Skip to contentSkip to conversation

libbsd: security bump to version 0.8.2

PATCH New Gustavo Zacarias 2 participants 3 messages Feb 5, 2016

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 libbsd: security bump to version 0.8.2

Fixes:
CVE-2016-2090 - denial of service due to a buffer overflow in the "fgetwln"-function.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/libbsd/libbsd.hash | 2 +-
 package/libbsd/libbsd.mk   | 3 +--
 2 files changed, 2 insertions(+), 3 deletions(-)
package/libbsd/libbsd.hash +1 -1
index be4ba50..f77c0aa 100644
@@ -1,2 +1,2 @@
 # Locally calculated after checking pgp signature
-sha256	9e8f34ffa9c8579c87965a55a82d8ac37a1dc64858f717b7c49452ade277cc62	libbsd-0.6.0.tar.xz
+sha256	b2f644cae94a6e2fe109449c20ad79a0f6ee4faec2205b07eefa0020565e250a	libbsd-0.8.2.tar.xz
package/libbsd/libbsd.mk +1 -2
index 99a9572..62dee06 100644
@@ -4,12 +4,11 @@
 #
 ################################################################################
 
-LIBBSD_VERSION = 0.6.0
+LIBBSD_VERSION = 0.8.2
 LIBBSD_SOURCE = libbsd-$(LIBBSD_VERSION).tar.xz
 LIBBSD_SITE = http://libbsd.freedesktop.org/releases
 LIBBSD_LICENSE = BSD-3c, MIT
 LIBBSD_LICENSE_FILES = COPYING
-
 LIBBSD_INSTALL_STAGING = YES
 
 $(eval $(autotools-package))
Signature · 1 line
2.4.10
#1 lore raw

PATCH 1/1 libbsd: security bump to version 0.8.2

Am Fri, 05 Feb 2016 15:28:19 -0300 schrieb Gustavo Zacarias:

package/libbsd/libbsd.mk line 7

Quoted 2 lines
package/libbsd/libbsd.mk +1 -1
-LIBBSD_VERSION = 0.6.0
+LIBBSD_VERSION = 0.8.2

Hi Gustavo,

your patch looks like a duplicate to http://patchwork.ozlabs.org/patch/578996/

Regards, Bernd

author
#2 lore raw

PATCH 1/1 libbsd: security bump to version 0.8.2

Quoted 8 lines · Bernd Kuhls

package/libbsd/libbsd.mk line 7

Quoted 2 lines
package/libbsd/libbsd.mk +1 -1
-LIBBSD_VERSION = 0.6.0
+LIBBSD_VERSION = 0.8.2

Hi Gustavo,

your patch looks like a duplicate to http://patchwork.ozlabs.org/patch/578996/

Regards, Bernd

Hi, thanks, missed that one.
It should be noted that right now it's urgent since it's a security bump. Regards.