mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-10 00:04:06 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/x11r7/xlib_libXpm: bump version to 3.5.12

Browse Source 
Fixes CVE-2016-10164: The affected code is prone to two 32 bit integer
overflows while parsing extensions: the amount of extensions and their
concatenated length.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
(cherry picked from commit e9f66e194a)
This commit is contained in:
Bernd Kuhls
2016-12-18 14:04:20 +01:00
committed by Peter Korsgaard
parent b8e588e623
commit 0d09bfa43f
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/x11r7/xlib_libXpm/xlib_libXpm.hash
View File

@@ -1,2 +1,2 @@
# From http://lists.freedesktop.org/archives/xorg/2013-September/056010.html
sha256 c5bdafa51d1ae30086fac01ab83be8d47fe117b238d3437f8e965434090e041c libXpm-3.5.11.tar.bz2
# From https://lists.x.org/archives/xorg-announce/2016-December/002752.html
sha256 fd6a6de3da48de8d1bb738ab6be4ad67f7cb0986c39bd3f7d51dd24f7854bdec libXpm-3.5.12.tar.bz2

2
package/x11r7/xlib_libXpm/xlib_libXpm.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
XLIB_LIBXPM_VERSION = 3.5.11
XLIB_LIBXPM_VERSION = 3.5.12
XLIB_LIBXPM_SOURCE = libXpm-$(XLIB_LIBXPM_VERSION).tar.bz2
XLIB_LIBXPM_SITE = http://xorg.freedesktop.org/releases/individual/lib
XLIB_LIBXPM_LICENSE = MIT