mirror of
https://git.yoctoproject.org/poky
synced 2026-02-22 01:19:41 +01:00
c4d3f42c7c
Fixes: libgit2, when compiled using the optional, included libssh2 backend, fails to verify SSH keys by default. Description: When using an SSH remote with the optional, included libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the certificate_check field of libgit2's git_remote_callbacks structure - if a certificate check callback is not set, libgit2 does not perform any certificate checking. This means that by default - without configuring a certificate check callback, clients will not perform validation on the server SSH keys and may be subject to a man-in-the-middle attack. Beginning in libgit2 v1.4.5 and v1.5.1, libgit2 will now perform host key checking by default. Users can still override the default behavior using the certificate_check function. The libgit2 security team would like to thank the Julia and Rust security teams for responsibly disclosing this vulnerability and assisting with fixing the vulnerability. (From OE-Core rev: 63cb8eb147088ae171ffa2b6005410742e50e4e6) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f59486310cf33c586671a16cf52862c19c3c4c31) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
23 lines
625 B
BlitzBasic
23 lines
625 B
BlitzBasic
SUMMARY = "the Git linkable library"
|
|
HOMEPAGE = "http://libgit2.github.com/"
|
|
LICENSE = "GPL-2.0-with-GCC-exception & MIT & OpenSSL & BSD-3-Clause"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=112e6bb421dea73cd41de09e777f2d2c"
|
|
|
|
DEPENDS = "curl openssl zlib libssh2 libgcrypt libpcre2"
|
|
|
|
SRC_URI = "git://github.com/libgit2/libgit2.git;branch=maint/v1.5;protocol=https"
|
|
SRCREV = "42e5db98b963ae503229c63e44e06e439df50e56"
|
|
|
|
S = "${WORKDIR}/git"
|
|
|
|
inherit cmake
|
|
|
|
EXTRA_OECMAKE = "\
|
|
-DBUILD_CLAR=OFF \
|
|
-DCMAKE_BUILD_TYPE=RelWithDebInfo \
|
|
-DLIB_INSTALL_DIR=${libdir} \
|
|
-DREGEX_BACKEND='pcre2' \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native"
|