From 228a92f6bd90552424a3b7cf6b105e0ffdd1af3b Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Sun, 29 May 2022 21:42:49 +0200 Subject: [PATCH] package/janet: security bump to version 1.22.0 Fix CVE-2022-30763: Janet before 1.22.0 mishandles arrays. https://github.com/janet-lang/janet/releases/tag/v1.22.0 https://blog.convisoappsec.com/en/bug-hunting-in-the-janet-language-interpreter Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard --- package/janet/janet.hash | 2 +- package/janet/janet.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/janet/janet.hash b/package/janet/janet.hash index aff8e95bb5..a93129cfa5 100644 --- a/package/janet/janet.hash +++ b/package/janet/janet.hash @@ -1,5 +1,5 @@ # Locally calculated -sha256 52db8d18f93351256d0731810e8bea95516db8142f51eeb31664f7884bf63088 janet-1.21.2.tar.gz +sha256 7c6969f8e82badc7afa28aa1054555c1c91d2858f9f45c41a82557f5c5ce85bd janet-1.22.0.tar.gz # Locally calculated sha256 e2d2ae8360d95386af751ac7d1a3da36ea8ceb230e5f0eba7eb762547b1c58c9 LICENSE diff --git a/package/janet/janet.mk b/package/janet/janet.mk index 24a0f86032..ad09d47c6a 100644 --- a/package/janet/janet.mk +++ b/package/janet/janet.mk @@ -4,7 +4,7 @@ # ################################################################################ -JANET_VERSION = 1.21.2 +JANET_VERSION = 1.22.0 JANET_SITE = $(call github,janet-lang,janet,v$(JANET_VERSION)) JANET_LICENSE = MIT JANET_LICENSE_FILES = LICENSE