libssh: mark as BROKEN due to CVE-2018-10933
authorKevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
Fri, 19 Oct 2018 11:38:41 +0000 (12:38 +0100)
committerKevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
Fri, 19 Oct 2018 12:04:27 +0000 (13:04 +0100)
The only known user of this library is currently unable to get their
application to work with with the fixed 0.7.6 release of this library.

To prevent accidental use by unknown parties of a flawed library, mark
it as BROKEN.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
libs/libssh/Makefile

index cc410c058d39e43766a883dad9b7974d7824e9fd..e6a372ee4c22fd6b814e7117af9312795a668da1 100644 (file)
@@ -32,7 +32,7 @@ define Package/libssh
   CATEGORY:=Libraries
   URL:=$(PKG_SOURCE_URL)
   TITLE:=SSH library
-  DEPENDS:=+libpthread +librt +zlib +libopenssl
+  DEPENDS:=+libpthread +librt +zlib +libopenssl @BROKEN
 endef
 
 define Package/libssh/description