* [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1
@ 2026-10-23 7:35 Peter Korsgaard
2026-10-23 7:35 ` [Buildroot] [PATCH 2/2] package/brotli: use github macro Peter Korsgaard
` (2 more replies)
0 siblings, 3 replies; 5+ messages in thread
From: Peter Korsgaard @ 2026-10-23 7:35 UTC (permalink / raw)
To: buildroot; +Cc: Adrian Perez de Castro
Fixes the following vulnerability:
CVE-2026-111497: out-of-bounds write permits remote code execution
https://github.com/advisories/GHSA-9v8h-qqgm-4m35
https://github.com/google/brotli/releases/tag/v1.2.1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
package/brotli/brotli.hash | 2 +-
package/brotli/brotli.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/brotli/brotli.hash b/package/brotli/brotli.hash
index 9ec1f79c7d..a777737338 100644
--- a/package/brotli/brotli.hash
+++ b/package/brotli/brotli.hash
@@ -1,5 +1,5 @@
# Locally generated:
-sha512 f94542afd2ecd96cc41fd21a805a3da314281ae558c10650f3e6d9ca732b8425bba8fde312823f0a564c7de3993bdaab5b43378edab65ebb798cefb6fd702256 v1.2.0.tar.gz
+sha512 460591287d428c8b5a8a2766b5b424d14501fcda12c7118b8f3cc4bfae44b90ac75ca156557f07b6e22542612724d904533e5f70019be07dbbb604c46f03ab69 v1.2.1.tar.gz
# Hash for license files:
sha512 bae78184c2f50f86d8c727826d3982c469454c42b9af81f4ef007e39036434fa894cf5be3bf5fc65b7de2301f0a72d067a8186e303327db8a96bd14867e0a3a8 LICENSE
diff --git a/package/brotli/brotli.mk b/package/brotli/brotli.mk
index aded9cf17b..c040878c36 100644
--- a/package/brotli/brotli.mk
+++ b/package/brotli/brotli.mk
@@ -4,7 +4,7 @@
#
################################################################################
-BROTLI_VERSION = 1.2.0
+BROTLI_VERSION = 1.2.1
BROTLI_SOURCE = v$(BROTLI_VERSION).tar.gz
BROTLI_SITE = https://github.com/google/brotli/archive
BROTLI_LICENSE = MIT
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 5+ messages in thread
* [Buildroot] [PATCH 2/2] package/brotli: use github macro
2026-10-23 7:35 [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1 Peter Korsgaard
@ 2026-10-23 7:35 ` Peter Korsgaard
2026-10-30 15:28 ` Raphaël Mélotte via buildroot
2026-10-23 10:50 ` [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1 Julien Olivain via buildroot
2026-10-30 15:28 ` Raphaël Mélotte via buildroot
2 siblings, 1 reply; 5+ messages in thread
From: Peter Korsgaard @ 2026-10-23 7:35 UTC (permalink / raw)
To: buildroot; +Cc: Adrian Perez de Castro
For consistency and to end up with a nicer filename.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
package/brotli/brotli.hash | 2 +-
package/brotli/brotli.mk | 3 +--
2 files changed, 2 insertions(+), 3 deletions(-)
diff --git a/package/brotli/brotli.hash b/package/brotli/brotli.hash
index a777737338..c851d7fad1 100644
--- a/package/brotli/brotli.hash
+++ b/package/brotli/brotli.hash
@@ -1,5 +1,5 @@
# Locally generated:
-sha512 460591287d428c8b5a8a2766b5b424d14501fcda12c7118b8f3cc4bfae44b90ac75ca156557f07b6e22542612724d904533e5f70019be07dbbb604c46f03ab69 v1.2.1.tar.gz
+sha512 460591287d428c8b5a8a2766b5b424d14501fcda12c7118b8f3cc4bfae44b90ac75ca156557f07b6e22542612724d904533e5f70019be07dbbb604c46f03ab69 brotli-1.2.1.tar.gz
# Hash for license files:
sha512 bae78184c2f50f86d8c727826d3982c469454c42b9af81f4ef007e39036434fa894cf5be3bf5fc65b7de2301f0a72d067a8186e303327db8a96bd14867e0a3a8 LICENSE
diff --git a/package/brotli/brotli.mk b/package/brotli/brotli.mk
index c040878c36..47e2f8e57c 100644
--- a/package/brotli/brotli.mk
+++ b/package/brotli/brotli.mk
@@ -5,8 +5,7 @@
################################################################################
BROTLI_VERSION = 1.2.1
-BROTLI_SOURCE = v$(BROTLI_VERSION).tar.gz
-BROTLI_SITE = https://github.com/google/brotli/archive
+BROTLI_SITE = $(call github,google,brotli,v$(BROTLI_VERSION))
BROTLI_LICENSE = MIT
BROTLI_LICENSE_FILES = LICENSE
BROTLI_CPE_ID_VENDOR = google
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1
2026-10-23 7:35 [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1 Peter Korsgaard
2026-10-23 7:35 ` [Buildroot] [PATCH 2/2] package/brotli: use github macro Peter Korsgaard
@ 2026-10-23 10:50 ` Julien Olivain via buildroot
2026-10-30 15:28 ` Raphaël Mélotte via buildroot
2 siblings, 0 replies; 5+ messages in thread
From: Julien Olivain via buildroot @ 2026-10-23 10:50 UTC (permalink / raw)
To: Peter Korsgaard; +Cc: buildroot, Adrian Perez de Castro
On 23/10/2026 09:35, Peter Korsgaard wrote:
> Fixes the following vulnerability:
>
> CVE-2026-111497: out-of-bounds write permits remote code execution
>
> https://github.com/advisories/GHSA-9v8h-qqgm-4m35
>
> https://github.com/google/brotli/releases/tag/v1.2.1
>
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Series applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1
2026-10-23 7:35 [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1 Peter Korsgaard
2026-10-23 7:35 ` [Buildroot] [PATCH 2/2] package/brotli: use github macro Peter Korsgaard
2026-10-23 10:50 ` [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1 Julien Olivain via buildroot
@ 2026-10-30 15:28 ` Raphaël Mélotte via buildroot
2 siblings, 0 replies; 5+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-10-30 15:28 UTC (permalink / raw)
To: buildroot, Peter Korsgaard; +Cc: Raphaël Mélotte
In reply of:
> Fixes the following vulnerability:
>
> CVE-2026-111497: out-of-bounds write permits remote code execution
>
> https://github.com/advisories/GHSA-9v8h-qqgm-4m35
>
> https://github.com/google/brotli/releases/tag/v1.2.1
>
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Applied to 2026.08.x. Thanks
> ---
> package/brotli/brotli.hash | 2 +-
> package/brotli/brotli.mk | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/package/brotli/brotli.hash b/package/brotli/brotli.hash
> index 9ec1f79c7d..a777737338 100644
> --- a/package/brotli/brotli.hash
> +++ b/package/brotli/brotli.hash
> @@ -1,5 +1,5 @@
> # Locally generated:
> -sha512 f94542afd2ecd96cc41fd21a805a3da314281ae558c10650f3e6d9ca732b8425bba8fde312823f0a564c7de3993bdaab5b43378edab65ebb798cefb6fd702256 v1.2.0.tar.gz
> +sha512 460591287d428c8b5a8a2766b5b424d14501fcda12c7118b8f3cc4bfae44b90ac75ca156557f07b6e22542612724d904533e5f70019be07dbbb604c46f03ab69 v1.2.1.tar.gz
>
> # Hash for license files:
> sha512 bae78184c2f50f86d8c727826d3982c469454c42b9af81f4ef007e39036434fa894cf5be3bf5fc65b7de2301f0a72d067a8186e303327db8a96bd14867e0a3a8 LICENSE
> diff --git a/package/brotli/brotli.mk b/package/brotli/brotli.mk
> index aded9cf17b..c040878c36 100644
> --- a/package/brotli/brotli.mk
> +++ b/package/brotli/brotli.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -BROTLI_VERSION = 1.2.0
> +BROTLI_VERSION = 1.2.1
> BROTLI_SOURCE = v$(BROTLI_VERSION).tar.gz
> BROTLI_SITE = https://github.com/google/brotli/archive
> BROTLI_LICENSE = MIT
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 2/2] package/brotli: use github macro
2026-10-23 7:35 ` [Buildroot] [PATCH 2/2] package/brotli: use github macro Peter Korsgaard
@ 2026-10-30 15:28 ` Raphaël Mélotte via buildroot
0 siblings, 0 replies; 5+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-10-30 15:28 UTC (permalink / raw)
To: buildroot, Peter Korsgaard; +Cc: Raphaël Mélotte
In reply of:
> For consistency and to end up with a nicer filename.
>
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Applied to 2025.02.x, 2026.08.x. Thanks
> ---
> package/brotli/brotli.hash | 2 +-
> package/brotli/brotli.mk | 3 +--
> 2 files changed, 2 insertions(+), 3 deletions(-)
>
> diff --git a/package/brotli/brotli.hash b/package/brotli/brotli.hash
> index a777737338..c851d7fad1 100644
> --- a/package/brotli/brotli.hash
> +++ b/package/brotli/brotli.hash
> @@ -1,5 +1,5 @@
> # Locally generated:
> -sha512 460591287d428c8b5a8a2766b5b424d14501fcda12c7118b8f3cc4bfae44b90ac75ca156557f07b6e22542612724d904533e5f70019be07dbbb604c46f03ab69 v1.2.1.tar.gz
> +sha512 460591287d428c8b5a8a2766b5b424d14501fcda12c7118b8f3cc4bfae44b90ac75ca156557f07b6e22542612724d904533e5f70019be07dbbb604c46f03ab69 brotli-1.2.1.tar.gz
>
> # Hash for license files:
> sha512 bae78184c2f50f86d8c727826d3982c469454c42b9af81f4ef007e39036434fa894cf5be3bf5fc65b7de2301f0a72d067a8186e303327db8a96bd14867e0a3a8 LICENSE
> diff --git a/package/brotli/brotli.mk b/package/brotli/brotli.mk
> index c040878c36..47e2f8e57c 100644
> --- a/package/brotli/brotli.mk
> +++ b/package/brotli/brotli.mk
> @@ -5,8 +5,7 @@
> ################################################################################
>
> BROTLI_VERSION = 1.2.1
> -BROTLI_SOURCE = v$(BROTLI_VERSION).tar.gz
> -BROTLI_SITE = https://github.com/google/brotli/archive
> +BROTLI_SITE = $(call github,google,brotli,v$(BROTLI_VERSION))
> BROTLI_LICENSE = MIT
> BROTLI_LICENSE_FILES = LICENSE
> BROTLI_CPE_ID_VENDOR = google
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2026-10-30 15:29 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-23 7:35 [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1 Peter Korsgaard
2026-10-23 7:35 ` [Buildroot] [PATCH 2/2] package/brotli: use github macro Peter Korsgaard
2026-10-30 15:28 ` Raphaël Mélotte via buildroot
2026-10-23 10:50 ` [Buildroot] [PATCH 1/2] package/brotli: security bump to version 1.2.1 Julien Olivain via buildroot
2026-10-30 15:28 ` Raphaël Mélotte via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.