[Buildroot] [PATCH 1/1] package/cups: security bump version to 2.4.6

Thomas Petazzoni thomas.petazzoni at bootlin.com
Mon Aug 21 13:40:18 UTC 2023


Hello Clément!

On Thu, 17 Aug 2023 14:52:36 +0200
Clement Ramirez <ramirez.clement3 at gmail.com> wrote:

> Fixes CVE-2023-34241 (see [0] for details)
> 
> [0] https://github.com/OpenPrinting/cups/releases/tag/v2.4.6
> 
> Signed-off-by: Clement Ramirez <ramirez.clement3 at gmail.com>
> ---
>  package/cups/cups.hash | 2 +-
>  package/cups/cups.mk   | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)

Applied to master after extending the commit log to explain that
bumping from 2.4.4 to 2.4.6 is OK as there are very few changes (and
adding the list of commits). Indeed if there had been too many changes,
a backport of the security fix could have been preferable. But here, a
bump is fine.

Thanks a lot for this contribution!

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com



More information about the buildroot mailing list