From mboxrd@z Thu Jan 1 00:00:00 1970 From: Thomas Petazzoni Date: Tue, 14 Jul 2020 22:08:51 +0200 Subject: [Buildroot] [2020.02.x] package/pcre: security bump to 8.44 In-Reply-To: <20200714194008.63423-1-matthew.weber@rockwellcollins.com> References: <20200714194008.63423-1-matthew.weber@rockwellcollins.com> Message-ID: <20200714220851.3d616930@windsurf.home> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net On Tue, 14 Jul 2020 14:40:08 -0500 Matt Weber wrote: > * 0001-Kill-compatibility-bits.patch had a bugfix for the lcc > compiler (https://vcs.pcre.org/pcre/code/trunk/pcrecpp.cc?r1=1735&r2=1752&pathrev=1763) > * License file updated copyright date > > Signed-off-by: Matthew Weber There is already a bump to 8.44 in master. Why do you send a separate patch doing the same thing, but for 2020.02.x ? I think in this kind of case, we should instead reply to the commit e-mail, and ask Peter to backport it to 2020.02.x. However, you label it as a security bump, without saying which vulnerability is being fixed. The original version bump commit did not label it as a security bump. Thomas -- Thomas Petazzoni, CTO, Bootlin Embedded Linux and Kernel engineering https://bootlin.com