mirror of
https://git.yoctoproject.org/poky
synced 2026-02-12 03:33:02 +01:00
5d5ec38952
Source: http://git.yoctoproject.org/poky.git
MR: 113126
Type: Security Fix
Disposition: Backport from http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?h=hardknott&id=cfc17a7ab5d3b0d6354a7194b8c8746c501959d9
ChangeID: cfc17a7ab5
Description:
Backport patch to fix CVE-2021-40153, and remove version update in
unsquashfs.c for compatible.
CVE: CVE-2021-40153
Ref:
* https://security-tracker.debian.org/tracker/CVE-2021-40153
(From OE-Core rev: 09de4ef3f33540069a37e9fe6e13081984b77511)
(From OE-Core rev: 48303d1c93cfcadf80830d07597805cc41d5f7e9)
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
46 lines
1.6 KiB
BlitzBasic
46 lines
1.6 KiB
BlitzBasic
# Note, we can probably remove the lzma option as it has be replaced with xz,
|
|
# and I don't think the kernel supports it any more.
|
|
SUMMARY = "Tools for manipulating SquashFS filesystems"
|
|
HOMEPAGE = "https://github.com/plougher/squashfs-tools"
|
|
DESCRIPTION = "Tools to create and extract Squashfs filesystems."
|
|
SECTION = "base"
|
|
LICENSE = "GPL-2"
|
|
LIC_FILES_CHKSUM = "file://../COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263"
|
|
|
|
PV = "4.4"
|
|
SRCREV = "52eb4c279cd283ed9802dd1ceb686560b22ffb67"
|
|
SRC_URI = "git://github.com/plougher/squashfs-tools.git;protocol=https \
|
|
file://0001-squashfs-tools-fix-build-failure-against-gcc-10.patch;striplevel=2 \
|
|
file://CVE-2021-40153.patch;striplevel=2 \
|
|
"
|
|
|
|
S = "${WORKDIR}/git/squashfs-tools"
|
|
|
|
EXTRA_OEMAKE = "${PACKAGECONFIG_CONFARGS}"
|
|
|
|
PACKAGECONFIG ??= "gzip xz lzo lz4 lzma xattr reproducible"
|
|
PACKAGECONFIG[gzip] = "GZIP_SUPPORT=1,GZIP_SUPPORT=0,zlib"
|
|
PACKAGECONFIG[xz] = "XZ_SUPPORT=1,XZ_SUPPORT=0,xz"
|
|
PACKAGECONFIG[lzo] = "LZO_SUPPORT=1,LZO_SUPPORT=0,lzo"
|
|
PACKAGECONFIG[lz4] = "LZ4_SUPPORT=1,LZ4_SUPPORT=0,lz4"
|
|
PACKAGECONFIG[lzma] = "LZMA_XZ_SUPPORT=1,LZMA_XZ_SUPPORT=0,xz"
|
|
PACKAGECONFIG[xattr] = "XATTR_SUPPORT=1,XATTR_SUPPORT=0,attr"
|
|
PACKAGECONFIG[zstd] = "ZSTD_SUPPORT=1,ZSTD_SUPPORT=0,zstd"
|
|
PACKAGECONFIG[reproducible] = "REPRODUCIBLE_DEFAULT=1,REPRODUCIBLE_DEFAULT=0,"
|
|
|
|
do_compile() {
|
|
oe_runmake all
|
|
}
|
|
|
|
do_install() {
|
|
oe_runmake install INSTALL_DIR=${D}${sbindir}
|
|
}
|
|
|
|
ARM_INSTRUCTION_SET_armv4 = "arm"
|
|
ARM_INSTRUCTION_SET_armv5 = "arm"
|
|
ARM_INSTRUCTION_SET_armv6 = "arm"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|
|
|
|
CVE_PRODUCT = "squashfs"
|