mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-19 16:40:46 -09:00
c8387e73ee
Fixes CVE-2023-30630: Dmidecode before 3.5 allows -dump-bin to overwrite a
local file: https://nvd.nist.gov/vuln/detail/CVE-2023-30630
For change log, see:
https://git.savannah.gnu.org/cgit/dmidecode.git/tree/NEWS?h=dmidecode-3-5
Note: this patch also adds a comment about pgp signature verification in
the hash file.
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit c97f27283b)
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
23 lines
678 B
Makefile
23 lines
678 B
Makefile
################################################################################
|
|
#
|
|
# dmidecode
|
|
#
|
|
################################################################################
|
|
|
|
DMIDECODE_VERSION = 3.5
|
|
DMIDECODE_SOURCE = dmidecode-$(DMIDECODE_VERSION).tar.xz
|
|
DMIDECODE_SITE = http://download.savannah.gnu.org/releases/dmidecode
|
|
DMIDECODE_LICENSE = GPL-2.0+
|
|
DMIDECODE_LICENSE_FILES = LICENSE
|
|
DMIDECODE_SELINUX_MODULES = dmidecode
|
|
|
|
define DMIDECODE_BUILD_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) $(TARGET_CONFIGURE_OPTS)
|
|
endef
|
|
|
|
define DMIDECODE_INSTALL_TARGET_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) prefix=/usr DESTDIR=$(TARGET_DIR) install
|
|
endef
|
|
|
|
$(eval $(generic-package))
|