Files
buildroot/package/libgsasl/libgsasl.mk
Bernd Kuhls 61056c34b4 package/libgsasl: security bump version to 2.2.4
2.2.3: https://lists.gnu.org/archive/html/help-gsasl/2026-05/msg00001.html
       Fixes CVE-2026-48829: https://www.cvedetails.com/cve/CVE-2026-48829/

2.2.4: https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00001.html
       https://lists.gnu.org/archive/html/help-gsasl/2026-06/msg00002.html
       "GNU SASL Security Advisory: NTLM client use-of-uninitialized-value"

Upstream does not provide sha1 hashes anymore.

Updated license hash due to copyright year bump:
ec96bad539

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Fiona: fix notice about upstream hashes, sha256 is still provided]
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-06-20 00:44:34 +02:00

29 lines
838 B
Makefile

################################################################################
#
# libgsasl
#
################################################################################
LIBGSASL_VERSION = 2.2.4
LIBGSASL_SOURCE = gsasl-$(LIBGSASL_VERSION).tar.gz
LIBGSASL_SITE = $(BR2_GNU_MIRROR)/gsasl
LIBGSASL_LICENSE = LGPL-2.1+ (library), GPL-3.0+ (programs)
LIBGSASL_LICENSE_FILES = README COPYING.LESSER COPYING
LIBGSASL_INSTALL_STAGING = YES
ifeq ($(BR2_PACKAGE_LIBGCRYPT),y)
LIBGSASL_CONF_OPTS += --with-libgcrypt-prefix=$(STAGING_DIR)/usr
LIBGSASL_DEPENDENCIES += libgcrypt
else
LIBGSASL_CONF_OPTS += --without-libgcrypt
endif
ifeq ($(BR2_PACKAGE_LIBIDN),y)
LIBGSASL_CONF_OPTS += --with-libidn-prefix=$(STAGING_DIR)/usr
LIBGSASL_DEPENDENCIES += libidn
else
LIBGSASL_CONF_OPTS += --without-stringprep
endif
$(eval $(autotools-package))