3c1324248d
Fixes the following security issue: - CVE-2022-1271: Malicious filenames can make xzgrep to write to arbitrary files or (with a GNU sed extension) lead to arbitrary code execution. For more details, see the announcement and advisory: https://www.mail-archive.com/xz-devel@tukaani.org/msg00551.html https://www.zerodayinitiative.com/advisories/ZDI-22-619/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
10 lines
617 B
Plaintext
10 lines
617 B
Plaintext
# Locally calculated after checking pgp signature
|
|
sha256 5117f930900b341493827d63aa910ff5e011e0b994197c3b71c08a20228a42df xz-5.2.5.tar.bz2
|
|
sha256 98c6cb1042284fe704ec30083f3fc87364ce9ed2ea51f62bbb0ee9d3448717ec xzgrep-ZDI-CAN-16587.patch
|
|
|
|
# Hash for license files
|
|
sha256 bcb02973ef6e87ea73d331b3a80df7748407f17efdb784b61b47e0e610d3bb5c COPYING
|
|
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING.GPLv2
|
|
sha256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 COPYING.GPLv3
|
|
sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING.LGPLv2.1
|