* [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.1.35
@ 2018-08-18 15:27 Bernd Kuhls
2018-08-18 19:45 ` Thomas Petazzoni
2018-08-23 20:17 ` Peter Korsgaard
0 siblings, 2 replies; 3+ messages in thread
From: Bernd Kuhls @ 2018-08-18 15:27 UTC (permalink / raw)
To: buildroot
Fixes CVE-2018-3064, CVE-2018-3063, CVE-2018-3058 & CVE-2018-3066:
https://mariadb.com/kb/en/library/mariadb-10135-release-notes/
Added all hashes provided by upstream.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
---
package/mariadb/mariadb.hash | 7 +++++--
package/mariadb/mariadb.mk | 2 +-
2 files changed, 6 insertions(+), 3 deletions(-)
diff --git a/package/mariadb/mariadb.hash b/package/mariadb/mariadb.hash
index 7eea62ab7b..e4736465e0 100644
--- a/package/mariadb/mariadb.hash
+++ b/package/mariadb/mariadb.hash
@@ -1,5 +1,8 @@
-# From https://downloads.mariadb.org/mariadb/10.1.33/
-sha256 94312c519f2c0c25e1964c64e22aff0036fb22dfb2685638f43a6b2211395d2d mariadb-10.1.33.tar.gz
+# From https://downloads.mariadb.org/mariadb/10.1.35/
+md5 935f401314ff08a4177beb70fed6055c mariadb-10.1.35.tar.gz
+sha1 d322f0da17f4de475832dd534657eba5a936f77b mariadb-10.1.35.tar.gz
+sha256 9e91d985ed4f662126e3e5791fe91ec8a2f44ec811113c2b6fbc72fa14553c4d mariadb-10.1.35.tar.gz
+sha512 88e6049f3bbc3aa047e108f91a2c4f335758e80f25bfa2974b5f8c2e13f5758824d7835dece021b515c531e5641b9998e4de92256ad4b47b7f694da99bd471aa mariadb-10.1.35.tar.gz
# Hash for license files
sha256 69ce89a0cadbe35a858398c258be93c388715e84fc0ca04e5a1fd1aa9770dd3a README
diff --git a/package/mariadb/mariadb.mk b/package/mariadb/mariadb.mk
index e395d387e5..23822187c3 100644
--- a/package/mariadb/mariadb.mk
+++ b/package/mariadb/mariadb.mk
@@ -4,7 +4,7 @@
#
################################################################################
-MARIADB_VERSION = 10.1.33
+MARIADB_VERSION = 10.1.35
MARIADB_SITE = https://downloads.mariadb.org/interstitial/mariadb-$(MARIADB_VERSION)/source
MARIADB_LICENSE = GPL-2.0 (server), GPL-2.0 with FLOSS exception (GPL client library), LGPL-2.0 (LGPL client library)
# Tarball no longer contains LGPL license text
--
2.18.0
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.1.35
2018-08-18 15:27 [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.1.35 Bernd Kuhls
@ 2018-08-18 19:45 ` Thomas Petazzoni
2018-08-23 20:17 ` Peter Korsgaard
1 sibling, 0 replies; 3+ messages in thread
From: Thomas Petazzoni @ 2018-08-18 19:45 UTC (permalink / raw)
To: buildroot
Hello,
On Sat, 18 Aug 2018 17:27:07 +0200, Bernd Kuhls wrote:
> Fixes CVE-2018-3064, CVE-2018-3063, CVE-2018-3058 & CVE-2018-3066:
> https://mariadb.com/kb/en/library/mariadb-10135-release-notes/
>
> Added all hashes provided by upstream.
>
> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
> ---
> package/mariadb/mariadb.hash | 7 +++++--
> package/mariadb/mariadb.mk | 2 +-
> 2 files changed, 6 insertions(+), 3 deletions(-)
Applied to master, thanks.
Thomas
--
Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons)
Embedded Linux and Kernel engineering
https://bootlin.com
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.1.35
2018-08-18 15:27 [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.1.35 Bernd Kuhls
2018-08-18 19:45 ` Thomas Petazzoni
@ 2018-08-23 20:17 ` Peter Korsgaard
1 sibling, 0 replies; 3+ messages in thread
From: Peter Korsgaard @ 2018-08-23 20:17 UTC (permalink / raw)
To: buildroot
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:
> Fixes CVE-2018-3064, CVE-2018-3063, CVE-2018-3058 & CVE-2018-3066:
> https://mariadb.com/kb/en/library/mariadb-10135-release-notes/
> Added all hashes provided by upstream.
> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Committed to 2018.02.x and 2018.05.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2018-08-23 20:17 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-08-18 15:27 [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.1.35 Bernd Kuhls
2018-08-18 19:45 ` Thomas Petazzoni
2018-08-23 20:17 ` Peter Korsgaard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox