buildroot/package/dmidecode/dmidecode.hash at 2eb849ac1663f2dd0322dc2a117f504e9a935d36 - buildroot - Mello Home Git

mirror/buildroot

mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-19 22:03:45 -09:00

Files

Julien Olivain c8387e73ee package/dmidecode: security bump to version 3.5

Fixes CVE-2023-30630: Dmidecode before 3.5 allows -dump-bin to overwrite a
local file: https://nvd.nist.gov/vuln/detail/CVE-2023-30630

For change log, see:
https://git.savannah.gnu.org/cgit/dmidecode.git/tree/NEWS?h=dmidecode-3-5

Note: this patch also adds a comment about pgp signature verification in
the hash file.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit c97f27283b)
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2023-08-29 10:52:52 +02:00

5 lines

311 B

Plaintext

Raw Blame History

 # Locally computed after checking pgp signature from:
 # https://download.savannah.gnu.org/releases/dmidecode/dmidecode-3.5.tar.xz.sig
 sha256  79d76735ee8e25196e2a722964cf9683f5a09581503537884b256b01389cc073  dmidecode-3.5.tar.xz
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  LICENSE