NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
eb39f4e146
kumquat-buildroot/package/libssh2/libssh2.mk

57 lines
1.8 KiB
Makefile
Raw Normal View History

libssh2: add package [Peter: minor white space tweaks] Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-08-30 16:09:44 +02:00
################################################################################
#
# libssh2
#
################################################################################
package/libssh2: security bump to version 1.9.0 Fix CVE-2019-13115: In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-08-17 21:30:50 +02:00
LIBSSH2_VERSION = 1.9.0
package/libssh2: switch site to https://www.libssh2.org/download As spotted by Danomi during review of "libssh2: security bump to version 1.9.0" (https://patchwork.ozlabs.org/patch/1148776), it seems that the tarball from github and libssh2.org/download are not the same. One of the difference is that LIBSSH2_VERSION in include/libssh2.h is set to "1.9.0_DEV" in github tarball whereas it is set to "1.9.0" in libssh2.org/download. So switch site to https://www.libssh2.org/download to get "official" release Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-08-19 22:36:45 +02:00
LIBSSH2_SITE = https://www.libssh2.org/download
libssh2: add package [Peter: minor white space tweaks] Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-08-30 16:09:44 +02:00
LIBSSH2_LICENSE = BSD
LIBSSH2_LICENSE_FILES = COPYING
linux, package: do not use <pkg>_NAME when defining CPE ID variables As we discussed on the mailing list, using $(<pkg>_NAME) when defining CPE ID variables feels a bit odd and needlessly complicated. Just use the package name directly. Cc: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-01-14 23:34:30 +01:00
LIBSSH2_CPE_ID_VENDOR = libssh2
libssh2: add package [Peter: minor white space tweaks] Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-08-30 16:09:44 +02:00
LIBSSH2_INSTALL_STAGING = YES
packages: rename FOO_CONF_OPT into FOO_CONF_OPTS To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-09-27 21:32:44 +02:00
LIBSSH2_CONF_OPTS = --disable-examples-build
libssh2: add package [Peter: minor white space tweaks] Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-08-30 16:09:44 +02:00
package/libssh2: fix CVE-2019-17498 In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-02-29 12:31:32 +01:00
# 0003-packet-c-improve-message-parsing.patch
LIBSSH2_IGNORE_CVES += CVE-2019-17498
package/libssh2: fix autoreconf comment The comment explaining the autoreconf says that we are building from a git clone - but we are not, currently. However, the reconf is still needed due to patches modifying ac files. This commit corrects the comment. Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> [yann.morin.1998@free.fr: also mention acincludes.m4] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-05-16 18:11:40 +02:00
# patch touching configure.ac and acinclude.m4
package/libssh2: update to newest version Update libssh2 to use the newest version from git. This caused a transition from released version number to hash as it has not been version rev'd in over a year (see issue https://github.com/libssh2/libssh2/issues/220 for bump request). This brings in changes to the autoconf to correctly pick the crypto library. Signed-off-by: Sam Voss <sam.voss@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-10-31 18:56:30 +01:00
LIBSSH2_AUTORECONF = YES
package/libssh2: Add selectable crypto libraries Currently, the selection of the backend is based on a priority order, which is not always desirable: not all features are available for all backends, as reported upstream: https://github.com/libssh2/libssh2/issues/213 In that particular case, the problem is that libgcrypt is unable to read encrypted certificates created with openssl, but it is likely that other incompatibilities exist as well. As such, allow a user to select the backend most appropriate to their use-case. Note that this changes the defaults: previously, if openssl was already selected and we additionally select libssh2, openssl would be used as a backend. Now, mbedtls is the default so if the user doesn't change it, mbedtls will be used. Signed-off-by: Sam Voss <sam.voss@rockwellcollins.com> [Arnout: remove now-unneeded comment in .mk file] Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2017-11-01 17:22:56 +01:00
ifeq ($(BR2_PACKAGE_LIBSSH2_MBEDTLS),y)
libssh2: add mbedtls backend libssh2 support mbedtls as crypto back-end library since version 1.8.0. Default to mbedtls since it's smaller than either libgcrypt or openssl. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-07-10 19:35:54 +02:00
LIBSSH2_DEPENDENCIES += mbedtls
package/libssh2: update to newest version Update libssh2 to use the newest version from git. This caused a transition from released version number to hash as it has not been version rev'd in over a year (see issue https://github.com/libssh2/libssh2/issues/220 for bump request). This brings in changes to the autoconf to correctly pick the crypto library. Signed-off-by: Sam Voss <sam.voss@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-10-31 18:56:30 +01:00
LIBSSH2_CONF_OPTS += --with-libmbedcrypto-prefix=$(STAGING_DIR)/usr \
--with-crypto=mbedtls
package/libssh2: Add selectable crypto libraries Currently, the selection of the backend is based on a priority order, which is not always desirable: not all features are available for all backends, as reported upstream: https://github.com/libssh2/libssh2/issues/213 In that particular case, the problem is that libgcrypt is unable to read encrypted certificates created with openssl, but it is likely that other incompatibilities exist as well. As such, allow a user to select the backend most appropriate to their use-case. Note that this changes the defaults: previously, if openssl was already selected and we additionally select libssh2, openssl would be used as a backend. Now, mbedtls is the default so if the user doesn't change it, mbedtls will be used. Signed-off-by: Sam Voss <sam.voss@rockwellcollins.com> [Arnout: remove now-unneeded comment in .mk file] Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2017-11-01 17:22:56 +01:00
else ifeq ($(BR2_PACKAGE_LIBSSH2_LIBGCRYPT),y)
libssh2: add package [Peter: minor white space tweaks] Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-08-30 16:09:44 +02:00
LIBSSH2_DEPENDENCIES += libgcrypt
package/libssh2: update to newest version Update libssh2 to use the newest version from git. This caused a transition from released version number to hash as it has not been version rev'd in over a year (see issue https://github.com/libssh2/libssh2/issues/220 for bump request). This brings in changes to the autoconf to correctly pick the crypto library. Signed-off-by: Sam Voss <sam.voss@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-10-31 18:56:30 +01:00
LIBSSH2_CONF_OPTS += --with-libgcrypt-prefix=$(STAGING_DIR)/usr \
--with-crypto=libgcrypt
libssh2: fix static linking issue with libgcrypt Fixes: http://autobuild.buildroot.net/results/07e/07e50ba575b305b37e7a94a773c2b2e255393e9f/ http://autobuild.buildroot.net/results/072/07249f0a001a34ae608a8f8646b26a1152219252/ http://autobuild.buildroot.net/results/1c0/1c0447431e4c025732ea2eb8e9788e303f24fd04/ http://autobuild.buildroot.net/results/5e1/5e1f58c086e437b85b0d31310a93a3b2d0d70836/ And many more. libgcrypt depends on libgpg-error and the configure script forgets to link against it breaking static linking. Fix it by using libgcrypt-config --libs. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-11-18 15:31:33 +01:00
# configure.ac forgets to link to dependent libraries of gcrypt breaking static
# linking
packages: use backtick instead of $(shell ...) make function It is often difficult to know exactly when make will expand the variable, and usually it can only be expanded after the dependencies have been built (e.g. pkg-config or the .pc file). Using a backtick instead makes it very clear that it will be expanded only while executing the command. This change is useful for two cases: 1. The per-package staging (and host) directory will be created as part of the configure step, so any $(shell ...) variable that is used in the configure step will fail because the directory doesn't exist yet. 2. 'make printvars' evaluates the variables it prints. It will therefore trigger a lot of errors from missing .pc files and others. The backticks, on the other hand, are not expanded, so with this change the output of 'make printvars' becomes clean again. This commit contains only the easy changes: replace $(shell ...) with `...`, and also replace ' with " where needed. Follow-up commits will tackle the more complicated cases that need additional explanation. After this change, the following instances of $(shell ...) will remain: - All assignments that use := - All variables that are used in make conditionals (which don't expand the backticks). - All variables that only refer to system executables and make variables that don't change. - The calls to check-host-* in dependencies.mk, because it is eval'ed. [Original patch by Fabio Porcedda, but extended quite a bit by Arnout.] Signed-off-by: Fabio Porcedda <fabio.porcedda@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-12 16:35:26 +02:00
LIBSSH2_CONF_ENV += LIBS="`$(STAGING_DIR)/usr/bin/libgcrypt-config --libs`"
package/libssh2: Add selectable crypto libraries Currently, the selection of the backend is based on a priority order, which is not always desirable: not all features are available for all backends, as reported upstream: https://github.com/libssh2/libssh2/issues/213 In that particular case, the problem is that libgcrypt is unable to read encrypted certificates created with openssl, but it is likely that other incompatibilities exist as well. As such, allow a user to select the backend most appropriate to their use-case. Note that this changes the defaults: previously, if openssl was already selected and we additionally select libssh2, openssl would be used as a backend. Now, mbedtls is the default so if the user doesn't change it, mbedtls will be used. Signed-off-by: Sam Voss <sam.voss@rockwellcollins.com> [Arnout: remove now-unneeded comment in .mk file] Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2017-11-01 17:22:56 +01:00
else ifeq ($(BR2_PACKAGE_LIBSSH2_OPENSSL),y)
package/libssh2: fix build with openssl and atomic Fixes: - http://autobuild.buildroot.org/results/e381eefa39307f1c8eb22f872df438b3fe0352dd Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-05-18 11:53:23 +02:00
LIBSSH2_DEPENDENCIES += host-pkgconf openssl
package/libssh2: update to newest version Update libssh2 to use the newest version from git. This caused a transition from released version number to hash as it has not been version rev'd in over a year (see issue https://github.com/libssh2/libssh2/issues/220 for bump request). This brings in changes to the autoconf to correctly pick the crypto library. Signed-off-by: Sam Voss <sam.voss@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-10-31 18:56:30 +01:00
LIBSSH2_CONF_OPTS += --with-libssl-prefix=$(STAGING_DIR)/usr \
--with-crypto=openssl
package/libssh2: fix build with openssl and atomic Fixes: - http://autobuild.buildroot.org/results/e381eefa39307f1c8eb22f872df438b3fe0352dd Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-05-18 11:53:23 +02:00
# configure.ac forgets to link to dependent libraries of openssl breaking static
# linking
LIBSSH2_CONF_ENV += LIBS=`$(PKG_CONFIG_HOST_BINARY) --libs openssl`
libssh2: add package [Peter: minor white space tweaks] Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-08-30 16:09:44 +02:00
endif
# Add zlib support if enabled
ifeq ($(BR2_PACKAGE_ZLIB),y)
LIBSSH2_DEPENDENCIES += zlib
package/libssh2: fix zlib library search path issues Like for lingcrypt and openssl, help the configure script to find zlib installed in STAGING_DIR. Otherwise, It might find the one installed on the host: checking how to link with libz... /usr/lib/libz.so -Wl,-rpath -Wl,/usr/lib Fixes: http://autobuild.buildroot.net/results/93b/93b43e114f21a22f0f8b7d7dd6774c089c426cd1 Signed-off-by: Romain Naour <romain.naour@openwide.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-02-14 18:38:28 +01:00
LIBSSH2_CONF_OPTS += --with-libz \
--with-libz-prefix=$(STAGING_DIR)/usr
libssh2: add package [Peter: minor white space tweaks] Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-08-30 16:09:44 +02:00
else
packages: rename FOO_CONF_OPT into FOO_CONF_OPTS To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-09-27 21:32:44 +02:00
LIBSSH2_CONF_OPTS += --without-libz
libssh2: add package [Peter: minor white space tweaks] Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-08-30 16:09:44 +02:00
endif
libssh2: add host variant Allow build of host variant of libssh2, which depends on host-openssl. Signed-off-by: Eric Le Bihan <eric.le.bihan.dev@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-02-04 19:07:44 +01:00
HOST_LIBSSH2_DEPENDENCIES += host-openssl
HOST_LIBSSH2_CONF_OPTS += --with-openssl \
package: clean up remaining references to $(HOST_DIR)/usr Signed-off-by: Ferdinand van Aartsen <ferdinand@ombud.nl> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-09-24 00:04:59 +02:00
--with-libssl-prefix=$(HOST_DIR) \
libssh2: add host variant Allow build of host variant of libssh2, which depends on host-openssl. Signed-off-by: Eric Le Bihan <eric.le.bihan.dev@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-02-04 19:07:44 +01:00
--without-libgcrypt
libssh2: add package [Peter: minor white space tweaks] Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-08-30 16:09:44 +02:00
$(eval $(autotools-package))
libssh2: add host variant Allow build of host variant of libssh2, which depends on host-openssl. Signed-off-by: Eric Le Bihan <eric.le.bihan.dev@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-02-04 19:07:44 +01:00
$(eval $(host-autotools-package))
Reference in New Issue Copy Permalink