kumquat-buildroot/package/oniguruma/oniguruma.mk

################################################################################
#
# oniguruma
#
################################################################################

ONIGURUMA_VERSION = 6.9.5
ONIGURUMA_SITE = \
	https://github.com/kkos/oniguruma/releases/download/v$(ONIGURUMA_VERSION)
ONIGURUMA_SOURCE = onig-$(ONIGURUMA_VERSION).tar.gz
ONIGURUMA_LICENSE = BSD-2-Clause
ONIGURUMA_LICENSE_FILES = COPYING
ONIGURUMA_INSTALL_STAGING = YES

# 0001-207-Out-of-bounds-write.patch
ONIGURUMA_IGNORE_CVES += CVE-2020-26159

$(eval $(autotools-package))
package/oniguruma: new package Oniguruma is a modern and flexible regular expressions library. It encompasses features from different regular expression implementations that traditionally exist in different languages. https://github.com/kkos/oniguruma Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2019-03-31 17:12:05 +02:00			`################################################################################`
			`#`
			`# oniguruma`
			`#`
			`################################################################################`

package/oniguruma: bump to version 6.9.5 Update hash of COPYING (update in year): https://github.com/kkos/oniguruma/commit/1952e8970a7449d5ca42a7f3bd9ce26ec6e32f43 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-04-20 15:53:24 +02:00			`ONIGURUMA_VERSION = 6.9.5`
package/oniguruma: security bump to version 6.9.4 - Retrieve official tarball to drop autoreconf - Fixed CVE-2019-19012 - Fixed CVE-2019-19203 (Does not affect UTF-8, UTF-16 and UTF-32 encodings) - Fixed CVE-2019-19204 (Affects only PosixBasic, Emacs and Grep syntaxes) - Fixed CVE-2019-19246 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-11-29 09:09:51 +01:00			`ONIGURUMA_SITE = \`
			`https://github.com/kkos/oniguruma/releases/download/v$(ONIGURUMA_VERSION)`
			`ONIGURUMA_SOURCE = onig-$(ONIGURUMA_VERSION).tar.gz`
package/oniguruma: new package Oniguruma is a modern and flexible regular expressions library. It encompasses features from different regular expression implementations that traditionally exist in different languages. https://github.com/kkos/oniguruma Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2019-03-31 17:12:05 +02:00			`ONIGURUMA_LICENSE = BSD-2-Clause`
			`ONIGURUMA_LICENSE_FILES = COPYING`
			`ONIGURUMA_INSTALL_STAGING = YES`

package/oniguruma: fix CVE-2020-26159 Fix CVE-2020-26159: In Oniguruma 6.9.5_rev1, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concat_opt_exact_str in src/regcomp.c. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-10-15 19:02:53 +02:00			`# 0001-207-Out-of-bounds-write.patch`
			`ONIGURUMA_IGNORE_CVES += CVE-2020-26159`

package/oniguruma: new package Oniguruma is a modern and flexible regular expressions library. It encompasses features from different regular expression implementations that traditionally exist in different languages. https://github.com/kkos/oniguruma Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2019-03-31 17:12:05 +02:00			`$(eval $(autotools-package))`