[Buildroot] [PATCH 1/1] package/cryptopp: bump to version 8.5.0
Fabrice Fontaine
fontaine.fabrice at gmail.com
Mon Oct 4 12:14:17 UTC 2021
Le lun. 4 oct. 2021 à 14:09, Peter Korsgaard <peter at korsgaard.com> a écrit :
>
> >>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:
>
> > https://www.cryptopp.com/release850.html
> > https://www.cryptopp.com/release840.html
>
> > Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
>
> Hmm, so 8.4.0 reverted the security fix in 8.3.0? What do we then do?
> Bump to 8.5.0 in all stable branches?
I would advise to bump to 8.6.0 in all stable branches as 8.6.0 is a
security release that clears CVE-2021-40530.
>
> --
> Bye, Peter Korsgaard
Best Regards,
Fabrice
More information about the buildroot
mailing list