kumquat-buildroot/package/ntfs-3g/ntfs-3g.hash

# Locally calculated
sha256 d7b72c05e4b3493e6095be789a760c9f5f2b141812d5b885f3190c98802f1ea0 ntfs-3g_ntfsprogs-2016.2.22.tgz
sha256 43deadaeade489934b0b45e2ed8aa5f853ad0364fbde7ad144211b80132ea041  0003-CVE-2017-0358.patch
ntfs-3g: bump to version 2015.3.14 Also add hash file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-04-23 07:49:30 +02:00			`# Locally calculated`
ntfs-3g: bump version to 2016.2.22 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-03-21 18:09:31 +01:00			`sha256 d7b72c05e4b3493e6095be789a760c9f5f2b141812d5b885f3190c98802f1ea0 ntfs-3g_ntfsprogs-2016.2.22.tgz`
ntfs-3g: add security fix for CVE-2017-0358 Jann Horn, Project Zero (Google) discovered that ntfs-3g, a read-write NTFS driver for FUSE does not not scrub the environment before executing modprobe to load the fuse module. This influence the behavior of modprobe (MODPROBE_OPTIONS environment variable, --config and --dirname options) potentially allowing for local root privilege escalation if ntfs-3g is installed setuid. Notice that Buildroot does NOT install netfs-3g setuid root, but custom permission tables might be used, causing it to vulnerable to the above. ntfs-3g does not seem to have a publicly available version control system and no new releases have been made, so instead grab the patch from Debian. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-02-13 23:51:10 +01:00			`sha256 43deadaeade489934b0b45e2ed8aa5f853ad0364fbde7ad144211b80132ea041 0003-CVE-2017-0358.patch`