kumquat-buildroot/package/xterm/xterm.mk
Peter Korsgaard 0cc7c63f91 package/xterm: security bump to patch 376
Fixes the following security issue:

CVE-2022-45063: xterm before 375 allows code execution via font ops, e.g.,
because an OSC 50 response may have Ctrl-g and therefore lead to command
execution within the vi line-editing mode of Zsh:

https://www.openwall.com/lists/oss-security/2022/11/10/1

Additionally, patch 376 fixes a null pointer access issue:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022942

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-11-20 10:03:00 +01:00

37 lines
1019 B
Makefile

################################################################################
#
# xterm
#
################################################################################
XTERM_VERSION = 376
XTERM_SOURCE = xterm-$(XTERM_VERSION).tgz
XTERM_SITE = http://invisible-mirror.net/archives/xterm
XTERM_DEPENDENCIES = ncurses xlib_libXaw host-pkgconf
XTERM_LICENSE = MIT
XTERM_LICENSE_FILES = COPYING
XTERM_CPE_ID_VENDOR = invisible-island
XTERM_CONF_OPTS = --enable-256-color \
--x-includes=$(STAGING_DIR)/usr/include \
--x-libraries=$(STAGING_DIR)/usr/lib
# Avoid freetype2 path poisoning by imake
XTERM_CONF_ENV = ac_cv_path_IMAKE=""
ifeq ($(BR2_PACKAGE_XLIB_LIBXFT),y)
XTERM_DEPENDENCIES += xlib_libXft
XTERM_CONF_OPTS += --enable-freetype \
--with-freetype-config=auto
else
XTERM_CONF_OPTS += --disable-freetype
endif
ifeq ($(BR2_PACKAGE_XLIB_LIBXINERAMA),y)
XTERM_DEPENDENCIES += xlib_libXinerama
XTERM_CONF_OPTS += --with-xinerama
else
XTERM_CONF_OPTS += --without-xinerama
endif
$(eval $(autotools-package))