diff options
author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2016-05-24 18:32:32 -0300 |
---|---|---|
committer | Peter Korsgaard <peter@korsgaard.com> | 2016-05-31 13:21:25 +0200 |
commit | a0b0fcfe21ed95a1dbc15aec9de90c6906497f20 (patch) | |
tree | 06e16ae95bd4e59b6c1ad2e22b2e1d6d2e0f55d5 /package/dosfstools/dosfstools.hash | |
parent | 216eca78a38c1f4d5c0f0a29cf742a12f987ebda (diff) | |
download | buildroot-a0b0fcfe21ed95a1dbc15aec9de90c6906497f20.tar.gz buildroot-a0b0fcfe21ed95a1dbc15aec9de90c6906497f20.zip |
dosfstools: security bump to version 4.0
Fixes:
CVE-2015-8872 - if the third to last entry was written on a FAT12
filesystem with an odd number of clusters, the second to last entry
would be corrupted. This corruption may also lead to invalid memory
accesses when the corrupted entry becomes out of bounds and is used
late.
CVE-2016-4804 - the variable used for storing the FAT size (in bytes)
was an unsigned int. Since the size in sectors read from the BPB was not
sufficiently checked, this could end up being zero after multiplying it
with the sector size while some offsets still stayed excessive.
Ultimately it would cause segfaults when accessing FAT entries for which
no memory was allocated.
Converted package to autotools infra to match upstream.
The install options are now removals, enabled compatibilty symlinks and
exec-prefix set to / to match previous install names/locations.
Accounted for optional udev usage.
Dropped musl compatibility patch since it's upstream.
Add upstream patch to keep sectors a multiple of sectors per track since
it makes mtools cranky.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/dosfstools/dosfstools.hash')
-rw-r--r-- | package/dosfstools/dosfstools.hash | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package/dosfstools/dosfstools.hash b/package/dosfstools/dosfstools.hash index f852195868..777b8d9e3f 100644 --- a/package/dosfstools/dosfstools.hash +++ b/package/dosfstools/dosfstools.hash @@ -1,2 +1,2 @@ # Locally calculated after checking pgp signature -sha256 ee95913044ecf2719b63ea11212917649709a6e53209a72d622135aaa8517ee2 dosfstools-3.0.28.tar.xz +sha256 9037738953559d1efe04fc5408b6846216cc0138f7f9d32de80b6ec3c35e7daf dosfstools-4.0.tar.xz |