[OE-core] [PATCH] libsdl: CVE fixes

Randy MacLeod randy.macleod at windriver.com
Tue Jul 23 19:33:01 UTC 2019


On 7/23/19 12:40 AM, Anuj Mittal wrote:
> Fixes CVE-2019-7572, CVE-2019-7574, CVE-2019-7575, CVE-2019-7576,
> CVE-2019-7577, CVE-2019-7578, CVE-2019-7635, CVE-2019-7637,
> CVE-2019-7638.

Wow, that a load of CVE fixes. Thanks Anuj!

Can you remind tell me why we need to keep libsdl_1.2.15?
It was deprecated 7 years ago:
    https://en.wikipedia.org/wiki/Simple_DirectMedia_Layer


$ cd .../oe-core.git
$ rgrep sdl * | grep -v sdl2 | \
    grep -v recipes-graphics/libsdl/libsdl[-_]1.2.15

...nothing that looks like a dependency on this version...

There are some dependencies in other layers so maybe we should
move this to meta-oe if those dependencies can't be changed to
libsdl2.

-- 
# Randy MacLeod
# Wind River Linux


More information about the Openembedded-core mailing list