[Buildroot] [PATCH 1/1] package/cryptopp: bump to version 8.5.0
Peter Korsgaard
peter at korsgaard.com
Mon Oct 4 15:26:21 UTC 2021
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:
> Le lun. 4 oct. 2021 à 14:09, Peter Korsgaard <peter at korsgaard.com> a écrit :
>>
>> >>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:
>>
>> > https://www.cryptopp.com/release850.html
>> > https://www.cryptopp.com/release840.html
>>
>> > Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
>>
>> Hmm, so 8.4.0 reverted the security fix in 8.3.0? What do we then do?
>> Bump to 8.5.0 in all stable branches?
> I would advise to bump to 8.6.0 in all stable branches as 8.6.0 is a
> security release that clears CVE-2021-40530.
Ahh, I hadn't noticed the 8.6.0 release, I'll cherry pick that when I
get that far - Thanks.
--
Bye, Peter Korsgaard
More information about the buildroot
mailing list