aboutsummaryrefslogtreecommitdiff
path: root/package/zeromq
diff options
context:
space:
mode:
authorGravatar Gustavo Zacarias <gustavo@zacarias.com.ar>2014-11-11 17:29:15 -0300
committerGravatar Peter Korsgaard <peter@korsgaard.com>2014-11-11 22:25:28 +0100
commit4cefe929fa2a978b8335844ef3a89bde19c65434 (patch)
tree5cd3f729d13d48375ba58fa93b1a9e8e6fb4123d /package/zeromq
parentf26ffd7afdbd36d61e8d5754750af3730e69b7c4 (diff)
downloadbuildroot-4cefe929fa2a978b8335844ef3a89bde19c65434.tar.gz
buildroot-4cefe929fa2a978b8335844ef3a89bde19c65434.tar.bz2
zeromq: security bump to version 4.0.5
Fixes: CVE-2014-7202 - stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request. CVE-2014-7203 - libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/zeromq')
-rw-r--r--package/zeromq/0001-tests-disable-test_fork-if-fork-is-not-available.patch (renamed from package/zeromq/zeromq-0001-tests-disable-test_fork-if-fork-is-not-available.patch)0
-rw-r--r--package/zeromq/zeromq.hash2
-rw-r--r--package/zeromq/zeromq.mk3
3 files changed, 4 insertions, 1 deletions
diff --git a/package/zeromq/zeromq-0001-tests-disable-test_fork-if-fork-is-not-available.patch b/package/zeromq/0001-tests-disable-test_fork-if-fork-is-not-available.patch
index 1eefdc341b..1eefdc341b 100644
--- a/package/zeromq/zeromq-0001-tests-disable-test_fork-if-fork-is-not-available.patch
+++ b/package/zeromq/0001-tests-disable-test_fork-if-fork-is-not-available.patch
diff --git a/package/zeromq/zeromq.hash b/package/zeromq/zeromq.hash
new file mode 100644
index 0000000000..729e7ea752
--- /dev/null
+++ b/package/zeromq/zeromq.hash
@@ -0,0 +1,2 @@
+# Locally calculated from download (no sig, hash)
+sha256 3bc93c5f67370341428364ce007d448f4bb58a0eaabd0a60697d8086bc43342b zeromq-4.0.5.tar.gz
diff --git a/package/zeromq/zeromq.mk b/package/zeromq/zeromq.mk
index 59d276e89c..987c65be35 100644
--- a/package/zeromq/zeromq.mk
+++ b/package/zeromq/zeromq.mk
@@ -4,12 +4,13 @@
#
################################################################################
-ZEROMQ_VERSION = 4.0.4
+ZEROMQ_VERSION = 4.0.5
ZEROMQ_SITE = http://download.zeromq.org
ZEROMQ_INSTALL_STAGING = YES
ZEROMQ_DEPENDENCIES = util-linux
ZEROMQ_LICENSE = LGPLv3+ with exceptions
ZEROMQ_LICENSE_FILES = COPYING COPYING.LESSER
+# For 0001-tests-disable-test_fork-if-fork-is-not-available.patch
ZEROMQ_AUTORECONF = YES
# Only tools/curve_keygen.c needs this, but it doesn't hurt to pass it