edbdad9397
- Fix CVE-2022-26291: lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted Irz file. - Use official tarball and so drop autoreconf https://github.com/ckolivas/lrzip/blob/v0.651/WHATS-NEW Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
24 lines
639 B
Makefile
24 lines
639 B
Makefile
################################################################################
|
|
#
|
|
# lrzip
|
|
#
|
|
################################################################################
|
|
|
|
LRZIP_VERSION = 0.651
|
|
LRZIP_SOURCE = lrzip-$(LRZIP_VERSION).tar.xz
|
|
LRZIP_SITE = http://ck.kolivas.org/apps/lrzip
|
|
LRZIP_LICENSE = GPL-2.0+
|
|
LRZIP_LICENSE_FILES = COPYING
|
|
LRZIP_CPE_ID_VENDOR = long_range_zip_project
|
|
LRZIP_CPE_ID_PRODUCT = long_range_zip
|
|
LRZIP_DEPENDENCIES = zlib lz4 lzo bzip2
|
|
|
|
ifeq ($(BR2_i386)$(BR2_x86_64),y)
|
|
LRZIP_DEPENDENCIES += host-nasm
|
|
LRZIP_CONF_OPTS += --enable-asm
|
|
else
|
|
LRZIP_CONF_OPTS += --disable-asm
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|