NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
c7fd40c7d8
kumquat-buildroot/package/putty/putty.mk

25 lines
644 B
Makefile
Raw Normal View History

putty: add new package [Peter: drop unneeded wchar dependency] Signed-off-by: Alexander Dahl <post@lespocky.de> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-03-13 10:30:36 +01:00
################################################################################
#
# putty
#
################################################################################
package/putty: bump to version 0.75 Upstream does not set -Werror in its build files anymore. License file just changed copyright years and holders. PGP signatures of source tarball and hashes were checked. Link: https://www.chiark.greenend.org.uk/~sgtatham/putty/releases/0.75.html Link: https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html Signed-off-by: Alexander Dahl <post@lespocky.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-05-08 21:53:42 +02:00
PUTTY_VERSION = 0.75
putty: add new package [Peter: drop unneeded wchar dependency] Signed-off-by: Alexander Dahl <post@lespocky.de> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-03-13 10:30:36 +01:00
PUTTY_SITE = http://the.earth.li/~sgtatham/putty/$(PUTTY_VERSION)
PUTTY_LICENSE = MIT
PUTTY_LICENSE_FILES = LICENCE
package/putty: add PUTTY_CPE_ID_VENDOR cpe:2.3:a:putty:putty is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aputty%3Aputty Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-03-01 18:42:39 +01:00
PUTTY_CPE_ID_VENDOR = putty
putty: add new package [Peter: drop unneeded wchar dependency] Signed-off-by: Alexander Dahl <post@lespocky.de> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-03-13 10:30:36 +01:00
PUTTY_CONF_OPTS = --disable-gtktest
package/putty: fix CVE-2021-36367 PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user). Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2021-07-17 11:16:19 +02:00
# 0002-New-option-to-reject-trivial-success-of-userauth.patch
PUTTY_IGNORE_CVES += CVE-2021-36367
putty: add new package [Peter: drop unneeded wchar dependency] Signed-off-by: Alexander Dahl <post@lespocky.de> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-03-13 10:30:36 +01:00
ifeq ($(BR2_PACKAGE_LIBGTK2),y)
PUTTY_CONF_OPTS += --with-gtk=2
PUTTY_DEPENDENCIES += libgtk2
else
PUTTY_CONF_OPTS += --without-gtk
endif
$(eval $(autotools-package))
Reference in New Issue Copy Permalink