mirror of
git://git.yoctoproject.org/poky
synced 2026-10-01 08:00:11 +00:00
242829e5b6
* CVE-2017-7961 The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. CVE: CVE-2017-7961 Ref: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7961 (From OE-Core rev: 9b321cf141c3fa18d5b85f17ffe1710f4555ca49) Signed-off-by: Sinan Kaya <okaya@kernel.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
24 lines
907 B
BlitzBasic
24 lines
907 B
BlitzBasic
SUMMARY = "Cascading Style Sheet (CSS) parsing and manipulation toolkit"
|
|
HOMEPAGE = "http://www.gnome.org/"
|
|
BUGTRACKER = "https://bugzilla.gnome.org/"
|
|
|
|
LICENSE = "LGPLv2 & LGPLv2.1"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=55ca817ccb7d5b5b66355690e9abc605 \
|
|
file://src/cr-rgb.c;endline=22;md5=31d5f0944d556c8589d04ea6055fcc66 \
|
|
file://tests/cr-test-utils.c;endline=21;md5=2382c27934cae1d3792fcb17a6142c4e"
|
|
|
|
SECTION = "x11/utils"
|
|
DEPENDS = "glib-2.0 libxml2 zlib"
|
|
BBCLASSEXTEND = "native nativesdk"
|
|
EXTRA_OECONF += "--enable-Bsymbolic=auto"
|
|
|
|
BINCONFIG = "${bindir}/croco-0.6-config"
|
|
|
|
inherit gnomebase gtk-doc binconfig-disabled
|
|
|
|
SRC_URI += "file://CVE-2017-7960.patch \
|
|
file://CVE-2017-7961.patch "
|
|
|
|
SRC_URI[archive.md5sum] = "bc0984fce078ba2ce29f9500c6b9ddce"
|
|
SRC_URI[archive.sha256sum] = "ddc4b5546c9fb4280a5017e2707fbd4839034ed1aba5b7d4372212f34f84f860"
|