mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-19 16:40:46 -09:00
0fe9a26ca3
A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0
and older releases. This issue may allow an attacker to cause a denial
of service or have other unspecified impact via control over malloc.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 810c0eecf1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
18 lines
520 B
Makefile
18 lines
520 B
Makefile
################################################################################
|
|
#
|
|
# shapelib
|
|
#
|
|
################################################################################
|
|
|
|
SHAPELIB_VERSION = 1.5.0
|
|
SHAPELIB_SITE = http://download.osgeo.org/shapelib
|
|
SHAPELIB_LICENSE = MIT or LGPL-2.0
|
|
SHAPELIB_LICENSE_FILES = web/license.html COPYING
|
|
SHAPELIB_CPE_ID_VENDOR = osgeo
|
|
SHAPELIB_INSTALL_STAGING = YES
|
|
|
|
# 0001-Remove-double-free-in-contrib-shpsrt.patch
|
|
SHAPELIB_IGNORE_CVES += CVE-2022-0699
|
|
|
|
$(eval $(autotools-package))
|