From 130b9dcea164f33e7a446b5a9d53e3d499d2d1b7 Mon Sep 17 00:00:00 2001 From: Vicente Olivert Riera Date: Tue, 31 Jan 2017 16:05:41 +0000 Subject: [PATCH] cjson: security bump to version v1.2.1 Fixes a potential NULL pointer dereference in cJSONUtils_InplaceDecodePointerString(): https://github.com/DaveGamble/cJSON/issues/96 [Peter: extend commit message, mention (potential) security impact] Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard --- package/cjson/cjson.hash | 2 +- package/cjson/cjson.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/cjson/cjson.hash b/package/cjson/cjson.hash index a6370de75..903880f7c 100644 --- a/package/cjson/cjson.hash +++ b/package/cjson/cjson.hash @@ -1,2 +1,2 @@ # Locally computed: -sha256 df549298ea6515058648eaacc62bcc4f82fa34f8b93af7753e30eb35c3841c7d cjson-v1.2.0.tar.gz +sha256 1d976ca423d714b7e836cfbc1980b56f49962d0dfe654edb3c2ffa5c713af242 cjson-v1.2.1.tar.gz diff --git a/package/cjson/cjson.mk b/package/cjson/cjson.mk index f0fe63b34..11c34c5d7 100644 --- a/package/cjson/cjson.mk +++ b/package/cjson/cjson.mk @@ -4,7 +4,7 @@ # ################################################################################ -CJSON_VERSION = v1.2.0 +CJSON_VERSION = v1.2.1 CJSON_SITE = $(call github,DaveGamble,cjson,$(CJSON_VERSION)) CJSON_INSTALL_STAGING = YES CJSON_LICENSE = MIT -- 2.11.4.GIT