SHA256
1
0
forked from pool/orc

Accepting request 1189074 from multimedia:libs

- Update to version 0.4.39:
  - Security: Fix error message printing buffer overflow leading
    to possible code execution in orcc with specific input files
    (CVE-2024-40897). This only affects developers and CI
    environments using orcc, not users of liborc (boo#1228184)
  - div255w: fix off-by-one error in the implementations
  - x86: only run AVX detection if xgetbv is available
  - x86: fix AVX detection by implementing the check recommended
    by Intel
  - Only enable JIT compilation on Apple arm64 if running on macOS,
    fixes crashes on iOS
  - Fix potential crash in emulation mode if logging is enabled
  - Handle undefined TARGET_OS_OSX correctly
  - orconce: Fix typo in GCC __sync-based implementation
  - orconce: Fix usage of __STDC_NO_ATOMICS__
  - Fix build with MSVC 17.10 + C11
  - Support stack unwinding on Windows
  - Major opcode and instruction set code clean-ups and refactoring
  - Refactor allocation and chunk initialization of code regions
  - Fall back to emulation on Linux if JIT support is not
    available, e.g. because of SELinux sandboxing or noexec
    mounting)

OBS-URL: https://build.opensuse.org/request/show/1189074
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/orc?expand=0&rev=47
This commit is contained in:
Dominique Leuenberger 2024-07-24 13:33:10 +00:00 committed by Git OBS Bridge
commit 4f0bbd5ed5
4 changed files with 30 additions and 4 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a55a98d4772567aa3faed8fb84d540c3db77eaba16d3e2e10b044fbc9228668d
size 227152

3
orc-0.4.39.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:33ed2387f49b825fa1b9c3b0072e05f259141b895474ad085ae51143d3040cc0
size 232168

View File

@ -1,3 +1,29 @@
-------------------------------------------------------------------
Mon Jul 22 10:52:35 UTC 2024 - Antonio Larrosa <alarrosa@suse.com>
- Update to version 0.4.39:
- Security: Fix error message printing buffer overflow leading
to possible code execution in orcc with specific input files
(CVE-2024-40897). This only affects developers and CI
environments using orcc, not users of liborc (boo#1228184)
- div255w: fix off-by-one error in the implementations
- x86: only run AVX detection if xgetbv is available
- x86: fix AVX detection by implementing the check recommended
by Intel
- Only enable JIT compilation on Apple arm64 if running on macOS,
fixes crashes on iOS
- Fix potential crash in emulation mode if logging is enabled
- Handle undefined TARGET_OS_OSX correctly
- orconce: Fix typo in GCC __sync-based implementation
- orconce: Fix usage of __STDC_NO_ATOMICS__
- Fix build with MSVC 17.10 + C11
- Support stack unwinding on Windows
- Major opcode and instruction set code clean-ups and refactoring
- Refactor allocation and chunk initialization of code regions
- Fall back to emulation on Linux if JIT support is not
available, e.g. because of SELinux sandboxing or noexec
mounting)
-------------------------------------------------------------------
Wed Mar 6 13:10:24 UTC 2024 - Antonio Larrosa <alarrosa@suse.com>

View File

@ -18,7 +18,7 @@
Name: orc
Version: 0.4.38
Version: 0.4.39
Release: 0
Summary: The Oil Runtime Compiler
License: BSD-3-Clause