kumquat-buildroot/package/sdl2/sdl2.hash

# Locally calculated after checking http://www.libsdl.org/release/SDL2-2.0.22.tar.gz.sig
sha256  fe7cbf3127882e3fc7259a75a0cb585620272c51745d3852ab9dd87960697f2e  SDL2-2.0.22.tar.gz
# Locally calculated
sha256  fcb07e07ac6bc8b2fcf047b50431ef4ebe5b619d7ca7c82212018309a9067426  LICENSE.txt
package/sdl2: bump version to 2.0.22 Signed-off-by: Michael Fischer <mf@go-sys.de> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2022-05-03 09:28:34 +02:00			`# Locally calculated after checking http://www.libsdl.org/release/SDL2-2.0.22.tar.gz.sig`
			`sha256 fe7cbf3127882e3fc7259a75a0cb585620272c51745d3852ab9dd87960697f2e SDL2-2.0.22.tar.gz`
sdl2: security bump to version 2.0.7 Fixes CVE-2017-2888 - An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability. Also add a hash for the license file while we're at it. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-10-26 14:18:43 +02:00			`# Locally calculated`
package/sdl2: bump version to 2.0.20 Copyright year updated in LICENSE.txt. Signed-off-by: Michael Fischer <mf@go-sys.de> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> 2022-01-24 09:01:07 +01:00			`sha256 fcb07e07ac6bc8b2fcf047b50431ef4ebe5b619d7ca7c82212018309a9067426 LICENSE.txt`