From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 7F3F2C3ABAA for ; Fri, 2 May 2025 10:22:41 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp1.osuosl.org (Postfix) with ESMTP id 1820083979; Fri, 2 May 2025 10:22:41 +0000 (UTC) X-Virus-Scanned: amavis at osuosl.org Received: from smtp1.osuosl.org ([127.0.0.1]) by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP id H5DKMads3gTv; Fri, 2 May 2025 10:22:40 +0000 (UTC) X-Comment: SPF check N/A for local connections - client-ip=140.211.166.142; helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org; receiver= DKIM-Filter: OpenDKIM Filter v2.11.0 smtp1.osuosl.org 3F9588376D Received: from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142]) by smtp1.osuosl.org (Postfix) with ESMTP id 3F9588376D; Fri, 2 May 2025 10:22:40 +0000 (UTC) Received: from smtp2.osuosl.org (smtp2.osuosl.org [IPv6:2605:bc80:3010::133]) by lists1.osuosl.org (Postfix) with ESMTP id 62E2BEE for ; Fri, 2 May 2025 10:22:39 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp2.osuosl.org (Postfix) with ESMTP id 5478540519 for ; Fri, 2 May 2025 10:22:39 +0000 (UTC) X-Virus-Scanned: amavis at osuosl.org Received: from smtp2.osuosl.org ([127.0.0.1]) by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP id bEWxmBVDBlQa for ; Fri, 2 May 2025 10:22:38 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=79.99.201.11; helo=mail1.nubo.coop; envelope-from=arnout@rnout.be; receiver= DMARC-Filter: OpenDMARC Filter v1.4.2 smtp2.osuosl.org 6A65A409C7 DKIM-Filter: OpenDKIM Filter v2.11.0 smtp2.osuosl.org 6A65A409C7 Received: from mail1.nubo.coop (mail1.nubo.coop [79.99.201.11]) by smtp2.osuosl.org (Postfix) with ESMTPS id 6A65A409C7 for ; Fri, 2 May 2025 10:22:38 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 6AEBF1C0D8C; Fri, 2 May 2025 12:22:36 +0200 (CEST) Message-ID: Date: Fri, 2 May 2025 12:22:34 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: Thomas Devoogdt , buildroot@buildroot.org Cc: Thomas Devoogdt References: <20250414212453.2903952-1-thomas@devoogdt.com> Content-Language: en-GB, fr-BE In-Reply-To: <20250414212453.2903952-1-thomas@devoogdt.com> X-Last-TLS-Session-Version: TLSv1.3 X-Mailman-Original-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rnout.be; s=dkim; t=1746181356; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=N15Hi+jPAxuX24J5tC3zCe9VgpHKAfaA9+xe7Jdr1dE=; b=GCG7HKd1d03t7eYdajYdc6bnKD3L1jWP6X9Dpz7uRa7W1EFGBS74t4HZ7G1YoWilgUYWrE s5WWsm0HqTOS+D2FaA7vfUe8F1TOdfKB2nUgtnbHi+u3Bs2/nCdwdcYCbMnlZNNeX60PEG 7PF7+ePpCtYXsQcJDB87BqiRnpiSrJs2uFqzGF37sxDIYhXxiefoPLx1z10AVOoyc+edKc bTlHJMqhL7BdDMFbAZlYnJSaPKF1ZRPgaVfkXi2wnjnEEp8DilftPLLrgf1x6YdO6ReOen c9Je1Wyrqzz9VkH+Cg7IZ3BOqyysM6G6dtCgIgRPVHzsI0JfGX+xFOx6RlGYjQ== X-Mailman-Original-Authentication-Results: smtp2.osuosl.org; dmarc=pass (p=reject dis=none) header.from=rnout.be X-Mailman-Original-Authentication-Results: smtp2.osuosl.org; dkim=pass (2048-bit key) header.d=rnout.be header.i=@rnout.be header.a=rsa-sha256 header.s=dkim header.b=GCG7HKd1 Subject: Re: [Buildroot] [PATCH v1] package/libfcgi: bump to 2.4.5 to fix CVE-2025-23016 X-BeenThere: buildroot@buildroot.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Arnout Vandecappelle via buildroot Reply-To: Arnout Vandecappelle Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Errors-To: buildroot-bounces@buildroot.org Sender: "buildroot" On 14/04/2025 23:24, Thomas Devoogdt wrote: > From: Thomas Devoogdt > > Announcement: > - https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.5 > > See: > - https://nvd.nist.gov/vuln/detail/CVE-2025-23016 > - https://github.com/advisories/GHSA-9825-56cx-cfg6 > - https://github.com/FastCGI-Archives/fcgi2/issues/67 > > Signed-off-by: Thomas Devoogdt Applied to 2025.02.x, thanks. Regards, Arnout > --- > package/libfcgi/libfcgi.hash | 2 +- > package/libfcgi/libfcgi.mk | 2 +- > 2 files changed, 2 insertions(+), 2 deletions(-) > > diff --git a/package/libfcgi/libfcgi.hash b/package/libfcgi/libfcgi.hash > index ca660c6ebd..371dba8939 100644 > --- a/package/libfcgi/libfcgi.hash > +++ b/package/libfcgi/libfcgi.hash > @@ -1,3 +1,3 @@ > # Locally calculated > -sha256 c0e0d9cc7d1e456d7278c974e2826f593ef5ca555783eba81e7e9c1a07ae0ecc libfcgi-2.4.4.tar.gz > +sha256 92b0111a98d8636e06c128444a3d4d7a720bdd54e6ee4dd0c7b67775b1b0abff libfcgi-2.4.5.tar.gz > sha256 f0a8fe4513a43e8eebb24cdcf9d2e7efc52e4d8259178c6d76d3d84418397d81 LICENSE > diff --git a/package/libfcgi/libfcgi.mk b/package/libfcgi/libfcgi.mk > index 3c90b30e39..2348af843b 100644 > --- a/package/libfcgi/libfcgi.mk > +++ b/package/libfcgi/libfcgi.mk > @@ -4,7 +4,7 @@ > # > ################################################################################ > > -LIBFCGI_VERSION = 2.4.4 > +LIBFCGI_VERSION = 2.4.5 > LIBFCGI_SITE = $(call github,FastCGI-Archives,fcgi2,$(LIBFCGI_VERSION)) > LIBFCGI_LICENSE = OML > LIBFCGI_LICENSE_FILES = LICENSE _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot