[Buildroot] [2020.02.x] package/libglib2: security bump to 2.62.5

[Buildroot] [2020.02.x] package/libglib2: security bump to 2.62.5

[Matt Weber]

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
---
 package/libglib2/0003-remove-cpp-requirement.patch | 2 +-
 package/libglib2/libglib2.hash                     | 4 ++--
 package/libglib2/libglib2.mk                       | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package/libglib2/0003-remove-cpp-requirement.patch b/package/libglib2/0003-remove-cpp-requirement.patch
index d28f8ab81c..77589e6909 100644
--- a/package/libglib2/0003-remove-cpp-requirement.patch
+++ b/package/libglib2/0003-remove-cpp-requirement.patch
@@ -35,7 +35,7 @@ index 4bbf4c2..ac59f4e 100644
 @@ -1,4 +1,4 @@
 -project('glib', 'c', 'cpp',
 +project('glib', 'c',
-   version : '2.62.4',
+   version : '2.62.5',
    # NOTE: We keep this pinned at 0.49 because that's what Debian 10 ships
    meson_version : '>= 0.49.2',
 @@ -10,7 +10,6 @@ project('glib', 'c', 'cpp',
diff --git a/package/libglib2/libglib2.hash b/package/libglib2/libglib2.hash
index e3478f06bb..0a60b75f82 100644
--- a/package/libglib2/libglib2.hash
+++ b/package/libglib2/libglib2.hash
@@ -1,4 +1,4 @@
-# https://download.gnome.org/sources/glib/2.62/glib-2.62.4.sha256sum
-sha256  4c84030d77fa9712135dfa8036ad663925655ae95b1d19399b6200e869925bbc  glib-2.62.4.tar.xz
+# https://download.gnome.org/sources/glib/2.62/glib-2.62.5.sha256sum
+sha256  b8d1cdafa46658b63d7512efbe2cd21bd36cd7be83140e44930c47b79f82452e  glib-2.62.5.tar.xz
 # License files, locally calculated
 sha256	dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551  COPYING
diff --git a/package/libglib2/libglib2.mk b/package/libglib2/libglib2.mk
index a206639f74..42b608fd72 100644
--- a/package/libglib2/libglib2.mk
+++ b/package/libglib2/libglib2.mk
@@ -5,7 +5,7 @@
 ################################################################################
 
 LIBGLIB2_VERSION_MAJOR = 2.62
-LIBGLIB2_VERSION = $(LIBGLIB2_VERSION_MAJOR).4
+LIBGLIB2_VERSION = $(LIBGLIB2_VERSION_MAJOR).5
 LIBGLIB2_SOURCE = glib-$(LIBGLIB2_VERSION).tar.xz
 LIBGLIB2_SITE = http://ftp.gnome.org/pub/gnome/sources/glib/$(LIBGLIB2_VERSION_MAJOR)
 LIBGLIB2_LICENSE = LGPL-2.1+
-- 
2.17.1

[Buildroot] [2020.02.x] package/libglib2: security bump to 2.62.5

[Peter Korsgaard]

>>>>> "Matt" == Matt Weber <matthew.weber@rockwellcollins.com> writes:

 > Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>

It would be great to mention why this is a security bump / what it
fixed, so I've extended the commit message with information from the
NEWS file:

https://download.gnome.org/sources/glib/2.62/glib-2.62.5.news

I also see that there is a 2.62.6 release since March. Any specific
reason why you didn't bumped to that version?

Committed to 2020.02.x with that fixed, thanks.

What about master and 2020.05.x? Are they not affected by the same issue?

 > ---
 >  package/libglib2/0003-remove-cpp-requirement.patch | 2 +-
 >  package/libglib2/libglib2.hash                     | 4 ++--
 >  package/libglib2/libglib2.mk                       | 2 +-
 >  3 files changed, 4 insertions(+), 4 deletions(-)

 > diff --git a/package/libglib2/0003-remove-cpp-requirement.patch b/package/libglib2/0003-remove-cpp-requirement.patch
 > index d28f8ab81c..77589e6909 100644
 > --- a/package/libglib2/0003-remove-cpp-requirement.patch
 > +++ b/package/libglib2/0003-remove-cpp-requirement.patch
 > @@ -35,7 +35,7 @@ index 4bbf4c2..ac59f4e 100644
 >  @@ -1,4 +1,4 @@
 >  -project('glib', 'c', 'cpp',
 >  +project('glib', 'c',
 > -   version : '2.62.4',
 > +   version : '2.62.5',
 >     # NOTE: We keep this pinned at 0.49 because that's what Debian 10 ships
 >     meson_version : '>= 0.49.2',
 >  @@ -10,7 +10,6 @@ project('glib', 'c', 'cpp',
 > diff --git a/package/libglib2/libglib2.hash b/package/libglib2/libglib2.hash
 > index e3478f06bb..0a60b75f82 100644
 > --- a/package/libglib2/libglib2.hash
 > +++ b/package/libglib2/libglib2.hash
 > @@ -1,4 +1,4 @@
 > -# https://download.gnome.org/sources/glib/2.62/glib-2.62.4.sha256sum
 > -sha256  4c84030d77fa9712135dfa8036ad663925655ae95b1d19399b6200e869925bbc  glib-2.62.4.tar.xz
 > +# https://download.gnome.org/sources/glib/2.62/glib-2.62.5.sha256sum
 > +sha256  b8d1cdafa46658b63d7512efbe2cd21bd36cd7be83140e44930c47b79f82452e  glib-2.62.5.tar.xz
 >  # License files, locally calculated
 >  sha256	dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551  COPYING
 > diff --git a/package/libglib2/libglib2.mk b/package/libglib2/libglib2.mk
 > index a206639f74..42b608fd72 100644
 > --- a/package/libglib2/libglib2.mk
 > +++ b/package/libglib2/libglib2.mk
 > @@ -5,7 +5,7 @@
 >  ################################################################################
 
 >  LIBGLIB2_VERSION_MAJOR = 2.62
 > -LIBGLIB2_VERSION = $(LIBGLIB2_VERSION_MAJOR).4
 > +LIBGLIB2_VERSION = $(LIBGLIB2_VERSION_MAJOR).5
 >  LIBGLIB2_SOURCE = glib-$(LIBGLIB2_VERSION).tar.xz
 >  LIBGLIB2_SITE = http://ftp.gnome.org/pub/gnome/sources/glib/$(LIBGLIB2_VERSION_MAJOR)
 >  LIBGLIB2_LICENSE = LGPL-2.1+
 > -- 
 > 2.17.1

 > _______________________________________________
 > buildroot mailing list
 > buildroot at busybox.net
 > http://lists.busybox.net/mailman/listinfo/buildroot

-- 
Bye, Peter Korsgaard