From ff8555763aa51a43a108dccf4011406bce2d00d2 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Sun, 27 Mar 2022 22:32:18 +0200 Subject: [PATCH] package/matio: security bump to version 1.5.22 - Fixed heap-based buffer overflows when reading (crafted) MAT file (CVE-2020-36428, CVE-2021-36977) - Update hash of COPYING (year updated and contributors added: https://github.com/tbeu/matio/commit/a3730c09797372a5919140b4618f217bb54bd1a1) https://github.com/tbeu/matio/releases/tag/v1.5.22 Signed-off-by: Fabrice Fontaine Signed-off-by: Arnout Vandecappelle (Essensium/Mind) (cherry picked from commit f33260685bf9dedd76db5b19f2dce0f4b5cbce2b) Signed-off-by: Peter Korsgaard --- package/matio/matio.hash | 6 +++--- package/matio/matio.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/matio/matio.hash b/package/matio/matio.hash index 4dd05dee07..4634074ca0 100644 --- a/package/matio/matio.hash +++ b/package/matio/matio.hash @@ -1,4 +1,4 @@ -# From https://sourceforge.net/projects/matio/files/matio/1.5.21/ -sha512 b00bcad807e6a7e10afa656eb77a0e3e9fb08d9cecc3e94ba41ef91ce60367d6686e6d387a874bbb83eb2f895d4a97caac554a70e7f5f6f5cb750052702d411c matio-1.5.21.tar.gz +# From https://sourceforge.net/projects/matio/files/matio/1.5.22/ +sha512 33fd3991413e94dfc9aba13ffd08b09ddcbdb9dfa579124d981449e195a8c61a3dc95b55e46bba360d48456c117cf36403af1c3448689c26b8aea5fa9cf38323 matio-1.5.22.tar.gz # Locally computed -sha256 69143d4a8f1933022bb909327df1ce812dd2420ed57949812dd8f370856bf2a1 COPYING +sha256 3ed9a50d754fcc92d4accb8448e397eafeab686796b2a7445557ce782806e239 COPYING diff --git a/package/matio/matio.mk b/package/matio/matio.mk index 236466d4d9..d282852d37 100644 --- a/package/matio/matio.mk +++ b/package/matio/matio.mk @@ -4,7 +4,7 @@ # ################################################################################ -MATIO_VERSION = 1.5.21 +MATIO_VERSION = 1.5.22 MATIO_SITE = http://downloads.sourceforge.net/project/matio/matio/$(MATIO_VERSION) MATIO_LICENSE = BSD-2-Clause MATIO_LICENSE_FILES = COPYING