mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
* [ptxdist] [PATCH] libbsd: bump version to 0.8.2 to fix CVE-2016-2090
@ 2016-02-06 17:04 Clemens Gruber
  2016-02-11 11:31 ` Michael Olbrich
  0 siblings, 1 reply; 2+ messages in thread
From: Clemens Gruber @ 2016-02-06 17:04 UTC (permalink / raw)
  To: ptxdist; +Cc: Clemens Gruber

Bump the version to 0.8.2, which includes a fix for the heap buffer
overflow in fgetwln (CVE-2016-2090).

Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
---
 rules/libbsd.make | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/libbsd.make b/rules/libbsd.make
index 19c642d..8ebbe46 100644
--- a/rules/libbsd.make
+++ b/rules/libbsd.make
@@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBBSD) += libbsd
 #
 # Paths and names
 #
-LIBBSD_VERSION	:= 0.6.0
-LIBBSD_MD5	:= f6c75f0a9818e323a589bcbd560a0eb4
+LIBBSD_VERSION	:= 0.8.2
+LIBBSD_MD5	:= cdee252ccff978b50ad2336278c506c9
 LIBBSD		:= libbsd-$(LIBBSD_VERSION)
 LIBBSD_SUFFIX	:= tar.xz
 LIBBSD_URL	:= http://libbsd.freedesktop.org/releases/$(LIBBSD).$(LIBBSD_SUFFIX)
-- 
2.7.0


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [ptxdist] [PATCH] libbsd: bump version to 0.8.2 to fix CVE-2016-2090
  2016-02-06 17:04 [ptxdist] [PATCH] libbsd: bump version to 0.8.2 to fix CVE-2016-2090 Clemens Gruber
@ 2016-02-11 11:31 ` Michael Olbrich
  0 siblings, 0 replies; 2+ messages in thread
From: Michael Olbrich @ 2016-02-11 11:31 UTC (permalink / raw)
  To: ptxdist

On Sat, Feb 06, 2016 at 06:04:55PM +0100, Clemens Gruber wrote:
> Bump the version to 0.8.2, which includes a fix for the heap buffer
> overflow in fgetwln (CVE-2016-2090).
> 
> Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>

Thanks, applied. Don't forget the patches next time.

Michael

> ---
>  rules/libbsd.make | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/rules/libbsd.make b/rules/libbsd.make
> index 19c642d..8ebbe46 100644
> --- a/rules/libbsd.make
> +++ b/rules/libbsd.make
> @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBBSD) += libbsd
>  #
>  # Paths and names
>  #
> -LIBBSD_VERSION	:= 0.6.0
> -LIBBSD_MD5	:= f6c75f0a9818e323a589bcbd560a0eb4
> +LIBBSD_VERSION	:= 0.8.2
> +LIBBSD_MD5	:= cdee252ccff978b50ad2336278c506c9
>  LIBBSD		:= libbsd-$(LIBBSD_VERSION)
>  LIBBSD_SUFFIX	:= tar.xz
>  LIBBSD_URL	:= http://libbsd.freedesktop.org/releases/$(LIBBSD).$(LIBBSD_SUFFIX)
> -- 
> 2.7.0
> 
> 
> _______________________________________________
> ptxdist mailing list
> ptxdist@pengutronix.de

-- 
Pengutronix e.K.                           |                             |
Industrial Linux Solutions                 | http://www.pengutronix.de/  |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2016-02-11 11:31 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-02-06 17:04 [ptxdist] [PATCH] libbsd: bump version to 0.8.2 to fix CVE-2016-2090 Clemens Gruber
2016-02-11 11:31 ` Michael Olbrich

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox