7e0f81a9f6
Fixes CVE-2020-27347: The function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output. For details, see: https://www.openwall.com/lists/oss-security/2020/11/05/3 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
25 lines
828 B
Makefile
25 lines
828 B
Makefile
################################################################################
|
|
#
|
|
# tmux
|
|
#
|
|
################################################################################
|
|
|
|
TMUX_VERSION = 2.9a
|
|
TMUX_SITE = https://github.com/tmux/tmux/releases/download/$(TMUX_VERSION)
|
|
TMUX_LICENSE = ISC
|
|
TMUX_LICENSE_FILES = COPYING
|
|
TMUX_DEPENDENCIES = libevent ncurses host-pkgconf
|
|
|
|
# 0001-Do-not-write-after-the-end-of-the-array-and-overwrit.patch
|
|
TMUX_IGNORE_CVES += CVE-2020-27347
|
|
|
|
# Add /usr/bin/tmux to /etc/shells otherwise some login tools like dropbear
|
|
# can reject the user connection. See man shells.
|
|
define TMUX_ADD_TMUX_TO_SHELLS
|
|
grep -qsE '^/usr/bin/tmux$$' $(TARGET_DIR)/etc/shells \
|
|
|| echo "/usr/bin/tmux" >> $(TARGET_DIR)/etc/shells
|
|
endef
|
|
TMUX_TARGET_FINALIZE_HOOKS += TMUX_ADD_TMUX_TO_SHELLS
|
|
|
|
$(eval $(autotools-package))
|