bslathi19/buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/libnpupnp: security bump to version 4.1.4

Browse Source 
Fix vulnerability to DNS-rebind attacks.

This security fix addresses the same vulnerability isue which was reported
for libupnp (which libnpupnp is derived from) in CVE-2021-29462.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This commit is contained in:
Jörg Krause
2021-04-22 07:50:16 +00:00
committed by Thomas Petazzoni
parent be4869f393
commit adea5b316e
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/libnpupnp/libnpupnp.hash
View File

@@ -1,5 +1,5 @@
# Hash from: http://www.lesbonscomptes.com/upmpdcli/downloads/libnpupnp-4.1.1.tar.gz.sha256 # Hash from: http://www.lesbonscomptes.com/upmpdcli/downloads/libnpupnp-4.1.4.tar.gz.sha256
sha256 74703d49be52d29b52f59342ec7359178b127568399551d9d3f56bb7950fcc02 libnpupnp-4.1.3.tar.gz sha256 03506f02546e3b3d31b389e046c4691f020b82d315426ce79f1e2b1eb7958656 libnpupnp-4.1.4.tar.gz
# Hash for license file: # Hash for license file:
sha256 c8b99423cad48bb44e2cf52a496361404290865eac259a82da6d1e4331ececb3 COPYING sha256 c8b99423cad48bb44e2cf52a496361404290865eac259a82da6d1e4331ececb3 COPYING

2
package/libnpupnp/libnpupnp.mk
View File

@@ -4,7 +4,7 @@
# #
################################################################################ ################################################################################
LIBNPUPNP_VERSION = 4.1.3 LIBNPUPNP_VERSION = 4.1.4
LIBNPUPNP_SITE = http://www.lesbonscomptes.com/upmpdcli/downloads LIBNPUPNP_SITE = http://www.lesbonscomptes.com/upmpdcli/downloads
LIBNPUPNP_LICENSE = BSD-3-Clause LIBNPUPNP_LICENSE = BSD-3-Clause
LIBNPUPNP_LICENSE_FILES = COPYING LIBNPUPNP_LICENSE_FILES = COPYING