| Message ID | 20191129080951.33195-1-fontaine.fabrice@gmail.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [1/1] package/oniguruma: security bump to version 6.9.4 | expand |
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes: > - Retrieve official tarball to drop autoreconf > - Fixed CVE-2019-19012 > - Fixed CVE-2019-19203 (Does not affect UTF-8, UTF-16 and UTF-32 > encodings) > - Fixed CVE-2019-19204 (Affects only PosixBasic, Emacs and Grep > syntaxes) > - Fixed CVE-2019-19246 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Committed, thanks.
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes: > - Retrieve official tarball to drop autoreconf > - Fixed CVE-2019-19012 > - Fixed CVE-2019-19203 (Does not affect UTF-8, UTF-16 and UTF-32 > encodings) > - Fixed CVE-2019-19204 (Affects only PosixBasic, Emacs and Grep > syntaxes) > - Fixed CVE-2019-19246 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Committed to 2019.08.x, thanks.
diff --git a/package/oniguruma/oniguruma.hash b/package/oniguruma/oniguruma.hash index de75df5473..b0764ab1fc 100644 --- a/package/oniguruma/oniguruma.hash +++ b/package/oniguruma/oniguruma.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 dc6dec742941e24b761cea1b9a2f12e750879107ae69fd80ae1046459d4fb1db oniguruma-6.9.3.tar.gz +sha256 4669d22ff7e0992a7e93e116161cac9c0949cd8960d1c562982026726f0e6d53 onig-6.9.4.tar.gz sha256 ae266a1ad1c2ef50baf14a1a2993e926cd46d09c6cc8b0b3a8498e44da2746b8 COPYING diff --git a/package/oniguruma/oniguruma.mk b/package/oniguruma/oniguruma.mk index 2b48dadc0a..2126ff9120 100644 --- a/package/oniguruma/oniguruma.mk +++ b/package/oniguruma/oniguruma.mk @@ -4,12 +4,12 @@ # ################################################################################ -ONIGURUMA_VERSION = 6.9.3 -ONIGURUMA_SITE = $(call github,kkos,oniguruma,v$(ONIGURUMA_VERSION)) +ONIGURUMA_VERSION = 6.9.4 +ONIGURUMA_SITE = \ + https://github.com/kkos/oniguruma/releases/download/v$(ONIGURUMA_VERSION) +ONIGURUMA_SOURCE = onig-$(ONIGURUMA_VERSION).tar.gz ONIGURUMA_LICENSE = BSD-2-Clause ONIGURUMA_LICENSE_FILES = COPYING -# From git -ONIGURUMA_AUTORECONF = YES ONIGURUMA_INSTALL_STAGING = YES $(eval $(autotools-package))
- Retrieve official tarball to drop autoreconf - Fixed CVE-2019-19012 - Fixed CVE-2019-19203 (Does not affect UTF-8, UTF-16 and UTF-32 encodings) - Fixed CVE-2019-19204 (Affects only PosixBasic, Emacs and Grep syntaxes) - Fixed CVE-2019-19246 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> --- package/oniguruma/oniguruma.hash | 2 +- package/oniguruma/oniguruma.mk | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-)