All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Yann E. MORIN" <yann.morin.1998@free.fr>
To: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Cc: buildroot@buildroot.org
Subject: Re: [Buildroot] [PATCH 1/1] package/libebml: security bump to version 1.4.5
Date: Tue, 26 Dec 2023 21:28:45 +0100	[thread overview]
Message-ID: <ZYs3fZ9YMPVWUdMo@landeda> (raw)
In-Reply-To: <20231226170333.820436-1-fontaine.fabrice@gmail.com>

Fabrice, All,

On 2023-12-26 18:03 +0100, Fabrice Fontaine spake thusly:
> Fix invalid memory access (reading beyond allocated memory) due to
> missing integer overflow check.
> 
> https://github.com/Matroska-Org/libebml/blob/release-1.4.5/NEWS.md
> 
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Applied to master, thanks.

Regards,
Yann E. MORIN.

> ---
>  package/libebml/libebml.hash | 2 +-
>  package/libebml/libebml.mk   | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/package/libebml/libebml.hash b/package/libebml/libebml.hash
> index c83fde32ab..34626eb1f4 100644
> --- a/package/libebml/libebml.hash
> +++ b/package/libebml/libebml.hash
> @@ -1,3 +1,3 @@
>  # Locally calculated
> -sha256  82dc5f83356cc9340aee76ed7512210b3a4edf5f346bc9c2c7044f55052687a7  libebml-1.4.4.tar.xz
> +sha256  4971640b0592da29c2d426f303e137a9b0b3d07e1b81d069c1e56a2f49ab221b  libebml-1.4.5.tar.xz
>  sha256  dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551  LICENSE.LGPL
> diff --git a/package/libebml/libebml.mk b/package/libebml/libebml.mk
> index c85638c03e..0f69de8c81 100644
> --- a/package/libebml/libebml.mk
> +++ b/package/libebml/libebml.mk
> @@ -4,7 +4,7 @@
>  #
>  ################################################################################
>  
> -LIBEBML_VERSION = 1.4.4
> +LIBEBML_VERSION = 1.4.5
>  LIBEBML_SOURCE = libebml-$(LIBEBML_VERSION).tar.xz
>  LIBEBML_SITE = http://dl.matroska.org/downloads/libebml
>  LIBEBML_INSTALL_STAGING = YES
> -- 
> 2.43.0
> 
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot

-- 
.-----------------.--------------------.------------------.--------------------.
|  Yann E. MORIN  | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software  Designer | \ / CAMPAIGN     |  ___               |
| +33 561 099 427 `------------.-------:  X  AGAINST      |  \e/  There is no  |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL    |   v   conspiracy.  |
'------------------------------^-------^------------------^--------------------'
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

  reply	other threads:[~2023-12-26 20:28 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-12-26 17:03 [Buildroot] [PATCH 1/1] package/libebml: security bump to version 1.4.5 Fabrice Fontaine
2023-12-26 20:28 ` Yann E. MORIN [this message]
2024-01-10  9:47 ` Peter Korsgaard

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=ZYs3fZ9YMPVWUdMo@landeda \
    --to=yann.morin.1998@free.fr \
    --cc=buildroot@buildroot.org \
    --cc=fontaine.fabrice@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.