mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-01 13:18:36 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/screen: security bump to version 5.0.2

Browse Source 
Rebased patch 0001.

No CVE entries are found but these commits are part of the bump:

TOCTOU + chown-follows-symlink in socket directory creation:
https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?h=v.5.0.2&id=3dea5ff20c58ad497062d094b6a9b80a7535a7db

fix potential null pointer dereference:
https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?h=v.5.0.2&id=ff9d98b8e39f33b07156995188ca55f3459f4d53

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
This commit is contained in:
Bernd Kuhls
2026-07-12 13:05:25 +02:00
committed by Fiona Klute
parent ec402e6c8e
commit 4b4a8f0fff
3 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
package/screen/0001-Do-not-create-backup-of-old-installed-binary.patch
View File

@@ -11,6 +11,8 @@ Signed-off-by: Baruch Siach <baruch@tkos.co.il>
[Julien: rebase on top of 4.9.1]
[Julien: rebase on top of 5.0.0]
Signed-off-by: Julien Olivain <ju.o@free.fr>
[Bernd: rebase on top of 5.0.2]
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Makefile.in | 5 -----
1 file changed, 5 deletions(-)
@@ -19,8 +21,8 @@ diff --git a/Makefile.in b/Makefile.in
index 92f434a..860ecd7 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -77,12 +77,8 @@ tests/test-%: tests/test-%.c %.o tests/mallocmock.o tests/macros.h tests/signatu
$(CC) $(CPPFLAGS) $(CFLAGS) $< -o $@ $*.o tests/mallocmock.o
@@ -85,12 +85,8 @@ tests/test-detach-cli: tests/integration-detach.c tests/macros.h screen
$(CC) $(CPPFLAGS) $(CFLAGS) $< -o $@
install_bin: screen installdirs
- -if [ -f $(DESTDIR)$(bindir)/$(SCREEN) ] && [ ! -f $(DESTDIR)$(bindir)/$(SCREEN).old ]; \
@@ -32,7 +34,7 @@ index 92f434a..860ecd7 100644
rm -f $(DESTDIR)$(bindir)/screen
(cd $(DESTDIR)$(bindir) && ln -f -s $(SCREEN) screen)
cp $(srcdir)/utf8encodings/?? $(DESTDIR)$(SCREENENCODINGS)
@@ -107,7 +103,6 @@ installdirs:
@@ -115,7 +111,6 @@ installdirs:
uninstall:
rm -f $(DESTDIR)$(bindir)/$(SCREEN)
rm -f $(DESTDIR)$(bindir)/screen

4
package/screen/screen.hash
View File

@@ -1,5 +1,5 @@
# Locally calculated after checking pgp signature
# https://ftp.gnu.org/gnu/screen/screen-5.0.1.tar.gz.sig
sha256 2dae36f4db379ffcd14b691596ba6ec18ac3a9e22bc47ac239789ab58409869d screen-5.0.1.tar.gz
# https://ftp.gnu.org/gnu/screen/screen-5.0.2.tar.gz.sig
sha256 ca9a2c7e240919bc7ac12124593ae4529bb4eb5f7349d8857829b7e3f0b3b332 screen-5.0.2.tar.gz
# Locally calculated
sha256 e79e9c8a0c85d735ff98185918ec94ed7d175efc377012787aebcf3b80f0d90b COPYING

2
package/screen/screen.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
SCREEN_VERSION = 5.0.1
SCREEN_VERSION = 5.0.2
SCREEN_SITE = $(BR2_GNU_MIRROR)/screen
SCREEN_LICENSE = GPL-3.0+
SCREEN_LICENSE_FILES = COPYING