[Buildroot] [PATCH 1/1] package/cryptopp: bump to version 8.5.0

Peter Korsgaard peter at korsgaard.com
Mon Oct 4 15:26:21 UTC 2021


>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:

 > Le lun. 4 oct. 2021 à 14:09, Peter Korsgaard <peter at korsgaard.com> a écrit :
 >> 
 >> >>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:
 >> 
 >> > https://www.cryptopp.com/release850.html
 >> > https://www.cryptopp.com/release840.html
 >> 
 >> > Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
 >> 
 >> Hmm, so 8.4.0 reverted the security fix in 8.3.0? What do we then do?
 >> Bump to 8.5.0 in all stable branches?
 > I would advise to bump to 8.6.0 in all stable branches as 8.6.0 is a
 > security release that clears CVE-2021-40530.

Ahh, I hadn't noticed the 8.6.0 release, I'll cherry pick that when I
get that far - Thanks.

-- 
Bye, Peter Korsgaard


More information about the buildroot mailing list