| Message ID | 20161221074849.22907-1-peter@korsgaard.com |
|---|---|
| State | Accepted |
| Commit | 0c5beb6501707dd5cb80484562bf2b0cbe2b4423 |
| Headers | show |
>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes: > Fixes CVE-2016-9586 - printf floating point buffer overflow > For details, see: > https://curl.haxx.se/docs/adv_20161221A.html > Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Committed, thanks.
Hi Peter, On Wed, Dec 21, 2016 at 05:15:20PM +0100, Peter Korsgaard wrote: > >>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes: > > > Fixes CVE-2016-9586 - printf floating point buffer overflow > > For details, see: > > https://curl.haxx.se/docs/adv_20161221A.html > > > Signed-off-by: Peter Korsgaard <peter@korsgaard.com> > > Committed, thanks. Not in master as of be1a3a3e46 (gcc: bump 6.x series to version 6.3.0). baruch
>>>>> "Baruch" == Baruch Siach <baruch@tkos.co.il> writes: Hi, >> Committed, thanks. > Not in master as of be1a3a3e46 (gcc: bump 6.x series to version 6.3.0). Gaah, indeed - Fixed now.
diff --git a/package/libcurl/libcurl.hash b/package/libcurl/libcurl.hash index e128335..2b68c6a 100644 --- a/package/libcurl/libcurl.hash +++ b/package/libcurl/libcurl.hash @@ -1,2 +1,2 @@ # Locally calculated after checking pgp signature -sha256 7f8240048907e5030f67be0a6129bc4b333783b9cca1391026d700835a788dde curl-7.51.0.tar.bz2 +sha256 b9a2e18b4785eb75ad84598720e1559e1c53550ea011c0e00becdb94e2df5cc6 curl-7.52.0.tar.bz2 diff --git a/package/libcurl/libcurl.mk b/package/libcurl/libcurl.mk index 197e0b5..b2a1b24 100644 --- a/package/libcurl/libcurl.mk +++ b/package/libcurl/libcurl.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBCURL_VERSION = 7.51.0 +LIBCURL_VERSION = 7.52.0 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.bz2 LIBCURL_SITE = https://curl.haxx.se/download LIBCURL_DEPENDENCIES = host-pkgconf \
Fixes CVE-2016-9586 - printf floating point buffer overflow For details, see: https://curl.haxx.se/docs/adv_20161221A.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> --- package/libcurl/libcurl.hash | 2 +- package/libcurl/libcurl.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)