From 62e082ec4d58e117697324938b9833c057116710 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Sat, 29 Oct 2022 22:40:23 +0200 Subject: [PATCH] package/lldpd: security bump to version 1.0.15 - Fix heap overflow when reading SONMP. CVE-2021-43612. - https://vincentbernat.github.io/lldpd/ is redirecting to https://lldpd.github.io/ https://github.com/lldpd/lldpd/blob/1.0.15/NEWS Signed-off-by: Fabrice Fontaine Signed-off-by: Thomas Petazzoni --- package/lldpd/Config.in | 2 +- package/lldpd/lldpd.hash | 4 ++-- package/lldpd/lldpd.mk | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/lldpd/Config.in b/package/lldpd/Config.in index 9a9517b5b0..3e0446986f 100644 --- a/package/lldpd/Config.in +++ b/package/lldpd/Config.in @@ -18,7 +18,7 @@ config BR2_PACKAGE_LLDPD lldpd is an ISC-licensed implementation of LLDP for various Unixes. It also supports some proprietary protocols. - https://vincentbernat.github.io/lldpd/ + https://lldpd.github.io/ if BR2_PACKAGE_LLDPD diff --git a/package/lldpd/lldpd.hash b/package/lldpd/lldpd.hash index 6e809b2796..6db5ca98f1 100644 --- a/package/lldpd/lldpd.hash +++ b/package/lldpd/lldpd.hash @@ -1,5 +1,5 @@ # Locally computed after checking gpg key -# https://media.luffy.cx/files/lldpd/lldpd-1.0.9.tar.gz.gpg +# https://media.luffy.cx/files/lldpd/lldpd-1.0.15.tar.gz.gpg # using key AEF2348766F371C689A7360095A42FE8353525F9 -sha256 6b64eb3125952b1e33472198b054e8aa0dee45f45d3d4be22789090a474949f5 lldpd-1.0.9.tar.gz +sha256 f7fe3a130be98a19c491479ef60f36b8ee41a9e6bc4d7f2c41033f63956a3126 lldpd-1.0.15.tar.gz sha256 0e96a5aea65f16e2239231ce4ab90497f8bc3bb8fe6abe9299aade4726ff7c8d LICENSE diff --git a/package/lldpd/lldpd.mk b/package/lldpd/lldpd.mk index b88dd002e4..dd6f8dcf5d 100644 --- a/package/lldpd/lldpd.mk +++ b/package/lldpd/lldpd.mk @@ -4,7 +4,7 @@ # ################################################################################ -LLDPD_VERSION = 1.0.9 +LLDPD_VERSION = 1.0.15 LLDPD_SITE = https://media.luffy.cx/files/lldpd LLDPD_DEPENDENCIES = \ $(if $(BR2_PACKAGE_CHECK),check) \