[Buildroot] [PATCH] package/libnss: security bump to version 3.46
Peter Korsgaard
peter at korsgaard.com
Sun Sep 1 09:03:06 UTC 2019
>>>>> "Baruch" == Baruch Siach <baruch at tkos.co.il> writes:
> Hi Giulio,
> On Sat, Aug 31 2019, Giulio Benetti wrote:
>> Subject should be: "package/libnss: bump to version 3.46" without
>> 'security'.
> This bump fixes CVE-2019-11727 and CVE-2019-11719. The commit log should
> mention that though.
Judging from the release notes, you also need to bump libnspr:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes
NSS 3.46 requires NSPR 4.22 or newer.
Given that I plan on releasing 2019.08 tonight, this will most likely
have to wait for 2019.08.1.
--
Bye, Peter Korsgaard
More information about the buildroot
mailing list