Peter Korsgaard 17a169042e sdl2: security bump to version 2.0.7 ...

Fixes CVE-2017-2888 - An exploitable integer overflow vulnerability exists
when creating a new RGB Surface in SDL 2.0.5.  A specially crafted file can
cause an integer overflow resulting in too little memory being allocated
which can lead to a buffer overflow and potential code execution.  An
attacker can provide a specially crafted image file to trigger this
vulnerability.

Also add a hash for the license file while we're at it.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 07a9f0200c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2017-10-28 19:02:42 +02:00

..

Config.in

sdl2: X11 support depends on MMU (fork)

2017-01-20 13:25:48 +11:00

sdl2.hash

sdl2: security bump to version 2.0.7

2017-10-28 19:02:42 +02:00

sdl2.mk

sdl2: security bump to version 2.0.7

2017-10-28 19:02:42 +02:00