mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 07:51:59 -09:00
94013c3a95
Fixes the following vulnerabilities: CVE-2026-68546: Heap out-of-bounds write in RemoteIo when reading from a malicious remote server (WebReady/Curl builds) https://github.com/Exiv2/exiv2/security/advisories/GHSA-3695-mjv8-3r52 CVE-2026-68547: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files https://github.com/Exiv2/exiv2/security/advisories/GHSA-jcgh-p9v3-pw6j CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic https://github.com/Exiv2/exiv2/security/advisories/GHSA-hxph-pv7w-8649 Out-of-bounds write in RemoteIo::mmap https://github.com/Exiv2/exiv2/security/advisories/GHSA-vg6c-9f6h-4x5q Out of bounds write in http.cpp https://github.com/Exiv2/exiv2/security/advisories/GHSA-9v3x-mhg4-wwv2 Infinite loop in QuickTimeVideo::userDataDecoder https://github.com/Exiv2/exiv2/security/advisories/GHSA-fgw8-p7pr-37cp For more details, see the announcement: https://www.openwall.com/lists/oss-security/2026/08/30/1 Notice: the RemoteIo-related vulnerabilities are not applicable for Buildroot as exiv2 is not built with libcurl support. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
61 lines
1.4 KiB
Makefile
61 lines
1.4 KiB
Makefile
################################################################################
|
|
#
|
|
# exiv2
|
|
#
|
|
################################################################################
|
|
|
|
EXIV2_VERSION = 0.28.9
|
|
EXIV2_SITE = $(call github,Exiv2,exiv2,v$(EXIV2_VERSION))
|
|
EXIV2_INSTALL_STAGING = YES
|
|
EXIV2_LICENSE = GPL-2.0+
|
|
EXIV2_LICENSE_FILES = COPYING
|
|
EXIV2_CPE_ID_VENDOR = exiv2
|
|
|
|
EXIV2_CONF_OPTS += \
|
|
-DBUILD_WITH_STACK_PROTECTOR=OFF \
|
|
-DEXIV2_BUILD_SAMPLES=OFF
|
|
|
|
ifeq ($(BR2_PACKAGE_EXIV2_BROTLI),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_BROTLI=ON
|
|
EXIV2_DEPENDENCIES += brotli
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_BROTLI=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_EXIV2_INIH),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_INIH=ON
|
|
EXIV2_DEPENDENCIES += inih
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_INIH=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_EXIV2_LENSDATA),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_LENSDATA=ON
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_LENSDATA=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_EXIV2_PNG),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_PNG=ON
|
|
EXIV2_DEPENDENCIES += zlib
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_PNG=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_EXIV2_XMP),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_XMP=ON
|
|
EXIV2_DEPENDENCIES += expat
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_XMP=OFF
|
|
endif
|
|
|
|
EXIV2_DEPENDENCIES += $(TARGET_NLS_DEPENDENCIES)
|
|
|
|
ifeq ($(BR2_SYSTEM_ENABLE_NLS),y)
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_NLS=ON
|
|
else
|
|
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_NLS=OFF
|
|
endif
|
|
|
|
$(eval $(cmake-package))
|