mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-11-02 23:01:21 +00:00
nikhil
31d0f02673
A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter Signed-off-by: Nikhil R <nikhil.r@kpit.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
50 lines
1.5 KiB
BlitzBasic
50 lines
1.5 KiB
BlitzBasic
SUMMARY = "Multiplatform C library implementing the SSHv2 and SSHv1 protocol"
|
|
HOMEPAGE = "http://www.libssh.org"
|
|
SECTION = "libs"
|
|
LICENSE = "LGPL-2.1-only"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=dabb4958b830e5df11d2b0ed8ea255a0"
|
|
|
|
DEPENDS = "zlib openssl"
|
|
|
|
SRC_URI = "git://git.libssh.org/projects/libssh.git;protocol=https;branch=stable-0.8 \
|
|
file://CVE-2020-16135.patch \
|
|
file://CVE-2023-48795-1.patch \
|
|
file://CVE-2023-48795-2.patch \
|
|
file://CVE-2023-48795-3.patch \
|
|
file://0001-config-Move-common-parser-functions-to-config_parser.patch \
|
|
file://001_CVE-2023-6004.patch \
|
|
file://002_CVE-2023-6004.patch \
|
|
file://003_CVE-2023-6004.patch \
|
|
file://004_CVE-2023-6004.patch \
|
|
file://005_CVE-2023-6004.patch \
|
|
file://006_CVE-2023-6004.patch \
|
|
"
|
|
SRCREV = "04685a74df9ce1db1bc116a83a0da78b4f4fa1f8"
|
|
|
|
S = "${WORKDIR}/git"
|
|
|
|
inherit cmake
|
|
|
|
PACKAGECONFIG ??= "gcrypt"
|
|
PACKAGECONFIG[gssapi] = "-DWITH_GSSAPI=1, -DWITH_GSSAPI=0, krb5, "
|
|
PACKAGECONFIG[gcrypt] = "-DWITH_GCRYPT=1, -DWITH_GCRYPT=0, libgcrypt, "
|
|
|
|
ARM_INSTRUCTION_SET:armv5 = "arm"
|
|
|
|
EXTRA_OECMAKE = " \
|
|
-DWITH_PCAP=1 \
|
|
-DWITH_SFTP=1 \
|
|
-DWITH_ZLIB=1 \
|
|
-DLIB_SUFFIX=${@d.getVar('baselib').replace('lib', '')} \
|
|
"
|
|
|
|
do_configure:prepend () {
|
|
# Disable building of examples
|
|
sed -i -e '/add_subdirectory(examples)/s/^/#DONOTWANT/' ${S}/CMakeLists.txt \
|
|
|| bbfatal "Failed to disable examples"
|
|
}
|
|
|
|
TOOLCHAIN = "gcc"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|