kumquat-buildroot/package/sdl2/sdl2.hash

# Locally calculated after checking http://www.libsdl.org/release/SDL2-2.0.20.tar.gz.sig
sha256  c56aba1d7b5b0e7e999e4a7698c70b63a3394ff9704b5f6e1c57e0c16f04dd06  SDL2-2.0.20.tar.gz
# Locally calculated
sha256  fcb07e07ac6bc8b2fcf047b50431ef4ebe5b619d7ca7c82212018309a9067426  LICENSE.txt
package/sdl2: bump version to 2.0.20 Copyright year updated in LICENSE.txt. Signed-off-by: Michael Fischer <mf@go-sys.de> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> 2022-01-24 09:01:07 +01:00			`# Locally calculated after checking http://www.libsdl.org/release/SDL2-2.0.20.tar.gz.sig`
			`sha256 c56aba1d7b5b0e7e999e4a7698c70b63a3394ff9704b5f6e1c57e0c16f04dd06 SDL2-2.0.20.tar.gz`
sdl2: security bump to version 2.0.7 Fixes CVE-2017-2888 - An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability. Also add a hash for the license file while we're at it. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-10-26 14:18:43 +02:00			`# Locally calculated`
package/sdl2: bump version to 2.0.20 Copyright year updated in LICENSE.txt. Signed-off-by: Michael Fischer <mf@go-sys.de> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> 2022-01-24 09:01:07 +01:00			`sha256 fcb07e07ac6bc8b2fcf047b50431ef4ebe5b619d7ca7c82212018309a9067426 LICENSE.txt`