| Message ID | 20261022041850.97712-1-schonm@gmail.com |
|---|---|
| State | New |
| Headers | show |
| Series | [meta-oe] brotli: upgrade 1.2.0 -> 1.2.1 | expand |
On Wed, Oct 21, 2026 at 9:19 PM J. S. via lists.openembedded.org <schonm= gmail.com@lists.openembedded.org> wrote: > This is a security release > > CVE-2026-111497: out-of-bounds write permits remote code execution > > Changelog: https://github.com/google/brotli/releases/tag/v1.2.1 > > Signed-off-by: Jason Schonberg <schonm@gmail.com> > --- > .../brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb => > brotli_1.2.1.bb} (83%) > > diff --git a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb > b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb > similarity index 83% > rename from meta-oe/recipes-extended/brotli/brotli_1.2.0.bb > rename to meta-oe/recipes-extended/brotli/brotli_1.2.1.bb > index 84495a3236..2db266c2fe 100644 > --- a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb > +++ b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb > @@ -6,8 +6,8 @@ BUGTRACKER = "https://github.com/google/brotli/issues" > LICENSE = "MIT" > LIC_FILES_CHKSUM = > "file://${S}/LICENSE;md5=941ee9cd1609382f946352712a319b4b" > > -SRC_URI = "git:// > github.com/google/brotli.git;branch=master;protocol=https" > -SRCREV = "028fb5a23661f123017c060daa546b55cf4bde29" > +SRC_URI = "git://github.com/google/brotli.git;branch=v1.2;protocol=https" > while you are here, please add tag=v${PV} as well to SRC_URI and change branch assignment to use variable e.g. branch=${@oe.utils.trim_version('${PV}')} > +SRCREV = "db24a98aed38a16de78cc05ca15cdd8dc2a0d92d" > > > inherit cmake lib_package > -- > 2.43.0 > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#131306): > https://lists.openembedded.org/g/openembedded-devel/message/131306 > Mute This Topic: https://lists.openembedded.org/mt/121879299/1997914 > Group Owner: openembedded-devel+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [ > raj.khem@gmail.com] > -=-=-=-=-=-=-=-=-=-=-=- > >
diff --git a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb similarity index 83% rename from meta-oe/recipes-extended/brotli/brotli_1.2.0.bb rename to meta-oe/recipes-extended/brotli/brotli_1.2.1.bb index 84495a3236..2db266c2fe 100644 --- a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb +++ b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb @@ -6,8 +6,8 @@ BUGTRACKER = "https://github.com/google/brotli/issues" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://${S}/LICENSE;md5=941ee9cd1609382f946352712a319b4b" -SRC_URI = "git://github.com/google/brotli.git;branch=master;protocol=https" -SRCREV = "028fb5a23661f123017c060daa546b55cf4bde29" +SRC_URI = "git://github.com/google/brotli.git;branch=v1.2;protocol=https" +SRCREV = "db24a98aed38a16de78cc05ca15cdd8dc2a0d92d" inherit cmake lib_package
This is a security release CVE-2026-111497: out-of-bounds write permits remote code execution Changelog: https://github.com/google/brotli/releases/tag/v1.2.1 Signed-off-by: Jason Schonberg <schonm@gmail.com> --- .../brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} (83%)