NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ed: security bump to version 1.14.1

Browse Source 
Fixes CVE-2017-5357: crash with some malformed commands.

Upstream now provides .tar.lz archive. Add the necessary extract command.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Baruch Siach 2017-02-09 15:32:30 +02:00 committed by Peter Korsgaard
parent ae73226476
commit 42eabd7551
2 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
package/ed/ed.hash
View File

@ -1,2 +1,4 @@
# From http://lists.gnu.org/archive/html/bug-ed/2013-06/msg00001.html
md5 565b6d1d5a9a8816b9b304fc4ed9405d ed-1.9.tar.gz
# From http://lists.gnu.org/archive/html/bug-ed/2017-01/msg00002.html
sha1 a91f785f7e16dc68e1c9c86d532ebd9698171ba0 ed-1.14.1.tar.lz
# Locally computed
sha256 ffb97eb8f2a2b5a71a9b97e3872adce953aa1b8958e04c5b7bf11d556f32552a ed-1.14.1.tar.lz

9
package/ed/ed.mk
View File

@ -4,14 +4,21 @@
#
################################################################################
ED_VERSION = 1.9
ED_VERSION = 1.14.1
ED_SITE = $(BR2_GNU_MIRROR)/ed
ED_SOURCE = ed-$(ED_VERSION).tar.lz
ED_CONF_OPTS = \
CC="$(TARGET_CC)" CFLAGS="$(TARGET_CFLAGS)" \
LDFLAGS="$(TARGET_LDFLAGS)"
ED_DEPENDENCIES = host-lzip
ED_LICENSE = GPLv3+
ED_LICENSE_FILES = COPYING
define ED_EXTRACT_CMDS
$(HOST_DIR)/usr/bin/lzip -d -c $(DL_DIR)/$(ED_SOURCE) | \
tar --strip-components=1 -C $(@D) $(TAR_OPTIONS) -
endef
define ED_CONFIGURE_CMDS
(cd $(@D); \
$(TARGET_MAKE_ENV) ./configure \