kumquat-buildroot/package/file/file.hash

# Locally calculated after verifying signature
# ftp://ftp.astron.com/pub/file/file-5.41.tar.gz.asc
# using key BE04995BA8F90ED0C0C176C471112AB16CB33B3A
sha256  13e532c7b364f7d57e23dfeea3147103150cb90593a57af86c10e4f6e411603f  file-5.41.tar.gz
sha256  0bfa856a9930bddadbef95d1be1cf4e163c0be618e76ea3275caaf255283e274  COPYING
sha256  4ccb60d623884ef637af4a5bc16b2cb350163e2135e967655837336019a64462  src/mygetopt.h
sha256  c4fa92d6504b88484a12140fe3e24b9b29b0112717f94b1ff4205d54828b1c70  src/vasprintf.c
package/file: security bump to version 5.36 CVE-2019-8906: do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused. CVE-2019-8904: do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf. Update license files hashes; removal of trailing white spaces. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-03-12 13:12:30 +01:00			`# Locally calculated after verifying signature`
package/file: bump to version 5.41 - Drop patch (already in version) and so autoreconf - Update hash of vasprintf.c (changes not related to license: https://github.com/file/file/commit/80816651588efb79a5d054e13703bf2a3378d024 https://github.com/file/file/commit/43f7989076aa3731f3558c6954780bc7b2734b64) https://github.com/file/file/blob/FILE5_41/ChangeLog Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2021-12-31 00:18:36 +01:00			`# ftp://ftp.astron.com/pub/file/file-5.41.tar.gz.asc`
package/file: security bump to version 5.36 CVE-2019-8906: do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused. CVE-2019-8904: do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf. Update license files hashes; removal of trailing white spaces. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-03-12 13:12:30 +01:00			`# using key BE04995BA8F90ED0C0C176C471112AB16CB33B3A`
package/file: bump to version 5.41 - Drop patch (already in version) and so autoreconf - Update hash of vasprintf.c (changes not related to license: https://github.com/file/file/commit/80816651588efb79a5d054e13703bf2a3378d024 https://github.com/file/file/commit/43f7989076aa3731f3558c6954780bc7b2734b64) https://github.com/file/file/blob/FILE5_41/ChangeLog Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2021-12-31 00:18:36 +01:00			`sha256 13e532c7b364f7d57e23dfeea3147103150cb90593a57af86c10e4f6e411603f file-5.41.tar.gz`
			`sha256 0bfa856a9930bddadbef95d1be1cf4e163c0be618e76ea3275caaf255283e274 COPYING`
			`sha256 4ccb60d623884ef637af4a5bc16b2cb350163e2135e967655837336019a64462 src/mygetopt.h`
			`sha256 c4fa92d6504b88484a12140fe3e24b9b29b0112717f94b1ff4205d54828b1c70 src/vasprintf.c`