3332c143c0
- Fix CVE-2021-27347: Use after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service (DoS) via a crafted compressed file. - Fix CVE-2021-27345: A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service (DOS) via a crafted compressed file. - Fix CVE-2020-25467: A null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service (DOS) via a crafted compressed file. - lz4 is a mandatory dependency since version 0.640 and3345a239b77f3bf46203...v0.641 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
22 lines
549 B
Makefile
22 lines
549 B
Makefile
################################################################################
|
|
#
|
|
# lrzip
|
|
#
|
|
################################################################################
|
|
|
|
LRZIP_VERSION = 0.641
|
|
LRZIP_SITE = $(call github,ckolivas,lrzip,v$(LRZIP_VERSION))
|
|
LRZIP_AUTORECONF = YES
|
|
LRZIP_LICENSE = GPL-2.0+
|
|
LRZIP_LICENSE_FILES = COPYING
|
|
LRZIP_DEPENDENCIES = zlib lz4 lzo bzip2
|
|
|
|
ifeq ($(BR2_i386)$(BR2_x86_64),y)
|
|
LRZIP_DEPENDENCIES += host-nasm
|
|
LRZIP_CONF_OPTS += --enable-asm
|
|
else
|
|
LRZIP_CONF_OPTS += --disable-asm
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|