mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-23 15:54:21 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libkrb5: security bump to version 1.17.2

Browse Source 
Fixes the following security issues:

- CVE-2020-28196: MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before
  1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message
  because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite
  lengths lacks a recursion limit.

Also fix .hash file indentation and update the NOTICE hash for a change of
copyright year.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Peter Korsgaard
2020-12-09 09:38:38 +01:00
parent c845a61b72
commit c38f411d36
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/libkrb5/libkrb5.hash
View File

@@ -1,5 +1,5 @@
# Locally calculated after checking pgp signature
sha256 5a6e2284a53de5702d3dc2be3b9339c963f9b5397d3fbbc53beb249380a781f5 krb5-1.17.tar.gz
sha256 1a4bba94df92f6d39a197a10687653e8bfbc9a2076e129f6eb92766974f86134 krb5-1.17.2.tar.gz
# Hash for license file:
sha256 5149ea464bde245388d313309539e142156d371788ae57bbd4feb223757f6da1 NOTICE
sha256 b7a5f14a8719bce5e49a761998aa55438fc890fb40f71228d6a49546f6d5690d NOTICE

2
package/libkrb5/libkrb5.mk
View File

@@ -5,7 +5,7 @@
################################################################################
LIBKRB5_VERSION_MAJOR = 1.17
LIBKRB5_VERSION = $(LIBKRB5_VERSION_MAJOR)
LIBKRB5_VERSION = $(LIBKRB5_VERSION_MAJOR).2
LIBKRB5_SITE = https://web.mit.edu/kerberos/dist/krb5/$(LIBKRB5_VERSION_MAJOR)
LIBKRB5_SOURCE = krb5-$(LIBKRB5_VERSION).tar.gz
LIBKRB5_SUBDIR = src