kumquat-buildroot/package/tmux/tmux.mk
Peter Korsgaard 7e0f81a9f6 package/tmux: add upstream security fix for CVE-2020-27347
Fixes CVE-2020-27347: The function input_csi_dispatch_sgr_colon() in file
input.c contained a stack-based buffer-overflow that can be exploited by
terminal output.

For details, see:
https://www.openwall.com/lists/oss-security/2020/11/05/3

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-11-12 21:49:21 +01:00

25 lines
828 B
Makefile

################################################################################
#
# tmux
#
################################################################################
TMUX_VERSION = 2.9a
TMUX_SITE = https://github.com/tmux/tmux/releases/download/$(TMUX_VERSION)
TMUX_LICENSE = ISC
TMUX_LICENSE_FILES = COPYING
TMUX_DEPENDENCIES = libevent ncurses host-pkgconf
# 0001-Do-not-write-after-the-end-of-the-array-and-overwrit.patch
TMUX_IGNORE_CVES += CVE-2020-27347
# Add /usr/bin/tmux to /etc/shells otherwise some login tools like dropbear
# can reject the user connection. See man shells.
define TMUX_ADD_TMUX_TO_SHELLS
grep -qsE '^/usr/bin/tmux$$' $(TARGET_DIR)/etc/shells \
|| echo "/usr/bin/tmux" >> $(TARGET_DIR)/etc/shells
endef
TMUX_TARGET_FINALIZE_HOOKS += TMUX_ADD_TMUX_TO_SHELLS
$(eval $(autotools-package))