diff options
| author | Peter Korsgaard <peter@korsgaard.com> | 2017-10-26 14:18:43 +0200 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2017-10-27 13:48:45 +0200 |
| commit | 07a9f0200cfd1c34f33e8054f62b990d05ccb934 (patch) | |
| tree | 3ed046ad2a568c03b2a2fc9456dd216687f0aa88 /package/python-zope-interface | |
| parent | 3a798acf239dee04d573f575337bf823c13020fd (diff) | |
| download | buildroot-07a9f0200cfd1c34f33e8054f62b990d05ccb934.tar.gz buildroot-07a9f0200cfd1c34f33e8054f62b990d05ccb934.zip | |
sdl2: security bump to version 2.0.7
Fixes CVE-2017-2888 - An exploitable integer overflow vulnerability exists
when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can
cause an integer overflow resulting in too little memory being allocated
which can lead to a buffer overflow and potential code execution. An
attacker can provide a specially crafted image file to trigger this
vulnerability.
Also add a hash for the license file while we're at it.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/python-zope-interface')
0 files changed, 0 insertions, 0 deletions
