7564f1de06
Fix CVE-2022-30333: RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. 6.12 application version corresponds to 6.1.7 source version: https://github.com/debian-calibre/unrar-nonfree/compare/upstream/6.1.6...upstream/6.1.7 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
25 lines
699 B
Makefile
25 lines
699 B
Makefile
################################################################################
|
|
#
|
|
# unrar
|
|
#
|
|
################################################################################
|
|
|
|
UNRAR_VERSION = 6.1.7
|
|
UNRAR_SOURCE = unrarsrc-$(UNRAR_VERSION).tar.gz
|
|
UNRAR_SITE = https://www.rarlab.com/rar
|
|
UNRAR_LICENSE = unrar
|
|
UNRAR_LICENSE_FILES = license.txt
|
|
UNRAR_CPE_ID_VENDOR = rarlab
|
|
|
|
define UNRAR_BUILD_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) CXX="$(TARGET_CXX)" STRIP="/bin/true" \
|
|
CXXFLAGS="$(TARGET_CXXFLAGS) -pthread" \
|
|
LDFLAGS="$(TARGET_LDFLAGS) -pthread" -C $(@D)
|
|
endef
|
|
|
|
define UNRAR_INSTALL_TARGET_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) DESTDIR=$(TARGET_DIR)/usr install
|
|
endef
|
|
|
|
$(eval $(generic-package))
|