Update to weechat-1.9.1, fixes CVE-2017-14727

Date/time conversion specifiers are expanded after replacing buffer
local variables in name of log files. In some cases, this can lead to
an error in function strftime and a crash caused by the use of an
uninitialized buffer.

ok jca@, "that should go in" sthen@
This commit is contained in:
danj 2017-09-25 13:00:05 +00:00
parent 6780b15bfc
commit 9588ab636f
2 changed files with 4 additions and 4 deletions

View File

@ -1,4 +1,4 @@
# $OpenBSD: Makefile,v 1.30 2017/08/14 19:34:29 danj Exp $
# $OpenBSD: Makefile,v 1.31 2017/09/25 13:00:05 danj Exp $
COMMENT-main= fast, light and extensible chat client
COMMENT-lua= Lua bindings for weechat
@ -6,7 +6,7 @@ COMMENT-python= Python bindings for weechat
COMMENT-ruby= Ruby bindings for weechat
COMMENT-tcl= Tcl bindings for weechat
V= 1.9
V= 1.9.1
DISTNAME= weechat-${V}
PKGNAME-main= weechat-${V}

View File

@ -1,2 +1,2 @@
SHA256 (weechat-1.9.tar.gz) = vI4KuFZjOQSR3x1PcUiXKXv8zYnpPPtxnySvwXzNKpc=
SIZE (weechat-1.9.tar.gz) = 3749097
SHA256 (weechat-1.9.1.tar.gz) = ObCqQSEoR7gtBwsAUPUl91HLpnFloPW43cvv9k4Pe30=
SIZE (weechat-1.9.1.tar.gz) = 3749203