322599744c
Fixes the following security issues: CVE-2017-12938 - UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file. CVE-2017-12940 - libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. CVE-2017-12941 - libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. CVE-2017-12942 - libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. For more details, see http://www.openwall.com/lists/oss-security/2017/08/14/3 While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
24 lines
669 B
Makefile
24 lines
669 B
Makefile
################################################################################
|
|
#
|
|
# unrar
|
|
#
|
|
################################################################################
|
|
|
|
UNRAR_VERSION = 5.5.8
|
|
UNRAR_SOURCE = unrarsrc-$(UNRAR_VERSION).tar.gz
|
|
UNRAR_SITE = http://www.rarlab.com/rar
|
|
UNRAR_LICENSE = unrar
|
|
UNRAR_LICENSE_FILES = license.txt
|
|
|
|
define UNRAR_BUILD_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) CXX="$(TARGET_CXX)" STRIP="/bin/true" \
|
|
CXXFLAGS="$(TARGET_CXXFLAGS) -pthread" \
|
|
LDFLAGS="$(TARGET_LDFLAGS) -pthread" -C $(@D)
|
|
endef
|
|
|
|
define UNRAR_INSTALL_TARGET_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) DESTDIR=$(TARGET_DIR)/usr install
|
|
endef
|
|
|
|
$(eval $(generic-package))
|