[Buildroot] [PATCH 1/1] package/libplist: security bump to version 2.0.0

Peter Korsgaard peter at korsgaard.com
Sun Nov 26 20:28:49 UTC 2017


>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls at t-online.de> writes:

 > Release notes:
 > https://github.com/libimobiledevice/libplist/blob/master/NEWS

 > This version bump fixes
 >   * CVE-2017-6440
 >   * CVE-2017-6439
 >   * CVE-2017-6438
 >   * CVE-2017-6437
 >   * CVE-2017-6436
 >   * CVE-2017-6435
 >   * CVE-2017-5836
 >   * CVE-2017-5835
 >   * CVE-2017-5834
 >   * CVE-2017-5545
 >   * CVE-2017-5209
 > ... and several others that didn't receive any CVE (yet).

 > The dependency to libxml2 was removed.
 > Autoreconf is not needed anymore, the upstream tarball includes a
 > configure script.

 > Signed-off-by: Bernd Kuhls <bernd.kuhls at t-online.de>

Committed to 2017.02.x and 2017.08.x, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list