ca6c2ee3da
Fixes the following security issue: - CVE-2021-45444: In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion. The 5.8.1 release is not listed in MD5SUM, so drop the md5 hash. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
54 lines
1.4 KiB
Makefile
54 lines
1.4 KiB
Makefile
################################################################################
|
|
#
|
|
# zsh
|
|
#
|
|
################################################################################
|
|
|
|
ZSH_VERSION = 5.8.1
|
|
ZSH_SITE = http://www.zsh.org/pub
|
|
ZSH_SOURCE = zsh-$(ZSH_VERSION).tar.xz
|
|
ZSH_DEPENDENCIES = ncurses
|
|
ZSH_CONF_OPTS = --bindir=/bin
|
|
ZSH_CONF_ENV = zsh_cv_sys_nis=no zsh_cv_sys_nis_plus=no
|
|
ZSH_LICENSE = MIT-like
|
|
ZSH_LICENSE_FILES = LICENCE
|
|
ZSH_CPE_ID_VENDOR = zsh
|
|
|
|
ifeq ($(BR2_PACKAGE_GDBM),y)
|
|
ZSH_CONF_OPTS += --enable-gdbm
|
|
ZSH_DEPENDENCIES += gdbm
|
|
else
|
|
ZSH_CONF_OPTS += --disable-gdbm
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBCAP),y)
|
|
ZSH_CONF_OPTS += --enable-cap
|
|
ZSH_DEPENDENCIES += libcap
|
|
else
|
|
ZSH_CONF_OPTS += --disable-cap
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_PCRE),y)
|
|
ZSH_CONF_OPTS += --enable-pcre
|
|
ZSH_CONF_ENV += ac_cv_prog_PCRECONF=$(STAGING_DIR)/usr/bin/pcre-config
|
|
ZSH_DEPENDENCIES += pcre
|
|
else
|
|
ZSH_CONF_OPTS += --disable-pcre
|
|
endif
|
|
|
|
# Add /bin/zsh to /etc/shells otherwise some login tools like dropbear
|
|
# can reject the user connection. See man shells.
|
|
define ZSH_ADD_ZSH_TO_SHELLS
|
|
grep -qsE '^/bin/zsh$$' $(TARGET_DIR)/etc/shells \
|
|
|| echo "/bin/zsh" >> $(TARGET_DIR)/etc/shells
|
|
endef
|
|
ZSH_TARGET_FINALIZE_HOOKS += ZSH_ADD_ZSH_TO_SHELLS
|
|
|
|
# Remove versioned zsh-x.y.z binary taking up space
|
|
define ZSH_TARGET_INSTALL_FIXUPS
|
|
rm -f $(TARGET_DIR)/bin/zsh-$(ZSH_VERSION)
|
|
endef
|
|
ZSH_POST_INSTALL_TARGET_HOOKS += ZSH_TARGET_INSTALL_FIXUPS
|
|
|
|
$(eval $(autotools-package))
|