From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter Korsgaard Date: Wed, 05 Feb 2020 19:26:58 +0100 Subject: [Buildroot] [PATCHv2] package/ncurses: add upstream (security) patches up to 20200118 In-Reply-To: <20200205161948.GG3131@scaer> (Yann E. MORIN's message of "Wed, 5 Feb 2020 17:19:48 +0100") References: <20200205133111.24540-1-patrickdepinguin@gmail.com> <20200205161948.GG3131@scaer> Message-ID: <87sgjovqj1.fsf@dell.be.48ers.dk> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net >>>>> "Yann" == Yann E MORIN writes: > Peter, Thomas, All, > On 2020-02-05 14:31 +0100, Thomas De Schampheleire spake thusly: >> From: Peter Korsgaard >> Fixes the following security issues: > [--SNIP--] >> While we are at it, adjust the white space in the .hash file to match >> sha256sum output for consistency. > [--SNIP--] >> # Locally computed >> -sha256 86106f0da1cf5ccfa0f0651665dd1b4515e8edad1c7972780155770548b317d9 COPYING >> +sha256 86106f0da1cf5ccfa0f0651665dd1b4515e8edad1c7972780155770548b317d9 COPYING > The hash for the license file is now wrong: >>>> ncurses 6.1 Collecting legal info > ERROR: COPYING has wrong sha256 hash: > ERROR: expected: > 86106f0da1cf5ccfa0f0651665dd1b4515e8edad1c7972780155770548b317d9 > ERROR: got : > 4d1fde61868c73776a539366dccf5d5a4857e7fd7299efb1f02e07c2afe9ea87 > ERROR: Incomplete download, or man-in-the-middle (MITM) attack > make[1]: *** [package/ncurses/ncurses.mk:200: ncurses-legal-info] Error 1 > make: *** [Makefile:23: _all] Error 2 > That's because it has been changed by ncurses-6.1-20200104, to change > the Copyright year. > Fixed that and pushed, thanks. Ups, thanks! -- Bye, Peter Korsgaard