diff options
author | Alexander Kanavin <alex.kanavin@gmail.com> | 2020-06-08 09:46:41 +0200 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2020-08-07 21:20:21 +0100 |
commit | ed1b6e97db51a3ba9b7f022564f5e5e54ea7032d (patch) | |
tree | 6b482081ad8cf1e3d029b8d2214fb78d857e8c34 /meta/recipes-support/gnutls/gnutls_3.6.14.bb | |
parent | f4b6c77ac7d2037d64546543ab7ecd65aadbc3bc (diff) | |
download | poky-ed1b6e97db51a3ba9b7f022564f5e5e54ea7032d.tar.gz |
gnutls: upgrade 3.6.13 -> 3.6.14
Security and bug fix release on the stable 3.6.x branch
Fixes CVE-2020-13777
Detailed list of changes at:
https://lists.gnupg.org/pipermail/gnutls-help/2020-June/004648.html
(From OE-Core rev: 79b821161275cad5d9c54078e65293109184ad65)
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit cd88c81804a4a52b9875f2244c9f35911539be96)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-support/gnutls/gnutls_3.6.14.bb')
-rw-r--r-- | meta/recipes-support/gnutls/gnutls_3.6.14.bb | 66 |
1 files changed, 66 insertions, 0 deletions
diff --git a/meta/recipes-support/gnutls/gnutls_3.6.14.bb b/meta/recipes-support/gnutls/gnutls_3.6.14.bb new file mode 100644 index 0000000000..a285e5a1f1 --- /dev/null +++ b/meta/recipes-support/gnutls/gnutls_3.6.14.bb | |||
@@ -0,0 +1,66 @@ | |||
1 | SUMMARY = "GNU Transport Layer Security Library" | ||
2 | HOMEPAGE = "http://www.gnu.org/software/gnutls/" | ||
3 | BUGTRACKER = "https://savannah.gnu.org/support/?group=gnutls" | ||
4 | |||
5 | LICENSE = "GPLv3+ & LGPLv2.1+" | ||
6 | LICENSE_${PN} = "LGPLv2.1+" | ||
7 | LICENSE_${PN}-xx = "LGPLv2.1+" | ||
8 | LICENSE_${PN}-bin = "GPLv3+" | ||
9 | LICENSE_${PN}-openssl = "GPLv3+" | ||
10 | |||
11 | LIC_FILES_CHKSUM = "file://LICENSE;md5=71391c8e0c1cfe68077e7fce3b586283 \ | ||
12 | file://doc/COPYING;md5=c678957b0c8e964aa6c70fd77641a71e \ | ||
13 | file://doc/COPYING.LESSER;md5=a6f89e2100d9b6cdffcea4f398e37343" | ||
14 | |||
15 | DEPENDS = "nettle gmp virtual/libiconv libunistring" | ||
16 | DEPENDS_append_libc-musl = " argp-standalone" | ||
17 | |||
18 | SHRT_VER = "${@d.getVar('PV').split('.')[0]}.${@d.getVar('PV').split('.')[1]}" | ||
19 | |||
20 | SRC_URI = "https://www.gnupg.org/ftp/gcrypt/gnutls/v${SHRT_VER}/gnutls-${PV}.tar.xz \ | ||
21 | file://arm_eabi.patch \ | ||
22 | " | ||
23 | |||
24 | SRC_URI[sha256sum] = "5630751adec7025b8ef955af4d141d00d252a985769f51b4059e5affa3d39d63" | ||
25 | |||
26 | inherit autotools texinfo pkgconfig gettext lib_package gtk-doc | ||
27 | |||
28 | PACKAGECONFIG ??= "libidn" | ||
29 | |||
30 | # You must also have CONFIG_SECCOMP enabled in the kernel for | ||
31 | # seccomp to work. | ||
32 | PACKAGECONFIG[seccomp] = "ac_cv_libseccomp=yes,ac_cv_libseccomp=no,libseccomp" | ||
33 | PACKAGECONFIG[libidn] = "--with-idn,--without-idn,libidn2" | ||
34 | PACKAGECONFIG[libtasn1] = "--with-included-libtasn1=no,--with-included-libtasn1,libtasn1" | ||
35 | PACKAGECONFIG[p11-kit] = "--with-p11-kit,--without-p11-kit,p11-kit" | ||
36 | PACKAGECONFIG[tpm] = "--with-tpm,--without-tpm,trousers" | ||
37 | |||
38 | EXTRA_OECONF = " \ | ||
39 | --enable-doc \ | ||
40 | --disable-libdane \ | ||
41 | --disable-guile \ | ||
42 | --disable-rpath \ | ||
43 | --enable-local-libopts \ | ||
44 | --enable-openssl-compatibility \ | ||
45 | --with-libpthread-prefix=${STAGING_DIR_HOST}${prefix} \ | ||
46 | --with-default-trust-store-file=${sysconfdir}/ssl/certs/ca-certificates.crt \ | ||
47 | " | ||
48 | |||
49 | # Otherwise the tools try and use HOSTTOOLS_DIR/bash as a shell. | ||
50 | export POSIX_SHELL="${base_bindir}/sh" | ||
51 | |||
52 | LDFLAGS_append_libc-musl = " -largp" | ||
53 | |||
54 | do_configure_prepend() { | ||
55 | for dir in . lib; do | ||
56 | rm -f ${dir}/aclocal.m4 ${dir}/m4/libtool.m4 ${dir}/m4/lt*.m4 | ||
57 | done | ||
58 | } | ||
59 | |||
60 | PACKAGES =+ "${PN}-openssl ${PN}-xx" | ||
61 | |||
62 | FILES_${PN}-dev += "${bindir}/gnutls-cli-debug" | ||
63 | FILES_${PN}-openssl = "${libdir}/libgnutls-openssl.so.*" | ||
64 | FILES_${PN}-xx = "${libdir}/libgnutlsxx.so.*" | ||
65 | |||
66 | BBCLASSEXTEND = "native nativesdk" | ||