* [Buildroot] [PATCH 1/1] package/janet: security bump to version 1.22.0 @ 2022-05-29 19:42 Fabrice Fontaine 2022-05-30 15:46 ` Peter Korsgaard 2022-06-06 12:21 ` Peter Korsgaard 0 siblings, 2 replies; 4+ messages in thread From: Fabrice Fontaine @ 2022-05-29 19:42 UTC (permalink / raw) To: buildroot; +Cc: Fabrice Fontaine Fix CVE-2022-30763: Janet before 1.22.0 mishandles arrays. https://github.com/janet-lang/janet/releases/tag/v1.22.0 https://blog.convisoappsec.com/en/bug-hunting-in-the-janet-language-interpreter Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> --- package/janet/janet.hash | 2 +- package/janet/janet.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/janet/janet.hash b/package/janet/janet.hash index aff8e95bb5..a93129cfa5 100644 --- a/package/janet/janet.hash +++ b/package/janet/janet.hash @@ -1,5 +1,5 @@ # Locally calculated -sha256 52db8d18f93351256d0731810e8bea95516db8142f51eeb31664f7884bf63088 janet-1.21.2.tar.gz +sha256 7c6969f8e82badc7afa28aa1054555c1c91d2858f9f45c41a82557f5c5ce85bd janet-1.22.0.tar.gz # Locally calculated sha256 e2d2ae8360d95386af751ac7d1a3da36ea8ceb230e5f0eba7eb762547b1c58c9 LICENSE diff --git a/package/janet/janet.mk b/package/janet/janet.mk index 24a0f86032..ad09d47c6a 100644 --- a/package/janet/janet.mk +++ b/package/janet/janet.mk @@ -4,7 +4,7 @@ # ################################################################################ -JANET_VERSION = 1.21.2 +JANET_VERSION = 1.22.0 JANET_SITE = $(call github,janet-lang,janet,v$(JANET_VERSION)) JANET_LICENSE = MIT JANET_LICENSE_FILES = LICENSE -- 2.35.1 _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot ^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/janet: security bump to version 1.22.0 2022-05-29 19:42 [Buildroot] [PATCH 1/1] package/janet: security bump to version 1.22.0 Fabrice Fontaine @ 2022-05-30 15:46 ` Peter Korsgaard 2022-05-30 15:47 ` Peter Korsgaard 2022-06-06 12:21 ` Peter Korsgaard 1 sibling, 1 reply; 4+ messages in thread From: Peter Korsgaard @ 2022-05-30 15:46 UTC (permalink / raw) To: Fabrice Fontaine; +Cc: buildroot >>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes: > Fix CVE-2022-30763: Janet before 1.22.0 mishandles arrays. > https://github.com/janet-lang/janet/releases/tag/v1.22.0 > https://blog.convisoappsec.com/en/bug-hunting-in-the-janet-language-interpreter > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Committed to 2022.02.x, thanks. -- Bye, Peter Korsgaard _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/janet: security bump to version 1.22.0 2022-05-30 15:46 ` Peter Korsgaard @ 2022-05-30 15:47 ` Peter Korsgaard 0 siblings, 0 replies; 4+ messages in thread From: Peter Korsgaard @ 2022-05-30 15:47 UTC (permalink / raw) To: Fabrice Fontaine; +Cc: buildroot >>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes: >>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes: >> Fix CVE-2022-30763: Janet before 1.22.0 mishandles arrays. >> https://github.com/janet-lang/janet/releases/tag/v1.22.0 >> https://blog.convisoappsec.com/en/bug-hunting-in-the-janet-language-interpreter >> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> > Committed to 2022.02.x, thanks. Sorry, I meant to master. -- Bye, Peter Korsgaard _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/janet: security bump to version 1.22.0 2022-05-29 19:42 [Buildroot] [PATCH 1/1] package/janet: security bump to version 1.22.0 Fabrice Fontaine 2022-05-30 15:46 ` Peter Korsgaard @ 2022-06-06 12:21 ` Peter Korsgaard 1 sibling, 0 replies; 4+ messages in thread From: Peter Korsgaard @ 2022-06-06 12:21 UTC (permalink / raw) To: Fabrice Fontaine; +Cc: buildroot >>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes: > Fix CVE-2022-30763: Janet before 1.22.0 mishandles arrays. > https://github.com/janet-lang/janet/releases/tag/v1.22.0 > https://blog.convisoappsec.com/en/bug-hunting-in-the-janet-language-interpreter > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Committed to 2022.02.x, thanks. -- Bye, Peter Korsgaard _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2022-06-06 12:22 UTC | newest] Thread overview: 4+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2022-05-29 19:42 [Buildroot] [PATCH 1/1] package/janet: security bump to version 1.22.0 Fabrice Fontaine 2022-05-30 15:46 ` Peter Korsgaard 2022-05-30 15:47 ` Peter Korsgaard 2022-06-06 12:21 ` Peter Korsgaard
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox