Jan Alexander Steffens (heftig) pushed to branch main at Arch Linux / Packaging / Packages / libndp
Commits: 87133ba6 by Chih-Hsuan Yen at 2024-06-19T00:16:31+08:00 Cherry-pick upstream fix for CVE-2024-5564 - - - - - 1 changed file: - PKGBUILD Changes: ===================================== PKGBUILD ===================================== @@ -2,7 +2,7 @@ pkgname=libndp pkgver=1.8 -pkgrel=1 +pkgrel=2 pkgdesc="Library for Neighbor Discovery Protocol" arch=(x86_64) url="http://libndp.org/"; @@ -11,7 +11,7 @@ depends=(glibc) makedepends=(git) _commit=009ce9cd9b950ffa1f4f94c9436027b936850d0c # tags/v1.8 source=("git+https://github.com/jpirko/libndp#commit=$_commit";) -sha256sums=('SKIP') +sha256sums=('36275381d288177b2b75982a79ce9266d99541d23636c957cfb3afb7f736282a') pkgver() { cd $pkgname @@ -20,6 +20,10 @@ pkgver() { prepare() { cd $pkgname + + # Fix CVE-2024-5564 https://github.com/jpirko/libndp/issues/26 + git cherry-pick -n 05e4ba7b0d126eea4c04387dcf40596059ee24af + ./autogen.sh } View it on GitLab: https://gitlab.archlinux.org/archlinux/packaging/packages/libndp/-/commit/87133ba66834717f65dde12241ce93d08ab50118 -- View it on GitLab: https://gitlab.archlinux.org/archlinux/packaging/packages/libndp/-/commit/87133ba66834717f65dde12241ce93d08ab50118 You're receiving this email because of your account on gitlab.archlinux.org.
