All of lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH v2] lzo: security bump to version 2.07
@ 2014-06-29  4:47 Baruch Siach
  2014-06-29 10:05 ` Thomas Petazzoni
  2014-06-29 11:45 ` Mike Zick
  0 siblings, 2 replies; 4+ messages in thread
From: Baruch Siach @ 2014-06-29  4:47 UTC (permalink / raw)
  To: buildroot

Fixes CVE-2014-4607.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
---
v2:
   Rephrase the comment explaining the need for AUTORECONF (Peter).
---
 package/lzo/lzo.mk | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/package/lzo/lzo.mk b/package/lzo/lzo.mk
index 10107fea3be3..3b348a3eff30 100644
--- a/package/lzo/lzo.mk
+++ b/package/lzo/lzo.mk
@@ -4,11 +4,14 @@
 #
 ################################################################################
 
-LZO_VERSION = 2.06
+LZO_VERSION = 2.07
 LZO_SITE = http://www.oberhumer.com/opensource/lzo/download
 LZO_LICENSE = GPLv2+
 LZO_LICENSE_FILES = COPYING
 LZO_INSTALL_STAGING = YES
+# Out libtool patch does not apply to bundled ltmain.sh since it's too new.
+# Run autoreconf to regenerate ltmain.sh.
+LZO_AUTORECONF = YES
 
 $(eval $(autotools-package))
 $(eval $(host-autotools-package))
-- 
2.0.0

^ permalink raw reply related	[flat|nested] 4+ messages in thread

* [Buildroot] [PATCH v2] lzo: security bump to version 2.07
  2014-06-29  4:47 [Buildroot] [PATCH v2] lzo: security bump to version 2.07 Baruch Siach
@ 2014-06-29 10:05 ` Thomas Petazzoni
  2014-06-29 11:45 ` Mike Zick
  1 sibling, 0 replies; 4+ messages in thread
From: Thomas Petazzoni @ 2014-06-29 10:05 UTC (permalink / raw)
  To: buildroot

Dear Baruch Siach,

On Sun, 29 Jun 2014 07:47:51 +0300, Baruch Siach wrote:
> Fixes CVE-2014-4607.
> 
> Signed-off-by: Baruch Siach <baruch@tkos.co.il>
> ---
> v2:
>    Rephrase the comment explaining the need for AUTORECONF (Peter).

Applied, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com

^ permalink raw reply	[flat|nested] 4+ messages in thread

* [Buildroot] [PATCH v2] lzo: security bump to version 2.07
  2014-06-29  4:47 [Buildroot] [PATCH v2] lzo: security bump to version 2.07 Baruch Siach
  2014-06-29 10:05 ` Thomas Petazzoni
@ 2014-06-29 11:45 ` Mike Zick
  2014-06-29 11:54   ` Baruch Siach
  1 sibling, 1 reply; 4+ messages in thread
From: Mike Zick @ 2014-06-29 11:45 UTC (permalink / raw)
  To: buildroot

On Sun, 29 Jun 2014 07:47:51 +0300
Baruch Siach <baruch@tkos.co.il> wrote:

> Fixes CVE-2014-4607.
> 
> Signed-off-by: Baruch Siach <baruch@tkos.co.il>
> ---
> v2:
>    Rephrase the comment explaining the need for AUTORECONF (Peter).
> ---
>  package/lzo/lzo.mk | 5 ++++-
>  1 file changed, 4 insertions(+), 1 deletion(-)
> 
> diff --git a/package/lzo/lzo.mk b/package/lzo/lzo.mk
> index 10107fea3be3..3b348a3eff30 100644
> --- a/package/lzo/lzo.mk
> +++ b/package/lzo/lzo.mk
> @@ -4,11 +4,14 @@
>  #
>  ################################################################################
>  
> -LZO_VERSION = 2.06
> +LZO_VERSION = 2.07
>  LZO_SITE = http://www.oberhumer.com/opensource/lzo/download
>  LZO_LICENSE = GPLv2+
>  LZO_LICENSE_FILES = COPYING
>  LZO_INSTALL_STAGING = YES
> +# Out libtool patch does not apply to bundled ltmain.sh since it's too new.
s/out/our/

Two things mentioned in sentence, which of them is "too new"?

 try: "Our libtool patch is too new to apply to the bundled ltmain.sh"

> +# Run autoreconf to regenerate ltmain.sh.
> +LZO_AUTORECONF = YES
>  
>  $(eval $(autotools-package))
>  $(eval $(host-autotools-package))

^ permalink raw reply	[flat|nested] 4+ messages in thread

* [Buildroot] [PATCH v2] lzo: security bump to version 2.07
  2014-06-29 11:45 ` Mike Zick
@ 2014-06-29 11:54   ` Baruch Siach
  0 siblings, 0 replies; 4+ messages in thread
From: Baruch Siach @ 2014-06-29 11:54 UTC (permalink / raw)
  To: buildroot

Hi Mike,

On Sun, Jun 29, 2014 at 06:45:13AM -0500, Mike Zick wrote:
> On Sun, 29 Jun 2014 07:47:51 +0300
> Baruch Siach <baruch@tkos.co.il> wrote:
> 
> > Fixes CVE-2014-4607.
> > 
> > Signed-off-by: Baruch Siach <baruch@tkos.co.il>
> > ---
> > v2:
> >    Rephrase the comment explaining the need for AUTORECONF (Peter).
> > ---
> >  package/lzo/lzo.mk | 5 ++++-
> >  1 file changed, 4 insertions(+), 1 deletion(-)
> > 
> > diff --git a/package/lzo/lzo.mk b/package/lzo/lzo.mk
> > index 10107fea3be3..3b348a3eff30 100644
> > --- a/package/lzo/lzo.mk
> > +++ b/package/lzo/lzo.mk
> > @@ -4,11 +4,14 @@
> >  #
> >  ################################################################################
> >  
> > -LZO_VERSION = 2.06
> > +LZO_VERSION = 2.07
> >  LZO_SITE = http://www.oberhumer.com/opensource/lzo/download
> >  LZO_LICENSE = GPLv2+
> >  LZO_LICENSE_FILES = COPYING
> >  LZO_INSTALL_STAGING = YES
> > +# Out libtool patch does not apply to bundled ltmain.sh since it's too new.
> s/out/our/

Thomas has fixed this when applying the patch.

> Two things mentioned in sentence, which of them is "too new"?
> 
>  try: "Our libtool patch is too new to apply to the bundled ltmain.sh"

Actually this is the other way around. ltmain.sh is new and our patch doesn't 
apply anymore. The lzo bump patch as already been applied (commit 
7001f391eef29). Is it worth a follow-up patch?

Thanks for reviewing,
baruch

-- 
     http://baruch.siach.name/blog/                  ~. .~   Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
   - baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2014-06-29 11:54 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-06-29  4:47 [Buildroot] [PATCH v2] lzo: security bump to version 2.07 Baruch Siach
2014-06-29 10:05 ` Thomas Petazzoni
2014-06-29 11:45 ` Mike Zick
2014-06-29 11:54   ` Baruch Siach

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.