Gyorgy Sarvari c789281ecf
tinyproxy: patch CVE-2026-3945
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3945

Backport the patches which are references by the NVD avisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-06 10:03:48 -07:00

68 lines
2.2 KiB
BlitzBasic

SUMMARY = "Lightweight http(s) proxy daemon"
HOMEPAGE = "https://tinyproxy.github.io/"
LICENSE = "GPL-2.0-only"
LIC_FILES_CHKSUM = "file://COPYING;md5=751419260aa954499f7abaabaa882bbe"
SRC_URI = "https://github.com/${BPN}/${BPN}/releases/download/${PV}/${BP}.tar.gz \
file://tinyproxy.service \
file://tinyproxy.conf \
file://run-ptest \
file://CVE-2026-3945-1.patch \
file://CVE-2026-3945-2.patch \
"
SRC_URI[sha256sum] = "9bcf46db1a2375ff3e3d27a41982f1efec4706cce8899ff9f33323a8218f7592"
UPSTREAM_CHECK_URI = "https://github.com/tinyproxy/tinyproxy/releases"
EXTRA_OECONF += " \
--enable-filter \
--enable-transparent \
--enable-reverse \
--enable-upstream \
--enable-xtinyproxy \
--enable-manpage_support=no \
"
inherit autotools systemd useradd ptest
#User specific
USERADD_PACKAGES = "${PN}"
USERADD_PARAM:${PN} = "--system --home /dev/null \
--no-user-group --gid nogroup tinyproxy"
SYSTEMD_PACKAGES += "${BPN}"
SYSTEMD_SERVICE:${PN} = "tinyproxy.service"
SYSTEMD_AUTO_ENABLE:${PN} = "enable"
do_install:append() {
if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
install -d ${D}${systemd_system_unitdir}
install -m 0644 ${UNPACKDIR}/tinyproxy.service ${D}${systemd_system_unitdir}
fi
install -m 0644 ${UNPACKDIR}/tinyproxy.conf ${D}${sysconfdir}/tinyproxy.conf
}
do_install_ptest() {
install -d ${D}${PTEST_PATH}/tests/scripts
install -d ${D}${PTEST_PATH}/data/templates
install ${S}/tests/scripts/*.sh ${D}${PTEST_PATH}/tests/scripts
install ${S}/tests/scripts/*.pl ${D}${PTEST_PATH}/tests/scripts
install -m 0644 ${S}/data/templates/*.html ${D}${PTEST_PATH}/data/templates/
# test the installed binary, not the one that was just compiled in the src folder
sed -i 's,TINYPROXY_BIN=.*,TINYPROXY_BIN=tinyproxy,' ${D}${PTEST_PATH}/tests/scripts/run_tests.sh
}
RDEPENDS:${PN}-ptest += "\
perl \
perl-module-cwd \
perl-module-encode-encoding \
perl-module-file-spec \
perl-module-getopt-long \
perl-module-io-socket \
perl-module-io-socket-inet \
perl-module-pod-text \
perl-module-posix \
procps \
"