mirrors/buildroot
0
0
Fork 0
mirror of https://git.busybox.net/buildroot.git synced 2024-12-12 14:53:28 +08:00
Code Issues Packages Projects Releases Wiki Activity

package/slirp: security bump to version 4.3.1

Browse Source 
- Use an up to date fork (spice slirp is archived and has not been
  updated since 2012)
- Add COPYRIGHT as the license file
- BSD-4-Clause has been replaced by BSD-3-Clause since
  3bac39137a
  f9f6e69c4e
- Add hash file
- Switch to meson-package
- Fix multiple security vulnerabilities: CVE-2014-3640, CVE-2017-11434,
  CVE-2019-6778, CVE-2019-9824, CVE-2019-14378 and CVE-2020-10756

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Alistair Francis <alistair.francis@wdc.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Fabrice Fontaine 2020-11-07 19:52:55 +01:00 committed by Peter Korsgaard
parent 349cca4e9d
commit 97fcae8ddf
3 changed files with 16 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
package/slirp/Config.in
View File

@ -1,16 +1,10 @@
config BR2_PACKAGE_SLIRP
bool "slirp"
help
The Spice project aims to provide a complete open source
solution for interaction with virtualized desktop devices.
The Spice project deals with both the virtualized devices
and the front-end. Interaction between front-end and
back-end is done using VD-Interfaces.
libslirp is a user-mode networking library used by virtual
machines, containers or various tools.
This package implements the slirp-part for Spice. Slirp
emulates a PPP or SLIP connection over a normal terminal.
http://www.spice-space.org/
https://gitlab.freedesktop.org/slirp/libslirp/
NOTE:
This package has some history of a unique kind:
@ -21,5 +15,6 @@ config BR2_PACKAGE_SLIRP
- during that period, QEMU (Fabrice BELLARD) forked the code
and included it in QEMU
- and it was imported from this breed by the Spice project
around May 2009
- which is what we use here
around May 2009 which archived it in 2012
- So we switched to
https://gitlab.freedesktop.org/slirp/libslirp

3
package/slirp/slirp.hash Normal file
View File

@ -0,0 +1,3 @@
# Locally computed:
sha256 6b1641f04d41bc45f94018ac8d42d3c9f3ba0e463cbeacf5f26fe83fc050161e libslirp-v4.3.1.tar.bz2
sha256 b28aecf4796a6a22054167f0a976de13d9db335669d37afd2dc7ea4c335e1e13 COPYRIGHT

20
package/slirp/slirp.mk
View File

@ -4,18 +4,12 @@
#
################################################################################
# There's no tarball releases of slirp, so we use the git repo
# Also, there's no tag, so we use a random SHA1 (master's HEAD
# of today)
SLIRP_VERSION = 8c2da74c1385242f20799fec8c04f8378edc6550
SLIRP_SITE = git://anongit.freedesktop.org/spice/slirp
SLIRP_LICENSE = BSD-4-Clause, BSD-2-Clause
# Note: The license file 'COPYRIGHT' is missing from the sources,
# although some files refer to it.
SLIRP_VERSION = 4.3.1
SLIRP_SOURCE = libslirp-v$(SLIRP_VERSION).tar.bz2
SLIRP_SITE = \
https://gitlab.freedesktop.org/slirp/libslirp/-/archive/v$(SLIRP_VERSION)
SLIRP_LICENSE = BSD-3-Clause
SLIRP_LICENSE_FILES = COPYRIGHT
SLIRP_INSTALL_STAGING = YES
# As we're using the git tree, there's no ./configure,
# so we need to autoreconf.
SLIRP_AUTORECONF = YES
$(eval $(autotools-package))
$(eval $(meson-package))