From: Jarkko Sakkinen via buildroot <buildroot@buildroot.org>
To: Fiona Klute <fiona.klute@gmx.de>
Cc: buildroot@buildroot.org
Subject: Re: [Buildroot] [PATCH 1/2] package/swtpm: security bump version to 0.10.2
Date: Mon, 26 Oct 2026 21:42:23 +0200 [thread overview]
Message-ID: <at-tH1CldypKDZJz@kernel.org> (raw)
In-Reply-To: <20261026190956.376568-1-fiona.klute@gmx.de>
On Mon, Oct 26, 2026 at 08:09:55PM +0100, Fiona Klute wrote:
> From: "Fiona Klute (othermo GmbH)" <fiona.klute@gmx.de>
>
> CVE-2026-75900: Fix length check in SWTPM_NVRAM_CheckHeader()
> https://github.com/advisories/GHSA-gqrg-h59c-j4wj
>
> Upstream changelog:
> https://github.com/stefanberger/swtpm/releases/tag/v0.10.2
>
> Signed-off-by: Fiona Klute (othermo GmbH) <fiona.klute@gmx.de>
> ---
> package/swtpm/swtpm.hash | 3 ++-
> package/swtpm/swtpm.mk | 2 +-
> 2 files changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/package/swtpm/swtpm.hash b/package/swtpm/swtpm.hash
> index ebad1ef4bf..4f6cbfd61d 100644
> --- a/package/swtpm/swtpm.hash
> +++ b/package/swtpm/swtpm.hash
> @@ -1,2 +1,3 @@
> -sha256 f8da11cadfed27e26d26c5f58a7b8f2d14d684e691927348906b5891f525c684 swtpm-0.10.1.tar.gz
> +# locally calculated
> +sha256 f61cf6f1e9bbcb4cefb30b70cafaf1c4df54c6961e65cfa63830e8ad0e220134 swtpm-0.10.2.tar.gz
> sha256 19d27d6e96d07022e5e688f75c974f1ceb9aae9e90e0fccae68666d02099cc4b LICENSE
> diff --git a/package/swtpm/swtpm.mk b/package/swtpm/swtpm.mk
> index de7f2fa05e..d6559c22d6 100644
> --- a/package/swtpm/swtpm.mk
> +++ b/package/swtpm/swtpm.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -SWTPM_VERSION = 0.10.1
> +SWTPM_VERSION = 0.10.2
> SWTPM_SITE = $(call github,stefanberger,swtpm,v$(SWTPM_VERSION))
> SWTPM_LICENSE = BSD-4-Clause
> SWTPM_LICENSE_FILES = LICENSE
> --
> 2.55.0
>
LGTM
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Br, Jarkko
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
next prev parent reply other threads:[~2026-10-26 19:42 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-26 19:09 [Buildroot] [PATCH 1/2] package/swtpm: security bump version to 0.10.2 Fiona Klute via buildroot
2026-10-26 19:09 ` [Buildroot] [PATCH 2/2] package/swtpm: fix license information Fiona Klute via buildroot
2026-10-26 19:42 ` Jarkko Sakkinen via buildroot
2026-10-26 19:42 ` Jarkko Sakkinen via buildroot [this message]
2026-10-26 20:41 ` [Buildroot] [PATCH 1/2] package/swtpm: security bump version to 0.10.2 Julien Olivain via buildroot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=at-tH1CldypKDZJz@kernel.org \
--to=buildroot@buildroot.org \
--cc=fiona.klute@gmx.de \
--cc=jarkko@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.