libksba: security bump to version 1.3.4
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Tue, 10 May 2016 13:01:37 +0000 (10:01 -0300)
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>
Tue, 10 May 2016 13:46:22 +0000 (15:46 +0200)
Fixes:
CVE-2016-4356 - Fix encoding of invalid utf-8 strings in
dn.c" and "read access out of bounds".

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
package/libksba/libksba.hash
package/libksba/libksba.mk

index f7727f10bfd6ca3d642d24f8896f6b7c79251a97..92abbab6ea570165e6781c50f8fba848142c48d6 100644 (file)
@@ -1,2 +1,2 @@
 # Locally calculated after checking pgp signature
-sha256 0c7f5ffe34d0414f6951d9880a46fcc2985c487f7c36369b9f11ad41131c7786        libksba-1.3.3.tar.bz2
+sha256 f6c2883cebec5608692d8730843d87f237c0964d923bbe7aa89c05f20558ad4f        libksba-1.3.4.tar.bz2
index 765153473fa98edd7e9532a4adb0c4d56fa80094..40a8c9b5a47b062f0a436213406486effcf98df8 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBKSBA_VERSION = 1.3.3
+LIBKSBA_VERSION = 1.3.4
 LIBKSBA_SOURCE = libksba-$(LIBKSBA_VERSION).tar.bz2
 LIBKSBA_SITE = ftp://ftp.gnupg.org/gcrypt/libksba
 LIBKSBA_LICENSE = LGPLv3+ or GPLv2+ (library, headers), GPLv3+ (manual, tests, build system)