buildroot/package/libical/libical.mk
Fabrice Fontaine 69b51259a2 package/libical: fix CVE-2016-9584
libical allows remote attackers to cause a denial of service
(use-after-free) and possibly read heap memory via a crafted ics file.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-28 14:41:28 +01:00

23 lines
757 B
Makefile

################################################################################
#
# libical
#
################################################################################
LIBICAL_VERSION = 1.0.1
LIBICAL_SITE = https://github.com/libical/libical/releases/download/v$(LIBICAL_VERSION)
LIBICAL_INSTALL_STAGING = YES
LIBICAL_LICENSE = MPL-1.0 or LGPL-2.1
LIBICAL_LICENSE_FILES = LICENSE
# 0002-icaltypes-c-icalreqstattype_from_string-copy-the-reqstattype.patch
LIBICAL_IGNORE_CVES += CVE-2016-9584
# building without this option is broken, it is used by
# Gentoo/alpinelinux as well
LIBICAL_CONF_OPTS = -DSHARED_ONLY=true
# never build time zone info, always use system's tzinfo
LIBICAL_CONF_OPTS += -DUSE_BUILTIN_TZDATA=false
$(eval $(cmake-package))