Ninette Adhikari 8d733ee01b st: Update status for CVE-2017-16224
The recipe used in the meta-openembedded is a different st package compared to the one which has the CVE issue.
Package used in meta-embedded: https://st.suckless.org/
Package with CVE issue: https://www.npmjs.com/package/st
No action required.

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit eb9c7bb5645b6a3bcf7c40e1a83c8f4c3b020fa5)

Reworked for Kirkstone (CVE_STATUS -> CVE_CHECK_IGNORE)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-17 10:51:27 +02:00

39 lines
1.1 KiB
BlitzBasic

SECTION = "shadow"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE;md5=04c3ca13a702147c62db90f556c5b3ca"
SRC_URI = "http://dl.suckless.org/${BPN}/${BP}.tar.gz"
inherit pkgconfig features_check
REQUIRED_DISTRO_FEATURES = "x11"
SRC_URI[sha256sum] = "ea6832203ed02ff74182bcb8adaa9ec454c8f989e79232cb859665e2f544ab37"
DEPENDS += "libx11 libxft fontconfig ncurses-native"
RDEPENDS:${PN} += "libx11-locale"
do_compile() {
make INCS='-I. `pkg-config --cflags x11 fontconfig xft`' LIBS='-lm -lutil `pkg-config --libs x11 fontconfig xft`'
}
do_install() {
make install DESTDIR=${D} PREFIX=/usr TERMINFO=${D}${datadir}/terminfo
}
FILES:${PN} += " \
${datadir}/terminfo \
"
inherit update-alternatives
ALTERNATIVE_PRIORITY = "50"
ALTERNATIVE:${PN} = "st st-256color"
ALTERNATIVE_LINK_NAME[st] = "${datadir}/terminfo/s/st"
ALTERNATIVE_LINK_NAME[st-256color] = "${datadir}/terminfo/s/st-256color"
#cpe-incorrect: The recipe used in the meta-openembedded is a different st package compared to the one which has the CVE issue.
CVE_CHECK_IGNORE += "CVE-2017-16224"