brotli 1.0.8 fixes a security issue: an integer overflow in the decoder

git-svn-id: https://xpra.org/svn/Xpra/trunk@27327 3bb7dfac-3a0b-4e04-842a-767bc560f471
Xpra-org · Aug 27, 2020 · 781fb67 · 781fb67
1 parent 8f2f985
commit 781fb67
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 6 deletions.
diff --git a/osx/jhbuild/xpra-python3.modules b/osx/jhbuild/xpra-python3.modules
@@ -439,9 +439,9 @@
 
 	<distutils id="python3-brotli" python3="1">
 		<branch repo="files.pythonhosted.org"
-			module="/packages/cd/9c/7955895f5672ecc85270244582c6b53ff95bb4c24bf77bd9271d42351635/Brotli-1.0.7.zip"
-			hash="sha256:0538dc1744fd17c314d2adc409ea7d1b779783b89fd95bcfb0c2acc93a6ea5a7"
-			version="1.0.7">
+			module="/packages/9b/2f/29ec65c7497e4d50f3cd60c336a526f1cf1fe71cbc66beb70a5a2f5b7f8b/Brotli-1.0.8.zip"
+			hash="sha256:6a0fd679b93252b96cde8a8b4449ae556840d855fea2276a03ea22e024940e9b"
+			version="1.0.8">
 		</branch>
 		<dependencies>
 			<dep package="python3"/>

diff --git a/osx/jhbuild/xpra-tools.modules b/osx/jhbuild/xpra-tools.modules
@@ -100,9 +100,9 @@
 	</autotools>
 
 	<cmake id="brotli" autogen-sh="configure">
-		<branch module="/google/brotli/archive/v1.0.7.tar.gz"
-			version="1.0.7" checkoutdir="brotli-1.0.7"
-			hash="sha256:4c61bfb0faca87219ea587326c467b95acb25555b53d1a421ffa3c8a9296ee2c"
+		<branch module="/google/brotli/archive/v1.0.8.tar.gz"
+			version="1.0.8" checkoutdir="brotli-1.0.8"
+			hash="sha256:6dcc73364b1a1ee7e49024d25e00b8ca4968396a81af99c8c6eb8757b52f74ea"
 			repo="github.com"/>
 	</cmake>