mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 07:51:59 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/fluent-bit: security bump to version 2.2.3

Browse Source 
Fixes the following security vulnerability:

- CVE-2024-4323: A memory corruption vulnerability in Fluent Bit versions
  2.0.7 thru 3.0.3.  This issue lies in the embedded http server’s parsing
  of trace requests and may result in denial of service conditions,
  information disclosure, or remote code execution.

https://fluentbit.io/announcements/v2.2.3/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Peter Korsgaard
2024-07-08 13:26:53 +02:00
parent 1899589f66
commit f5a0a04783
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/fluent-bit/fluent-bit.hash
View File

@@ -1,3 +1,3 @@
# Locally computed
sha256 8e7e951b2907e9d29508699c71c8949a4a22d750d54ffa5ee5b96537e59371dd fluent-bit-2.2.2.tar.gz
sha256 006ed94d34e4036fb7fb5a02016ccf3a55d7f5ccdefd5df756d1ba2206cfc55d fluent-bit-2.2.3.tar.gz
sha256 0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594 LICENSE

2
package/fluent-bit/fluent-bit.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
FLUENT_BIT_VERSION = 2.2.2
FLUENT_BIT_VERSION = 2.2.3
FLUENT_BIT_SITE = $(call github,fluent,fluent-bit,v$(FLUENT_BIT_VERSION))
FLUENT_BIT_LICENSE = Apache-2.0
FLUENT_BIT_LICENSE_FILES = LICENSE