* [Buildroot] [PATCH 1/1] package/wavpack: security bump to version 5.4.0
@ 2021-01-13 6:45 Fabrice Fontaine
2021-01-13 9:31 ` Peter Korsgaard
2021-01-17 16:55 ` Peter Korsgaard
0 siblings, 2 replies; 3+ messages in thread
From: Fabrice Fontaine @ 2021-01-13 6:45 UTC (permalink / raw)
To: buildroot
WavPack 5.4.0 contains a fix for CVE-2020-35738 wherein a specially
crafted WAV file could cause the WAVPACK command-line program to crash
with an out-of-bounds write (see issue #91).
Update hash of COPYING (update in year:
https://github.com/dbry/WavPack/commit/2ce3c069be548e82ea9c05741ace6583e549c6de)
https://github.com/dbry/WavPack/blob/5.4.0/NEWS
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
package/wavpack/wavpack.hash | 4 ++--
package/wavpack/wavpack.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/wavpack/wavpack.hash b/package/wavpack/wavpack.hash
index eeef730321..abc9ab6905 100644
--- a/package/wavpack/wavpack.hash
+++ b/package/wavpack/wavpack.hash
@@ -1,3 +1,3 @@
# locally computed hash
-sha256 b444379a0bee0330f137cb3e9a100e6a12a63a6d01987ba66b3729f85e282307 wavpack-5.3.0.tar.xz
-sha256 a0bbe245dfe263f73946b72306e8336818009ff1e52b119784c288f2785fc260 COPYING
+sha256 4bde6a6b2a86614a6bd2579e60dcc974e2c8f93608d2281110a717c1b3c28b79 wavpack-5.4.0.tar.xz
+sha256 f38defde000d62c4ff158f1445cb85a0c2f67cbc1d3cfa34ed882f439f6e3b43 COPYING
diff --git a/package/wavpack/wavpack.mk b/package/wavpack/wavpack.mk
index 586082fdd6..85185ab348 100644
--- a/package/wavpack/wavpack.mk
+++ b/package/wavpack/wavpack.mk
@@ -4,7 +4,7 @@
#
################################################################################
-WAVPACK_VERSION = 5.3.0
+WAVPACK_VERSION = 5.4.0
WAVPACK_SITE = \
https://github.com/dbry/WavPack/releases/download/$(WAVPACK_VERSION)
WAVPACK_SOURCE = wavpack-$(WAVPACK_VERSION).tar.xz
--
2.29.2
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [Buildroot] [PATCH 1/1] package/wavpack: security bump to version 5.4.0
2021-01-13 6:45 [Buildroot] [PATCH 1/1] package/wavpack: security bump to version 5.4.0 Fabrice Fontaine
@ 2021-01-13 9:31 ` Peter Korsgaard
2021-01-17 16:55 ` Peter Korsgaard
1 sibling, 0 replies; 3+ messages in thread
From: Peter Korsgaard @ 2021-01-13 9:31 UTC (permalink / raw)
To: buildroot
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:
> WavPack 5.4.0 contains a fix for CVE-2020-35738 wherein a specially
> crafted WAV file could cause the WAVPACK command-line program to crash
> with an out-of-bounds write (see issue #91).
> Update hash of COPYING (update in year:
> https://github.com/dbry/WavPack/commit/2ce3c069be548e82ea9c05741ace6583e549c6de)
> https://github.com/dbry/WavPack/blob/5.4.0/NEWS
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Committed, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Buildroot] [PATCH 1/1] package/wavpack: security bump to version 5.4.0
2021-01-13 6:45 [Buildroot] [PATCH 1/1] package/wavpack: security bump to version 5.4.0 Fabrice Fontaine
2021-01-13 9:31 ` Peter Korsgaard
@ 2021-01-17 16:55 ` Peter Korsgaard
1 sibling, 0 replies; 3+ messages in thread
From: Peter Korsgaard @ 2021-01-17 16:55 UTC (permalink / raw)
To: buildroot
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:
> WavPack 5.4.0 contains a fix for CVE-2020-35738 wherein a specially
> crafted WAV file could cause the WAVPACK command-line program to crash
> with an out-of-bounds write (see issue #91).
> Update hash of COPYING (update in year:
> https://github.com/dbry/WavPack/commit/2ce3c069be548e82ea9c05741ace6583e549c6de)
> https://github.com/dbry/WavPack/blob/5.4.0/NEWS
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Committed to 2020.02.x and 2020.11.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2021-01-17 16:55 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-01-13 6:45 [Buildroot] [PATCH 1/1] package/wavpack: security bump to version 5.4.0 Fabrice Fontaine
2021-01-13 9:31 ` Peter Korsgaard
2021-01-17 16:55 ` Peter Korsgaard
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.