24f2eb1e15
Fixes: CVE-2017-7508 - Remotely-triggerable ASSERT() on malformed IPv6 packet CVE-2017-7520 - Pre-authentication remote crash/information disclosure for clients CVE-2017-7521 - Potential double-free in --x509-alt-username CVE-2017-7521 - Remote-triggerable memory leaks CVE-2017-7522 - Post-authentication remote DoS when using the --x509-track option Details at https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
61 lines
1.5 KiB
Makefile
61 lines
1.5 KiB
Makefile
################################################################################
|
|
#
|
|
# openvpn
|
|
#
|
|
################################################################################
|
|
|
|
OPENVPN_VERSION = 2.4.3
|
|
OPENVPN_SOURCE = openvpn-$(OPENVPN_VERSION).tar.xz
|
|
OPENVPN_SITE = http://swupdate.openvpn.net/community/releases
|
|
OPENVPN_DEPENDENCIES = host-pkgconf openssl
|
|
OPENVPN_LICENSE = GPL-2.0
|
|
OPENVPN_LICENSE_FILES = COPYRIGHT.GPL
|
|
OPENVPN_CONF_OPTS = \
|
|
--disable-plugin-auth-pam \
|
|
--enable-iproute2 \
|
|
--with-crypto-library=openssl \
|
|
$(if $(BR2_STATIC_LIBS),--disable-plugins)
|
|
OPENVPN_CONF_ENV = IFCONFIG=/sbin/ifconfig \
|
|
NETSTAT=/bin/netstat \
|
|
ROUTE=/sbin/route
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENVPN_SMALL),y)
|
|
OPENVPN_CONF_OPTS += \
|
|
--enable-small \
|
|
--disable-plugins
|
|
endif
|
|
|
|
# BusyBox 1.21+ places the ip applet in the "correct" place
|
|
# but previous versions didn't.
|
|
ifeq ($(BR2_PACKAGE_IPROUTE2),y)
|
|
OPENVPN_CONF_ENV += IPROUTE=/sbin/ip
|
|
else ifeq ($(BR2_BUSYBOX_VERSION_1_19_X)$(BR2_BUSYBOX_VERSION_1_20_X),y)
|
|
OPENVPN_CONF_ENV += IPROUTE=/bin/ip
|
|
else
|
|
OPENVPN_CONF_ENV += IPROUTE=/sbin/ip
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENVPN_LZ4),y)
|
|
OPENVPN_DEPENDENCIES += lz4
|
|
else
|
|
OPENVPN_CONF_OPTS += --disable-lz4
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENVPN_LZO),y)
|
|
OPENVPN_DEPENDENCIES += lzo
|
|
else
|
|
OPENVPN_CONF_OPTS += --disable-lzo
|
|
endif
|
|
|
|
define OPENVPN_INSTALL_TARGET_CMDS
|
|
$(INSTALL) -m 755 $(@D)/src/openvpn/openvpn \
|
|
$(TARGET_DIR)/usr/sbin/openvpn
|
|
endef
|
|
|
|
define OPENVPN_INSTALL_INIT_SYSV
|
|
$(INSTALL) -m 755 -D package/openvpn/S60openvpn \
|
|
$(TARGET_DIR)/etc/init.d/S60openvpn
|
|
endef
|
|
|
|
$(eval $(autotools-package))
|