[Buildroot] [PATCH 1/1] package/libnpupnp: bump to version 4.1.3

Peter Korsgaard peter at korsgaard.com
Mon Apr 26 14:56:31 UTC 2021


>>>>> "Baruch" == Baruch Siach <baruch at tkos.co.il> writes:

 > Hi Peter,
 > On Mon, Apr 26 2021, Peter Korsgaard wrote:

 >>>>>>> "Jörg" == Jörg Krause <joerg.krause at embedded.rocks> writes:
 >> 
 >> > Signed-off-by: Jörg Krause <joerg.krause at embedded.rocks>
 >> 
 >> Committed to 2021.02.x, thanks.

 > Not in 2021.02.x as of commit 2960953b0ab6de.

No indeed, I sent the mail too soon. I misremembered what version we
have in 2021.02.x.

 > What is the reason to commit to 2021.02.x?

 > Master branch commit adea5b316e27a is the 4.1.4 bump which includes a
 > security fix.

Exactly because of the 4.1.4 security fix. The changelog is very light
on detail about what got fixed and what versions are affected, but it is
presumably this commit:

https://framagit.org/medoc92/npupnp/-/commit/90a4ab27dcec97d85168204ac8aed98f9f50e184

I'll take a closer look tonight and then update 2021.02.x to 4.1.4.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list