Peter Marko c048c04101 libconfuse: patch CVE-2022-40320
Pick patch per [1] poiting to [2] pointing to [3].

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-40320
[2] https://github.com/libconfuse/libconfuse/issues/163
[3] d73777c2c3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00

16 lines
578 B
BlitzBasic

SUMMARY = "libConfuse is a configuration file parser library"
LICENSE = "ISC"
LIC_FILES_CHKSUM = "file://LICENSE;md5=42fa47330d4051cd219f7d99d023de3a"
SRC_URI = "https://github.com/libconfuse/libconfuse/releases/download/v${PV}/confuse-${PV}.tar.gz"
SRC_URI[sha256sum] = "3a59ded20bc652eaa8e6261ab46f7e483bc13dad79263c15af42ecbb329707b8"
SRC_URI += "file://0001-only-apply-search-path-logic-to-relative-pathnames.patch"
SRC_URI += "file://CVE-2022-40320.patch"
inherit autotools-brokensep pkgconfig gettext
S = "${WORKDIR}/confuse-${PV}"
BBCLASSEXTEND = "native nativesdk"