From 0a7a5641597c5c3d0978906fb8cf93eb153425a3 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Thu, 3 Nov 2022 15:34:13 +0100 Subject: [PATCH] package/multipath-tools: security bump to version 0.9.3 Fixes the following security issues: - CVE-2022-41974: Authorization bypass - CVE-2022-41973: Symlink attack For more details, see the writeup: https://www.qualys.com/2022/10/24/leeloo-multipath/leeloo-multipath.txt Update README.md hash after license-unrelated changes: git shortlog 0.9.0..0.9.3 -- README.md Konstantin Kharlamov (1): README.md: mention libreadline and libedit optional deps Xose Vazquez Perez (4): multipath-tools: update devel repo info in README.md multipath-tools: add ALUA info to README.md multipath-tools: add basic info on how to use multipath-tools with NVMe devices multipath-tools: add more info for NetApp RDAC arrays Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni --- package/multipath-tools/multipath-tools.hash | 4 ++-- package/multipath-tools/multipath-tools.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/multipath-tools/multipath-tools.hash b/package/multipath-tools/multipath-tools.hash index df0d24fb74..6f893d37ce 100644 --- a/package/multipath-tools/multipath-tools.hash +++ b/package/multipath-tools/multipath-tools.hash @@ -1,7 +1,7 @@ # Locally computed: -sha256 d6d1d819a53d076a91828ede42d9786451a471c4b71ca3fd25d04ad5413e3f95 multipath-tools-0.9.0.tar.gz +sha256 7d5af5d86e43b757e253d1ba244aa8a9c09bfbb1677a72accb799b1bfcc0a9ac multipath-tools-0.9.3.tar.gz sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 LICENSES/GPL-2.0 sha256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986 LICENSES/GPL-3.0 sha256 b7993225104d90ddd8024fd838faf300bea5e83d91203eab98e29512acebd69c LICENSES/LGPL-2.0 sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 LICENSES/LGPL-2.1 -sha256 fb0a5d2008c609fec129d2ffd01dd7f65f0e3868bcf465b6fda76e25ff896ce9 README.md +sha256 1e6095ac219062b8ddb2416d2a3cc40560619cd6b3ba609f5602bbd320413be0 README.md diff --git a/package/multipath-tools/multipath-tools.mk b/package/multipath-tools/multipath-tools.mk index f3ce3ca8b8..ec5d853644 100644 --- a/package/multipath-tools/multipath-tools.mk +++ b/package/multipath-tools/multipath-tools.mk @@ -4,7 +4,7 @@ # ################################################################################ -MULTIPATH_TOOLS_VERSION = 0.9.0 +MULTIPATH_TOOLS_VERSION = 0.9.3 MULTIPATH_TOOLS_SITE = $(call github,opensvc,multipath-tools,$(MULTIPATH_TOOLS_VERSION)) MULTIPATH_TOOLS_LICENSE = \