mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-03 07:21:45 -09:00
f2769d89f1
Fixes the following security vulnerabilities:
CVE-2024-52531: GNOME libsoup before 3.6.1 allows a buffer overflow in
applications that perform conversion to UTF-8 in
soup_header_parse_param_list_strict. Input received over the network cannot
trigger this.
https://www.cve.org/CVERecord?id=CVE-2024-52531
CVE-2024-52532: GNOME libsoup before 3.6.1 has an infinite loop, and memory
consumption. during the reading of certain patterns of WebSocket data from
clients.
https://www.cve.org/CVERecord?id=CVE-2024-52532
Changelog: https://gitlab.gnome.org/GNOME/libsoup/-/blob/3.6.1/NEWS
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b9120736a7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
57 lines
1.4 KiB
Makefile
57 lines
1.4 KiB
Makefile
################################################################################
|
|
#
|
|
# libsoup3
|
|
#
|
|
################################################################################
|
|
|
|
LIBSOUP3_VERSION_MAJOR = 3.6
|
|
LIBSOUP3_VERSION = $(LIBSOUP3_VERSION_MAJOR).1
|
|
LIBSOUP3_SOURCE = libsoup-$(LIBSOUP3_VERSION).tar.xz
|
|
LIBSOUP3_SITE = https://download.gnome.org/sources/libsoup/$(LIBSOUP3_VERSION_MAJOR)
|
|
LIBSOUP3_LICENSE = LGPL-2.0+
|
|
LIBSOUP3_LICENSE_FILES = COPYING
|
|
LIBSOUP3_CPE_ID_VENDOR = gnome
|
|
LIBSOUP3_INSTALL_STAGING = YES
|
|
LIBSOUP3_DEPENDENCIES = \
|
|
host-intltool \
|
|
host-libglib2 \
|
|
host-pkgconf \
|
|
libglib2 \
|
|
libpsl \
|
|
nghttp2 \
|
|
sqlite \
|
|
$(TARGET_NLS_DEPENDENCIES)
|
|
|
|
LIBSOUP3_LDFLAGS = $(TARGET_LDFLAGS) $(TARGET_NLS_LIBS)
|
|
|
|
LIBSOUP3_CONF_OPTS = \
|
|
-Dntlm=disabled \
|
|
-Dsysprof=disabled \
|
|
-Dtests=false \
|
|
-Dtls_check=false
|
|
|
|
ifeq ($(BR2_PACKAGE_BROTLI),y)
|
|
LIBSOUP3_CONF_OPTS += -Dbrotli=enabled
|
|
LIBSOUP3_DEPENDENCIES += brotli
|
|
else
|
|
LIBSOUP3_CONF_OPTS += -Dbrotli=disabled
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_GOBJECT_INTROSPECTION),y)
|
|
LIBSOUP3_CONF_OPTS += -Dintrospection=enabled -Dvapi=enabled
|
|
LIBSOUP3_DEPENDENCIES += host-vala gobject-introspection
|
|
else
|
|
LIBSOUP3_CONF_OPTS += -Dintrospection=disabled -Dvapi=disabled
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBKRB5),y)
|
|
LIBSOUP3_CONF_OPTS += \
|
|
-Dgssapi=enabled \
|
|
-Dkrb5_config=$(STAGING_DIR)/usr/bin/krb5-config
|
|
LIBSOUP3_DEPENDENCIES += libkrb5
|
|
else
|
|
LIBSOUP3_CONF_OPTS += -Dgssapi=disabled
|
|
endif
|
|
|
|
$(eval $(meson-package))
|