be052a643d
cpe:2.3🅰️gnu:patch is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Agnu%3Apatch Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
34 lines
936 B
Makefile
34 lines
936 B
Makefile
################################################################################
|
|
#
|
|
# patch
|
|
#
|
|
################################################################################
|
|
|
|
PATCH_VERSION = 2.7.6
|
|
PATCH_SOURCE = patch-$(PATCH_VERSION).tar.xz
|
|
PATCH_SITE = $(BR2_GNU_MIRROR)/patch
|
|
PATCH_LICENSE = GPL-3.0+
|
|
PATCH_LICENSE_FILES = COPYING
|
|
PATCH_CPE_ID_VENDOR = gnu
|
|
|
|
# 0001-Fix-segfault-with-mangled-rename-patch.patch
|
|
PATCH_IGNORE_CVES += CVE-2018-6951
|
|
|
|
# 0003-Fix-arbitrary-command-execution-in-ed-style-patches-.patch
|
|
PATCH_IGNORE_CVES += CVE-2018-1000156
|
|
|
|
# 0004-Invoke-ed-directly-instead-of-using-the-shell.patch
|
|
PATCH_IGNORE_CVES += CVE-2018-20969 CVE-2019-13638
|
|
|
|
# 0005-Don-t-follow-symlinks-unless--follow-symlinks-is-given.patch
|
|
PATCH_IGNORE_CVES += CVE-2019-13636
|
|
|
|
ifeq ($(BR2_PACKAGE_ATTR),y)
|
|
PATCH_CONF_OPTS += --enable-xattr
|
|
PATCH_DEPENDENCIES += attr
|
|
else
|
|
PATCH_CONF_OPTS += --disable-xattr
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|