mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-08-14 13:44:52 +00:00
9375394805
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-5188 https://nvd.nist.gov/vuln/detail/CVE-2026-5392 https://nvd.nist.gov/vuln/detail/CVE-2026-5393 https://nvd.nist.gov/vuln/detail/CVE-2026-5447 https://nvd.nist.gov/vuln/detail/CVE-2026-5448 https://nvd.nist.gov/vuln/detail/CVE-2026-5460 https://nvd.nist.gov/vuln/detail/CVE-2026-5466 https://nvd.nist.gov/vuln/detail/CVE-2026-5479 https://nvd.nist.gov/vuln/detail/CVE-2026-5500 All of these CVEs are fixed in the current recipe version, however NVD tracks them without version. Each NVD advisory references the corresponding fix, and each of them are contained in 5.9.1. Mark all of them as patched explicitly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
72 lines
3.0 KiB
BlitzBasic
72 lines
3.0 KiB
BlitzBasic
SUMMARY = "wolfSSL Lightweight Embedded SSL/TLS Library"
|
|
DESCRIPTION = "wolfSSL, formerly CyaSSL, is a lightweight SSL library written \
|
|
in C and optimized for embedded and RTOS environments. It can \
|
|
be up to 20 times smaller than OpenSSL while still supporting \
|
|
a full TLS client and server, up to TLS 1.3"
|
|
HOMEPAGE = "https://www.wolfssl.com/products/wolfssl"
|
|
BUGTRACKER = "https://github.com/wolfssl/wolfssl/issues"
|
|
SECTION = "libs"
|
|
LICENSE = "GPL-3.0-only"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504"
|
|
|
|
PROVIDES += "cyassl"
|
|
RPROVIDES:${PN} = "cyassl"
|
|
|
|
SRC_URI = " \
|
|
git://github.com/wolfSSL/wolfssl.git;protocol=https;branch=master;tag=v${PV}-stable \
|
|
file://run-ptest \
|
|
"
|
|
|
|
SRCREV = "1d363f3adceba9d1478230ede476a37b0dcdef24"
|
|
|
|
|
|
inherit autotools ptest
|
|
|
|
EXTRA_OECONF += "--enable-certreq --enable-dtls --enable-opensslextra --enable-certext --enable-certgen"
|
|
|
|
PACKAGECONFIG ?= "reproducible-build"
|
|
|
|
PACKAGECONFIG[reproducible-build] = "--enable-reproducible-build,--disable-reproducible-build,"
|
|
BBCLASSEXTEND += "native nativesdk"
|
|
|
|
CFLAGS += '-fPIC -DCERT_REL_PREFIX=\\"./\\"'
|
|
|
|
RDEPENDS:${PN}-ptest += " bash"
|
|
|
|
do_install_ptest() {
|
|
# Prevent QA Error "package contains reference to TMPDIR [buildpaths]" for unit.test script
|
|
# Replace the occurences of ${B}/src with '${PTEST_PATH}'
|
|
sed -i 's|${B}/src|${PTEST_PATH}|g' ${B}/tests/unit.test
|
|
|
|
install -d ${D}${PTEST_PATH}/test
|
|
|
|
# create an empty folder examples, needed in wolfssl's tests/api.c to "Test loading path with no files"
|
|
install -d ${D}${PTEST_PATH}/examples
|
|
cp -rf ${B}/tests/. ${D}${PTEST_PATH}/test
|
|
cp -rf ${S}/certs ${D}${PTEST_PATH}
|
|
cp -rf ${S}/tests ${D}${PTEST_PATH}
|
|
}
|
|
|
|
CVE_STATUS[CVE-2026-0819] = "fixed-version: fixed in 5.9.0"
|
|
CVE_STATUS[CVE-2026-2646] = "fixed-version: fixed in 5.9.0"
|
|
CVE_STATUS[CVE-2026-3503] = "fixed-version: fixed in 5.9.0"
|
|
CVE_STATUS[CVE-2026-3548] = "fixed-version: fixed in 5.9.0"
|
|
CVE_STATUS[CVE-2026-5188] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5194] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5263] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5264] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5392] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5393] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5446] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5447] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5448] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5460] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5466] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5479] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5500] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5503] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5504] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5507] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5772] = "fixed-version: fixed in 5.9.1"
|
|
CVE_STATUS[CVE-2026-5778] = "fixed-version: fixed in 5.9.1"
|