| Message ID | 20220422145530.1963337-1-peter@korsgaard.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | package/libinput: security bump to version 1.20.1 | expand |
On 22/04/2022 16:55, Peter Korsgaard wrote: > Fixes the following security issues: > > - CVE-2022-1215: libinput format string vulnerability > > For details, see the advisory: > https://www.openwall.com/lists/oss-security/2022/04/20/2 > > Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Applied to master, thanks. Regards, Arnout > --- > package/libinput/libinput.hash | 2 +- > package/libinput/libinput.mk | 2 +- > 2 files changed, 2 insertions(+), 2 deletions(-) > > diff --git a/package/libinput/libinput.hash b/package/libinput/libinput.hash > index d1c7cfb104..d8282ff03b 100644 > --- a/package/libinput/libinput.hash > +++ b/package/libinput/libinput.hash > @@ -1,5 +1,5 @@ > # Locally computed > -sha256 6c1f97892a7d599f97349e5e7c1239901fe00edcd4f6289f410034d5dc06cc85 libinput-1.20.0.tar.bz2 > +sha256 08c003f724f361ed21f4dfbfe755a6c115b85385f1418907bb98f185457273f0 libinput-1.20.1.tar.bz2 > > # License files > sha256 80de50b2022a840db044c56db804ca3565600a692c0714babface587acc6d1b0 COPYING > diff --git a/package/libinput/libinput.mk b/package/libinput/libinput.mk > index b814e3416d..a66b0afde5 100644 > --- a/package/libinput/libinput.mk > +++ b/package/libinput/libinput.mk > @@ -4,7 +4,7 @@ > # > ################################################################################ > > -LIBINPUT_VERSION = 1.20.0 > +LIBINPUT_VERSION = 1.20.1 > LIBINPUT_SOURCE = libinput-$(LIBINPUT_VERSION).tar.bz2 > LIBINPUT_SITE = https://gitlab.freedesktop.org/libinput/libinput/-/archive/$(LIBINPUT_VERSION) > LIBINPUT_DEPENDENCIES = host-pkgconf libevdev mtdev udev
diff --git a/package/libinput/libinput.hash b/package/libinput/libinput.hash index d1c7cfb104..d8282ff03b 100644 --- a/package/libinput/libinput.hash +++ b/package/libinput/libinput.hash @@ -1,5 +1,5 @@ # Locally computed -sha256 6c1f97892a7d599f97349e5e7c1239901fe00edcd4f6289f410034d5dc06cc85 libinput-1.20.0.tar.bz2 +sha256 08c003f724f361ed21f4dfbfe755a6c115b85385f1418907bb98f185457273f0 libinput-1.20.1.tar.bz2 # License files sha256 80de50b2022a840db044c56db804ca3565600a692c0714babface587acc6d1b0 COPYING diff --git a/package/libinput/libinput.mk b/package/libinput/libinput.mk index b814e3416d..a66b0afde5 100644 --- a/package/libinput/libinput.mk +++ b/package/libinput/libinput.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBINPUT_VERSION = 1.20.0 +LIBINPUT_VERSION = 1.20.1 LIBINPUT_SOURCE = libinput-$(LIBINPUT_VERSION).tar.bz2 LIBINPUT_SITE = https://gitlab.freedesktop.org/libinput/libinput/-/archive/$(LIBINPUT_VERSION) LIBINPUT_DEPENDENCIES = host-pkgconf libevdev mtdev udev
Fixes the following security issues: - CVE-2022-1215: libinput format string vulnerability For details, see the advisory: https://www.openwall.com/lists/oss-security/2022/04/20/2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> --- package/libinput/libinput.hash | 2 +- package/libinput/libinput.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)