deepcrayon
/
buildroot
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

package/libcroco: drop package 

Drop libcrococo as it is affected by several security issues such as
CVE-2020-12825 which will never be fixed as this project has been
archived:
https://gitlab.gnome.org/Archive/libcroco/-/issues/8

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020.11.x
Fabrice Fontaine 2020-10-16 07:52:48 +02:00 committed by Thomas Petazzoni
parent b6b5981f70
commit 6fe9994c89
5 changed files with 8 additions and 47 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Config.in.legacy
View File

@ -146,6 +146,14 @@ endif
comment "Legacy options removed in 2020.11"
config BR2_PACKAGE_LIBCROCO
bool "libcroco package was removed"
select BR2_LEGACY
help
This package has been removed as it is affected by several
security issues such as CVE-2020-12825 which will never be
fixed as libcroco has been archived.
config BR2_PACKAGE_BELLAGIO
bool "bellagio package was removed"
select BR2_LEGACY

1
package/Config.in
View File

@ -1864,7 +1864,6 @@ menu "Other"
source "package/libclc/Config.in"
source "package/libcofi/Config.in"
source "package/libcorrect/Config.in"
source "package/libcroco/Config.in"
source "package/libcrossguid/Config.in"
source "package/libcsv/Config.in"
source "package/libdaemon/Config.in"

20
package/libcroco/Config.in
View File

@ -1,20 +0,0 @@
config BR2_PACKAGE_LIBCROCO
bool "libcroco"
depends on BR2_USE_WCHAR # glib2
depends on BR2_TOOLCHAIN_HAS_THREADS # glib2
depends on BR2_USE_MMU # glib2
select BR2_PACKAGE_LIBXML2
select BR2_PACKAGE_LIBGLIB2
help
Libcroco is a standalone css2 parsing and manipulation
library. The parser provides a low level event driven SAC
like api and a css object model like api.
Libcroco provides a CSS2 selection engine and an
experimental xml/css rendering engine.
https://github.com/GNOME/libcroco
comment "libcroco needs a toolchain w/ wchar, threads"
depends on BR2_USE_MMU
depends on !BR2_USE_WCHAR || !BR2_TOOLCHAIN_HAS_THREADS

5
package/libcroco/libcroco.hash
View File

@ -1,5 +0,0 @@
# From http://ftp.acc.umu.se/pub/gnome/sources/libcroco/0.6/libcroco-0.6.13.sha256sum
sha256 767ec234ae7aa684695b3a735548224888132e063f92db585759b422570621d4 libcroco-0.6.13.tar.xz
# Hash for license file:
sha256 94b03f1a60a7fd5007149530626a895a6ef5a8b9342abfd56860c5f3956f5d23 COPYING.LIB

21
package/libcroco/libcroco.mk
View File

@ -1,21 +0,0 @@
################################################################################
#
# libcroco
#
################################################################################
LIBCROCO_VERSION_MAJOR = 0.6
LIBCROCO_VERSION = $(LIBCROCO_VERSION_MAJOR).13
LIBCROCO_SITE = http://ftp.gnome.org/pub/gnome/sources/libcroco/$(LIBCROCO_VERSION_MAJOR)
LIBCROCO_SOURCE = libcroco-$(LIBCROCO_VERSION).tar.xz
LIBCROCO_INSTALL_STAGING = YES
LIBCROCO_DEPENDENCIES = host-pkgconf libglib2 libxml2
HOST_LIBCROCO_DEPENDENCIES = host-pkgconf host-libglib2 host-libxml2
LIBCROCO_CONFIG_SCRIPTS = croco-$(LIBCROCO_VERSION_MAJOR)-config
# NEWS states that it's only LGPL
# Source code says v2.1+ even though COPYING.LIB is v2
LIBCROCO_LICENSE = LGPL-2.1+
LIBCROCO_LICENSE_FILES = COPYING.LIB
$(eval $(autotools-package))
$(eval $(host-autotools-package))