96865f02d4
QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream write fails. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
28 lines
800 B
Makefile
28 lines
800 B
Makefile
################################################################################
|
|
#
|
|
# qpdf
|
|
#
|
|
################################################################################
|
|
|
|
QPDF_VERSION = 9.1.1
|
|
QPDF_SITE = http://downloads.sourceforge.net/project/qpdf/qpdf/$(QPDF_VERSION)
|
|
QPDF_INSTALL_STAGING = YES
|
|
QPDF_LICENSE = Apache-2.0 or Artistic-2.0
|
|
QPDF_LICENSE_FILES = LICENSE.txt Artistic-2.0
|
|
QPDF_CPE_ID_VENDOR = qpdf_project
|
|
QPDF_DEPENDENCIES = host-pkgconf zlib jpeg
|
|
|
|
QPDF_CONF_OPTS = --with-random=/dev/urandom
|
|
|
|
# 0002-Fix-some-pipelines-to-be-safe-if-downstream-write-fails.patch
|
|
QPDF_IGNORE_CVES += CVE-2021-36978
|
|
|
|
ifeq ($(BR2_PACKAGE_GNUTLS),y)
|
|
QPDF_CONF_OPTS += --enable-crypto-gnutls
|
|
QPDF_DEPENDENCIES += gnutls
|
|
else
|
|
QPDF_CONF_OPTS += --disable-crypto-gnutls
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|