diff options
author | Richard Purdie <richard.purdie@linuxfoundation.org> | 2022-02-28 11:38:39 +0800 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2022-03-10 16:39:45 +0000 |
commit | 8fc32ee149727c2c20c8fa26ef2620f31c0e6e96 (patch) | |
tree | 034e21def915a17ff943fba4fe997f2fae2dcba4 /meta/recipes-support/libgcrypt/libgcrypt_1.9.4.bb | |
parent | f8d05252d1f99c49208e07133d8534fab70af37f (diff) | |
download | poky-8fc32ee149727c2c20c8fa26ef2620f31c0e6e96.tar.gz |
libgcrypt: Upgrade 1.9.3 -> 1.9.4
Includes a fix for CVE-2021-40528.
(From OE-Core rev: 24664297abd3844902fa40c21e4e975d89f40383)
(From OE-Core rev: 11b20e30251f11d5a35be548be51c937565260f8)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-support/libgcrypt/libgcrypt_1.9.4.bb')
-rw-r--r-- | meta/recipes-support/libgcrypt/libgcrypt_1.9.4.bb | 61 |
1 files changed, 61 insertions, 0 deletions
diff --git a/meta/recipes-support/libgcrypt/libgcrypt_1.9.4.bb b/meta/recipes-support/libgcrypt/libgcrypt_1.9.4.bb new file mode 100644 index 0000000000..c212d02651 --- /dev/null +++ b/meta/recipes-support/libgcrypt/libgcrypt_1.9.4.bb | |||
@@ -0,0 +1,61 @@ | |||
1 | SUMMARY = "General purpose cryptographic library based on the code from GnuPG" | ||
2 | DESCRIPTION = "A cryptography library developed as a separated module of GnuPG. \ | ||
3 | It can also be used independently of GnuPG, but depends on its error-reporting \ | ||
4 | library Libgpg-error." | ||
5 | HOMEPAGE = "http://directory.fsf.org/project/libgcrypt/" | ||
6 | BUGTRACKER = "https://bugs.g10code.com/gnupg/index" | ||
7 | SECTION = "libs" | ||
8 | |||
9 | # helper program gcryptrnd and getrandom are under GPL, rest LGPL | ||
10 | LICENSE = "GPLv2+ & LGPLv2.1+ & GPLv3+" | ||
11 | LICENSE_${PN} = "LGPLv2.1+" | ||
12 | LICENSE_${PN}-dev = "GPLv2+ & LGPLv2.1+" | ||
13 | LICENSE_dumpsexp-dev = "GPLv3+" | ||
14 | |||
15 | LIC_FILES_CHKSUM = "file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f \ | ||
16 | file://COPYING.LIB;md5=bbb461211a33b134d42ed5ee802b37ff \ | ||
17 | file://LICENSES;md5=42fa35a25e138166cc40588387f9159d \ | ||
18 | " | ||
19 | |||
20 | DEPENDS = "libgpg-error" | ||
21 | |||
22 | UPSTREAM_CHECK_URI = "https://gnupg.org/download/index.html" | ||
23 | SRC_URI = "${GNUPG_MIRROR}/libgcrypt/libgcrypt-${PV}.tar.bz2 \ | ||
24 | file://0001-libgcrypt-fix-m4-file-for-oe-core.patch \ | ||
25 | file://0003-tests-bench-slope.c-workaround-ICE-failure-on-mips-w.patch \ | ||
26 | file://0002-libgcrypt-fix-building-error-with-O2-in-sysroot-path.patch \ | ||
27 | file://0004-tests-Makefile.am-fix-undefined-reference-to-pthread.patch \ | ||
28 | file://0001-Makefile.am-add-a-missing-space.patch \ | ||
29 | " | ||
30 | SRC_URI[sha256sum] = "ea849c83a72454e3ed4267697e8ca03390aee972ab421e7df69dfe42b65caaf7" | ||
31 | |||
32 | # Below whitelisted CVEs are disputed and not affecting crypto libraries for any distro. | ||
33 | CVE_CHECK_WHITELIST += "CVE-2018-12433 CVE-2018-12438" | ||
34 | |||
35 | BINCONFIG = "${bindir}/libgcrypt-config" | ||
36 | |||
37 | inherit autotools texinfo binconfig-disabled pkgconfig | ||
38 | |||
39 | EXTRA_OECONF = "--disable-asm" | ||
40 | EXTRA_OEMAKE_class-target = "LIBTOOLFLAGS='--tag=CC'" | ||
41 | |||
42 | PACKAGECONFIG ??= "capabilities" | ||
43 | PACKAGECONFIG[capabilities] = "--with-capabilities,--without-capabilities,libcap" | ||
44 | |||
45 | do_configure_prepend () { | ||
46 | # Else this could be used in preference to the one in aclocal-copy | ||
47 | rm -f ${S}/m4/gpg-error.m4 | ||
48 | } | ||
49 | |||
50 | # libgcrypt.pc is added locally and thus installed here | ||
51 | do_install_append() { | ||
52 | install -d ${D}/${libdir}/pkgconfig | ||
53 | install -m 0644 ${B}/src/libgcrypt.pc ${D}/${libdir}/pkgconfig/ | ||
54 | } | ||
55 | |||
56 | PACKAGES =+ "dumpsexp-dev" | ||
57 | |||
58 | FILES_${PN}-dev += "${bindir}/hmac256" | ||
59 | FILES_dumpsexp-dev += "${bindir}/dumpsexp" | ||
60 | |||
61 | BBCLASSEXTEND = "native nativesdk" | ||