kumquat-buildroot/package/lynx/lynx.hash

# Locally calculated:
sha256  387f193d7792f9cfada14c60b0e5c0bff18f227d9257a39483e14fa1aaf79595  lynx2.8.9rel.1.tar.bz2
sha256  b2207e757dbbefc34a20a32b1b4a216b4a4316e1dc812bceca4ac6294871119a  90_CVE-2021-38165.patch
sha256  8406a30ff3134ec23cf752d1ceda92ddaabbe41b4f2dc07ea3cfa139de12d6d6  COPYING
lynx: new package Signed-off-by: Mario Lang <mlang@blind.guru> Reviewed-by: Adrian Perez de Castro <aperez@igalia.com> [Thomas: invert ncurses/slang select to avoid a circular dependency, add BR2_USE_MMU dependency inherited from slang.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-12-12 19:41:28 +01:00			`# Locally calculated:`
package/lynx: bump version to 2.8.9rel.1 Changelog: http://lynx.invisible-island.net/current/CHANGES Removed patch 0001, quoted from Changelog: * when cross-compiling, trim LDFLAGS from makefile rule linking makeuctb, because it is a build tool, which should generally use BUILD_LDFLAGS (patch by Thomas Petazzoni) Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2018-08-19 14:44:00 +02:00			`sha256 387f193d7792f9cfada14c60b0e5c0bff18f227d9257a39483e14fa1aaf79595 lynx2.8.9rel.1.tar.bz2`
package/lynx: add security patch for CVE-2021-38165 Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data. https://lists.nongnu.org/archive/html/lynx-dev/2021-08/msg00002.html Upstream unfortunately does not provide a public VCS (only source snapshots), so fetch the security patch from Debian. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> 2021-09-21 11:32:49 +02:00			`sha256 b2207e757dbbefc34a20a32b1b4a216b4a4316e1dc812bceca4ac6294871119a 90_CVE-2021-38165.patch`
lynx: new package Signed-off-by: Mario Lang <mlang@blind.guru> Reviewed-by: Adrian Perez de Castro <aperez@igalia.com> [Thomas: invert ncurses/slang select to avoid a circular dependency, add BR2_USE_MMU dependency inherited from slang.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-12-12 19:41:28 +01:00			`sha256 8406a30ff3134ec23cf752d1ceda92ddaabbe41b4f2dc07ea3cfa139de12d6d6 COPYING`