6ca1a7c277
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character sequence. For more details, see the oss-security discussion: https://www.openwall.com/lists/oss-security/2021/02/09/3 So far no fix has been added to upstream git, and a number of early proposed fixes caused regressions, so pull the security fix from the screen 4.8.0-5 Debian package. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
42 lines
1.3 KiB
Makefile
42 lines
1.3 KiB
Makefile
################################################################################
|
|
#
|
|
# screen
|
|
#
|
|
################################################################################
|
|
|
|
SCREEN_VERSION = 4.8.0
|
|
SCREEN_SITE = $(BR2_GNU_MIRROR)/screen
|
|
SCREEN_LICENSE = GPL-3.0+
|
|
SCREEN_LICENSE_FILES = COPYING
|
|
SCREEN_CPE_ID_VENDOR = gnu
|
|
SCREEN_DEPENDENCIES = ncurses
|
|
SCREEN_AUTORECONF = YES
|
|
SCREEN_CONF_ENV = CFLAGS="$(TARGET_CFLAGS)"
|
|
SCREEN_CONF_OPTS = --enable-colors256
|
|
SCREEN_INSTALL_TARGET_OPTS = DESTDIR=$(TARGET_DIR) SCREEN=screen install_bin
|
|
|
|
# 0008_CVE-2021-26937.patch
|
|
SCREEN_IGNORE_CVES += CVE-2021-26937
|
|
|
|
ifeq ($(BR2_PACKAGE_LINUX_PAM),y)
|
|
SCREEN_DEPENDENCIES += linux-pam
|
|
SCREEN_CONF_OPTS += --enable-pam
|
|
else
|
|
SCREEN_CONF_OPTS += --disable-pam
|
|
endif
|
|
|
|
define SCREEN_INSTALL_SCREENRC
|
|
$(INSTALL) -m 0755 -D $(@D)/etc/screenrc $(TARGET_DIR)/etc/screenrc
|
|
endef
|
|
SCREEN_POST_INSTALL_TARGET_HOOKS += SCREEN_INSTALL_SCREENRC
|
|
|
|
# Add /usr/bin/screen to /etc/shells otherwise some login tools like dropbear
|
|
# can reject the user connection. See man shells.
|
|
define SCREEN_ADD_SCREEN_TO_SHELLS
|
|
grep -qsE '^/usr/bin/screen$$' $(TARGET_DIR)/etc/shells \
|
|
|| echo "/usr/bin/screen" >> $(TARGET_DIR)/etc/shells
|
|
endef
|
|
SCREEN_TARGET_FINALIZE_HOOKS += SCREEN_ADD_SCREEN_TO_SHELLS
|
|
|
|
$(eval $(autotools-package))
|