NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
c0932240fb
kumquat-buildroot/package/chartjs/chartjs.mk

24 lines
757 B
Makefile
Raw Normal View History

package/chartjs: new package Note: even though the Chart.js developers make specific tarballs on GitHub (i.e. not simply 'source code' tarballs), they cannot be used in Buildroot because their names do not encode a version number, e.g. 'Chart.js.zip'. This means that on upgrades, the same tarball name would have different contents and thus a different hash. Signed-off-by: Joeri Barbarien <joeri.barbarien@nokia.com> Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-02-10 12:26:30 +01:00
################################################################################
#
# chartjs
#
################################################################################
package/chartjs: security bump to 2.9.4 CVE-2020-7746 (https://nvd.nist.gov/vuln/detail/CVE-2020-7746) The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution. Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-01-19 16:46:05 +01:00
CHARTJS_VERSION = 2.9.4
package/chartjs: move 'v' version prefix out of CHARTJS_VERSION chartjs 2.9.3 has a security vulnerability (CVE-2020-7746) which is not detected by the CVE scripts, presumably because our version variable starts with a 'v'. Move that 'v' prefix out of the version variable to fix that. Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-01-19 16:46:04 +01:00
CHARTJS_SITE = $(call github,chartjs,Chart.js,v$(CHARTJS_VERSION))
package/chartjs: new package Note: even though the Chart.js developers make specific tarballs on GitHub (i.e. not simply 'source code' tarballs), they cannot be used in Buildroot because their names do not encode a version number, e.g. 'Chart.js.zip'. This means that on upgrades, the same tarball name would have different contents and thus a different hash. Signed-off-by: Joeri Barbarien <joeri.barbarien@nokia.com> Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-02-10 12:26:30 +01:00
CHARTJS_LICENSE = MIT
CHARTJS_LICENSE_FILES = LICENSE.md
package/chartjs: add CPE variables cpe:2.3:a:chartjs:chart.js is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Achartjs%3Achart.js Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2021-01-21 23:04:56 +01:00
CHARTJS_CPE_ID_VENDOR = chartjs
CHARTJS_CPE_ID_PRODUCT = chart.js
package/chartjs: new package Note: even though the Chart.js developers make specific tarballs on GitHub (i.e. not simply 'source code' tarballs), they cannot be used in Buildroot because their names do not encode a version number, e.g. 'Chart.js.zip'. This means that on upgrades, the same tarball name would have different contents and thus a different hash. Signed-off-by: Joeri Barbarien <joeri.barbarien@nokia.com> Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-02-10 12:26:30 +01:00
define CHARTJS_INSTALL_TARGET_CMDS
$(INSTALL) -m 0644 -D $(@D)/dist/Chart.min.css \
$(TARGET_DIR)/var/www/chartjs/css/Chart.css
$(INSTALL) -m 0644 -D $(@D)/dist/Chart.min.js \
$(TARGET_DIR)/var/www/chartjs/js/Chart.js
$(INSTALL) -m 0644 -D $(@D)/dist/Chart.bundle.min.js \
$(TARGET_DIR)/var/www/chartjs/js/Chart.bundle.js
endef
$(eval $(generic-package))
Reference in New Issue Copy Permalink