mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-01 13:18:36 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libgsasl: security bump version to 2.2.4

Browse Source 
2.2.3: https://lists.gnu.org/archive/html/help-gsasl/2026-05/msg00001.html
       Fixes CVE-2026-48829: https://www.cvedetails.com/cve/CVE-2026-48829/

2.2.4: https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00001.html
       https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00002.html
       "GNU SASL Security Advisory: NTLM client use-of-uninitialized-value"

Upstream does not provide sha1 hashes anymore.

Updated license hash due to copyright year bump:
ec96bad539

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Fiona: fix notice about upstream hashes, sha256 is still provided]
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
This commit is contained in:
Bernd Kuhls
2026-06-19 20:13:21 +02:00
committed by Fiona Klute
parent 28c6fc47b4
commit 61056c34b4
2 changed files with 4 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
package/libgsasl/libgsasl.hash
View File

@@ -1,11 +1,7 @@
# From https://lists.gnu.org/archive/html/help-gsasl/2025-03/msg00000.html
sha1 8a845b7ec78e5f27bf69438074ad23867c00d4fe gsasl-2.2.2.tar.gz
sha256 d45b562e13bd13b9fc20b372f4b53269740cf6279f836f09ce11b9d32bcee075 gsasl-2.2.1.tar.gz
# Locally calculated after checking pgp signature
sha256 41e8e442648eccaf6459d9ad93d4b18530b96c8eaf50e3f342532ef275eff3ba gsasl-2.2.2.tar.gz
# From https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00001.html
sha256 d32be15efd3a04cb19b232f721bdca02cc6ad7ab415df7d79fb2dd2c0da3e0be gsasl-2.2.4.tar.gz
# Hash for license files:
sha256 e3d1b8a82b97dc6083b2600a6beb0396bbefbe384fc1cd39d0e8cb04bbf2bd33 README
sha256 16a8258f525326a71cba997365505ad32089be4be7a7100f64f308ed01419a11 README
sha256 20e50fe7aae3e56378ebf0417d9de904f55a0e61e4df315333e632a4d3555d95 COPYING.LESSER
sha256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986 COPYING

2
package/libgsasl/libgsasl.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBGSASL_VERSION = 2.2.2
LIBGSASL_VERSION = 2.2.4
LIBGSASL_SOURCE = gsasl-$(LIBGSASL_VERSION).tar.gz
LIBGSASL_SITE = $(BR2_GNU_MIRROR)/gsasl
LIBGSASL_LICENSE = LGPL-2.1+ (library), GPL-3.0+ (programs)