mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-27 07:57:27 +00:00
Siddharth Doshi
366bac39bd
Upstream-Status: Backport from [https://git.savannah.gnu.org/cgit/nano.git/commit/?id=5e7a3c2e7e118c7f12d5dfda9f9140f638976aa2] CVE's Fixed: CVE-2024-5742 nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
25 lines
796 B
BlitzBasic
25 lines
796 B
BlitzBasic
SUMMARY = "Small and friendly console text editor"
|
|
DESCRIPTION = "GNU nano (Nano's ANOther editor, or \
|
|
Not ANOther editor) is an enhanced clone of the \
|
|
Pico text editor."
|
|
HOMEPAGE = "http://www.nano-editor.org/"
|
|
SECTION = "console/utils"
|
|
LICENSE = "GPL-3.0-only"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=f27defe1e96c2e1ecd4e0c9be8967949"
|
|
|
|
DEPENDS = "ncurses file"
|
|
RDEPENDS:${PN} = "ncurses-terminfo-base"
|
|
|
|
PV_MAJOR = "${@d.getVar('PV').split('.')[0]}"
|
|
|
|
SRC_URI = "https://nano-editor.org/dist/v${PV_MAJOR}/nano-${PV}.tar.xz \
|
|
file://CVE-2024-5742.patch \
|
|
"
|
|
SRC_URI[sha256sum] = "86f3442768bd2873cec693f83cdf80b4b444ad3cc14760b74361474fc87a4526"
|
|
|
|
UPSTREAM_CHECK_URI = "https://ftp.gnu.org/gnu/nano"
|
|
|
|
inherit autotools gettext pkgconfig
|
|
|
|
PACKAGECONFIG[tiny] = "--enable-tiny,"
|