Skip to content
Snippets Groups Projects
Commit 4db043aa authored by Balasankar 'Balu' C's avatar Balasankar 'Balu' C
Browse files

Bump ncurses to 6.3-20220416 to patch against CVE-2022-2945

Merge branch 'security-ncurses-CVE-2022-2945' into 'master'

See merge request gitlab-org/security/omnibus-gitlab!265

Changelog: security
parent 414177c6
No related branches found
No related tags found
2 merge requests!102heptapod#1237: making 0.38 the new oldstable,!88Merging upstream 15.7.0+ce.0
......@@ -161,3 +161,6 @@
grafana:
remote: "git@dev.gitlab.org:omnibus-mirror/grafana.git"
alternative: "https://gitlab.com/gitlab-org/build/omnibus-mirror/grafana.git"
ncurses:
remote: "git@dev.gitlab.org:omnibus-mirror/ncurses.git"
alternative: "https://gitlab.com/gitlab-org/build/omnibus-mirror/ncurses.git"
diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..3749516
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,23 @@
+Note: This license information is extracted from
+http://invisible-island.net/ncurses/ncurses.faq.html#who_owns_it
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, distribute with modifications,
+sublicense, and/or sell copies of the Software, and to permit persons to whom
+the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE ABOVE
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+Except as contained in this notice, the name(s) of the above copyright holders
+shall not be used in advertising or otherwise to promote the sale, use or other
+dealings in this Software without prior written authorization.
......@@ -15,6 +15,13 @@
#
name 'ncurses'
default_version '6.3'
# Commit with fix to CVE-2022-2945
version = Gitlab::Version.new('ncurses', '4c9f63c460cb7134f142aa65f6866c175ed77605')
default_version version.print(false)
display_version '6.3-20220416'
source git: version.remote
license 'MIT'
......@@ -19,8 +26,8 @@
license 'MIT'
license_file 'LICENSE'
license_file 'COPYING'
skip_transitive_dependency_licensing true
dependency 'config_guess'
......@@ -22,12 +29,8 @@
skip_transitive_dependency_licensing true
dependency 'config_guess'
version('6.3') { source sha256: '97fc51ac2b085d4cde31ef4d2c3122c21abc217e9090a43a30fc5ec21684e059', url: 'https://ftp.gnu.org/gnu/ncurses/ncurses-6.3.tar.gz' }
relative_path "ncurses-#{version}"
########################################################################
#
# wide-character support:
......@@ -44,7 +47,6 @@
########################################################################
build do
patch source: 'add-license-file.patch'
env = with_standard_compiler_flags(with_embedded_path)
env.delete('CPPFLAGS')
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment