810c0eecf1
A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
18 lines
520 B
Makefile
18 lines
520 B
Makefile
################################################################################
|
|
#
|
|
# shapelib
|
|
#
|
|
################################################################################
|
|
|
|
SHAPELIB_VERSION = 1.5.0
|
|
SHAPELIB_SITE = http://download.osgeo.org/shapelib
|
|
SHAPELIB_LICENSE = MIT or LGPL-2.0
|
|
SHAPELIB_LICENSE_FILES = web/license.html COPYING
|
|
SHAPELIB_CPE_ID_VENDOR = osgeo
|
|
SHAPELIB_INSTALL_STAGING = YES
|
|
|
|
# 0001-Remove-double-free-in-contrib-shpsrt.patch
|
|
SHAPELIB_IGNORE_CVES += CVE-2022-0699
|
|
|
|
$(eval $(autotools-package))
|