mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-01 13:18:36 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/radvd: security bump to version 2.21

Browse Source 
Fixes the following vulnerability:

CVE-2026-48715: Stack Buffer Overflow in radvdump Route Information Option
Parser

https://github.com/radvd-project/radvd/security/advisories/GHSA-52px-gh9p-m379

Release notes:
https://github.com/radvd-project/radvd/releases/tag/v2.21

The release is now done on github, and a .tar.xz version is available so use
that. Notice that we cannot use the github macro.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Peter Korsgaard
2026-05-28 10:50:42 +02:00
committed by Julien Olivain
parent b280053180
commit f560174011
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/radvd/radvd.hash
View File

@@ -1,3 +1,3 @@
# From http://www.litech.org/radvd/dist/radvd-2.20.tar.gz.sha512
sha512 798d8476ab5ff43083b181d6d6ec43c47d06e4067d30c71e038cfd890bcf1ca23e809f9e184c4363458bfa25a916625dd2d7553290fb3e5459034d477b80ebaa radvd-2.20.tar.gz
# From https://github.com/radvd-project/radvd/releases/download/v2.21/radvd-2.21.tar.xz.sha256
sha256 91df2ed7faca0716bbd726a17d6467ed92fcb2b6e45b57d9e619f9686ab99e1b radvd-2.21.tar.xz
sha256 40a6db00cf0b97f031eaa6c6e87157788f40ced1b88e3ea6d78779bd2a39dc80 COPYRIGHT

5
package/radvd/radvd.mk
View File

@@ -4,8 +4,9 @@
#
################################################################################
RADVD_VERSION = 2.20
RADVD_SITE = http://www.litech.org/radvd/dist
RADVD_VERSION = 2.21
RADVD_SOURCE = radvd-$(RADVD_VERSION).tar.xz
RADVD_SITE = https://github.com/radvd-project/radvd/releases/download/v$(RADVD_VERSION)
RADVD_DEPENDENCIES = host-bison host-flex host-pkgconf libbsd
# We need to ignore <linux/if_arp.h>, because radvd already includes
# <net/if_arp.h>, which conflicts with <linux/if_arp.h>.