NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
08ccfb65c6
kumquat-buildroot/package/libzip/libzip.mk

22 lines
560 B
Makefile
Raw Normal View History

libzip: new package [Peter: license is BSD-3c] Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-01-29 12:35:36 +01:00
################################################################################
#
# libzip
#
################################################################################
libzip: bump to version 1.4.0 Upstream switched to cmake. Add upstream patch that removes run of target binary on the host. Cc: Bartosz Golaszewski <brgl@bgdev.pl> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-01-04 19:39:26 +01:00
LIBZIP_VERSION = 1.4.0
Remove trailing slash from all package site URLs The recommended form is without the trailing slash. Buildroot will add a slash between FOO_SITE and FOO_SOURCE as appropriate. Reported-by: Arnout Vandecappelle <arnout@mind.be> Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-03-09 23:14:51 +01:00
LIBZIP_SITE = http://www.nih.at/libzip
libzip: new package [Peter: license is BSD-3c] Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-01-29 12:35:36 +01:00
LIBZIP_SOURCE = libzip-$(LIBZIP_VERSION).tar.xz
boot, package: use SPDX short identifier for BSD-3c We want to use SPDX identifier for license string as much as possible. SPDX short identifier for BSD-3c is BSD-3-Clause. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/BSD-3c/BSD-3-Clause/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-03-30 15:43:38 +02:00
LIBZIP_LICENSE = BSD-3-Clause
libzip: new package [Peter: license is BSD-3c] Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-01-29 12:35:36 +01:00
LIBZIP_LICENSE_FILES = LICENSE
LIBZIP_INSTALL_STAGING = YES
LIBZIP_DEPENDENCIES = zlib
libzip: security bump to version 1.3.0 Fixes the following security issues: CVE-2017-12858: Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors. CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive. For more details, see https://blogs.gentoo.org/ago/2017/09/01/libzip-use-after-free-in-_zip_buffer_free-zip_buffer-c/ https://blogs.gentoo.org/ago/2017/09/01/libzip-memory-allocation-failure-in-_zip_cdir_grow-zip_dirent-c/ libzip-1.3.0 also adds optional bzip2 support, so handle that. While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-09-07 23:21:33 +02:00
ifeq ($(BR2_PACKAGE_BZIP2),y)
LIBZIP_DEPENDENCIES += bzip2
else
libzip: bump to version 1.4.0 Upstream switched to cmake. Add upstream patch that removes run of target binary on the host. Cc: Bartosz Golaszewski <brgl@bgdev.pl> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-01-04 19:39:26 +01:00
LIBZIP_CONF_OPTS += -DCMAKE_DISABLE_FIND_PACKAGE_BZIP2=TRUE
libzip: security bump to version 1.3.0 Fixes the following security issues: CVE-2017-12858: Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors. CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive. For more details, see https://blogs.gentoo.org/ago/2017/09/01/libzip-use-after-free-in-_zip_buffer_free-zip_buffer-c/ https://blogs.gentoo.org/ago/2017/09/01/libzip-memory-allocation-failure-in-_zip_cdir_grow-zip_dirent-c/ libzip-1.3.0 also adds optional bzip2 support, so handle that. While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-09-07 23:21:33 +02:00
endif
libzip: bump to version 1.4.0 Upstream switched to cmake. Add upstream patch that removes run of target binary on the host. Cc: Bartosz Golaszewski <brgl@bgdev.pl> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-01-04 19:39:26 +01:00
$(eval $(cmake-package))
Reference in New Issue Copy Permalink