf838cad46"
> +BRANCH = "v1.59.x"
> +PV = "1.59.0+git"

We don't need to make branch a variable, it doesn't really
add anything to the patch or recipe.

Bruce

>  
>  S = "${WORKDIR}/git"
>  
> -- 
> 2.30.2
> 

> 
> 
> 

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#8430): 
https://lists.yoctoproject.org/g/meta-virtualization/message/8430
Mute This Topic: https://lists.yoctoproject.org/mt/102400852/21656
Group Owner: [email protected]
Unsubscribe: 
https://lists.yoctoproject.org/g/meta-virtualization/leave/6693005/21656/1014668956/xyzzy
 [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to