diff options
| author | Wladimir J. van der Laan <laanwj@gmail.com> | 2015-10-09 13:16:44 +0200 |
|---|---|---|
| committer | Wladimir J. van der Laan <laanwj@gmail.com> | 2015-10-09 13:16:44 +0200 |
| commit | 0cca0248f030ea32bd8de778b5a2782e0d191978 (patch) | |
| tree | b9b612128ac4702f5017643ad52b07ebe456331b /depends | |
| parent | 6cf73b0cd4cf510aafc37719c68e6634c1719502 (diff) | |
| download | bitcoin-0cca0248f030ea32bd8de778b5a2782e0d191978.tar.xz | |
Update miniupnpc to 1.9.20151008
This version of miniupnpc fixes a buffer overflow in the XML (ugh)
parser during initial network discovery.
http://talosintel.com/reports/TALOS-2015-0035/
The commit fixing the vulnerability is:
https://github.com/miniupnp/miniupnp/commit/79cca974a4c2ab1199786732a67ff6d898051b78
Reported by timothy on IRC.
Diffstat (limited to 'depends')
| -rw-r--r-- | depends/packages/miniupnpc.mk | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/depends/packages/miniupnpc.mk b/depends/packages/miniupnpc.mk index ee1ee2f4b8..77bae10c79 100644 --- a/depends/packages/miniupnpc.mk +++ b/depends/packages/miniupnpc.mk @@ -1,8 +1,8 @@ package=miniupnpc -$(package)_version=1.9.20150730 +$(package)_version=1.9.20151008 $(package)_download_path=http://miniupnp.free.fr/files $(package)_file_name=$(package)-$($(package)_version).tar.gz -$(package)_sha256_hash=1d64fab1fd3b4c8545139341ba197f19329a863f4f21b578fc2a228ab586a604 +$(package)_sha256_hash=e444ac3b587ce82709c4d0cfca1fe71f44f9fc433e9f946b12b9e1bfe667a633 define $(package)_set_vars $(package)_build_opts=CC="$($(package)_cc)" |