kumquat-buildroot/package/mpg123/mpg123.hash

# From https://sourceforge.net/projects/mpg123/files/mpg123/1.25.13/
sha1 2b6428dc563c56fb1374191d1244c8ac928e4d89  mpg123-1.25.13.tar.bz2
md5 294a6c30546504ec3d0deac2b2ea22be  mpg123-1.25.13.tar.bz2
# Locally calculated
sha256 90306848359c793fd43b9906e52201df18775742dc3c81c06ab67a806509890a  mpg123-1.25.13.tar.bz2
# License file
sha256  f40e0dd86b27b52e429b693a87b3ca63ae0a98a4d142e77207aa6bdf1db7a295  COPYING
package/mpg123: bump version to 1.25.13 Release notes: http://www.mpg123.org/cgi-bin/news.cgi#2019-10-26 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2019-11-04 08:22:45 +01:00			`# From https://sourceforge.net/projects/mpg123/files/mpg123/1.25.13/`
			`sha1 2b6428dc563c56fb1374191d1244c8ac928e4d89 mpg123-1.25.13.tar.bz2`
			`md5 294a6c30546504ec3d0deac2b2ea22be mpg123-1.25.13.tar.bz2`
package/mpg123: security bump to version 1.25.10 Version 1.25.4 fixes CVE-2017-9545, for details see release notes: http://www.mpg123.org/cgi-bin/news.cgi Added upstream hashes. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2018-06-10 14:09:10 +02:00			`# Locally calculated`
package/mpg123: bump version to 1.25.13 Release notes: http://www.mpg123.org/cgi-bin/news.cgi#2019-10-26 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2019-11-04 08:22:45 +01:00			`sha256 90306848359c793fd43b9906e52201df18775742dc3c81c06ab67a806509890a mpg123-1.25.13.tar.bz2`
mpg123: security bump to version 1.25.2 >From the release notes: - Extend pow tables for layer III to properly handle files with i-stereo and 5-bit scalefactors. Never observed them for real, just as fuzzed input to trigger the read overflow. Note: This one goes on record as CVE-2017-11126, calling remote denial of service. While the accesses are out of bounds for the pow tables, they still are safely within libmpg123's memory (other static tables). Just wrong values are used for computation, no actual crash unless you use something like GCC's AddressSanitizer, nor any information disclosure. - Avoid left-shifts of negative integers in layer I decoding. While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-07-11 12:28:57 +02:00			`# License file`
			`sha256 f40e0dd86b27b52e429b693a87b3ca63ae0a98a4d142e77207aa6bdf1db7a295 COPYING`