mirror of
https://git.yoctoproject.org/poky
synced 2026-04-27 03:32:12 +02:00
An elevation of privilege vulnerability in libnl could enable a local
malicious application to execute arbitrary code within the context of
the Wi-Fi service. This issue is rated as Moderate because it first
requires compromising a privileged process and is mitigated by
current platform configurations. Product: Android. Versions: 5.0.2,
5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32342065. NOTE: this
issue also exists in the upstream libnl before 3.3.0 library.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0553
Backport fix from upstream libnl 3.3.0 release:
3e18948f17
http://lists.infradead.org/pipermail/libnl/2017-May/002313.html
(From OE-Core rev: f452fbc5d2ffb9c1417079574bed0dfcdc44787a)
Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
48 lines
1.8 KiB
BlitzBasic
48 lines
1.8 KiB
BlitzBasic
SUMMARY = "A library for applications dealing with netlink sockets"
|
|
HOMEPAGE = "http://www.infradead.org/~tgr/libnl/"
|
|
SECTION = "libs/network"
|
|
|
|
PE = "1"
|
|
|
|
LICENSE = "LGPLv2.1"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c"
|
|
|
|
DEPENDS = "flex-native bison-native"
|
|
|
|
SRC_URI = "https://github.com/thom311/${BPN}/releases/download/${BPN}${@d.getVar('PV').replace('.','_')}/${BP}.tar.gz \
|
|
file://fix-pktloc_syntax_h-race.patch \
|
|
file://fix-pc-file.patch \
|
|
file://lib-check-for-integer-overflow-in-nlmsg_reserve.patch \
|
|
"
|
|
|
|
UPSTREAM_CHECK_URI = "https://github.com/thom311/${BPN}/releases"
|
|
|
|
SRC_URI[md5sum] = "a8ba62a5c4f883f4e493a46d1f3733fe"
|
|
SRC_URI[sha256sum] = "0beb593dc6abfffa18a5c787b27884979c1b7e7f1fd468c801e3cc938a685922"
|
|
|
|
inherit autotools pkgconfig
|
|
|
|
FILES_${PN} = "${libdir}/libnl-3.so.* \
|
|
${libdir}/libnl.so.* \
|
|
${sysconfdir}"
|
|
RREPLACES_${PN} = "libnl2"
|
|
RCONFLICTS_${PN} = "libnl2"
|
|
FILES_${PN}-dev += "${libdir}/libnl/cli/*/*.la"
|
|
FILES_${PN}-staticdev += "${libdir}/libnl/cli/*/*.a"
|
|
|
|
PACKAGES += "${PN}-cli ${PN}-genl ${PN}-idiag ${PN}-nf ${PN}-route ${PN}-xfrm"
|
|
FILES_${PN}-cli = "${libdir}/libnl-cli-3.so.* \
|
|
${libdir}/libnl/cli/*/*.so \
|
|
${bindir}/genl-ctrl-list \
|
|
${bindir}/idiag-socket-details \
|
|
${bindir}/nf-* \
|
|
${bindir}/nl-*"
|
|
FILES_${PN}-genl = "${libdir}/libnl-genl-3.so.* \
|
|
${libdir}/libnl-genl.so.*"
|
|
FILES_${PN}-idiag = "${libdir}/libnl-idiag-3.so.*"
|
|
FILES_${PN}-nf = "${libdir}/libnl-nf-3.so.*"
|
|
FILES_${PN}-route = "${libdir}/libnl-route-3.so.*"
|
|
FILES_${PN}-xfrm = "${libdir}/libnl-xfrm-3.so.*"
|
|
RREPLACES_${PN}-genl = "libnl-genl2"
|
|
RCONFLICTS_${PN}-genl = "libnl-genl2"
|