buildroot/package/netatalk/netatalk.mk
Peter Korsgaard 8aaf05916c package/netatalk: security bump to version 3.1.23
Fixes CVE-2018-1160: Netatalk before 3.1.12 is vulnerable to an out of
bounds write in dsi_opensess.c.  This is due to lack of bounds checking on
attacker controlled data.  A remote unauthenticated attacker can leverage
this vulnerability to achieve arbitrary code execution.

For more details, see the release notes:
http://netatalk.sourceforge.net/3.1/ReleaseNotes3.1.12.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-12-21 15:40:29 +01:00

61 lines
1.7 KiB
Makefile

################################################################################
#
# netatalk
#
################################################################################
NETATALK_VERSION = 3.1.12
NETATALK_SITE = http://downloads.sourceforge.net/project/netatalk/netatalk/$(NETATALK_VERSION)
NETATALK_SOURCE = netatalk-$(NETATALK_VERSION).tar.bz2
# For 0001-Fix-setting-of-LD_LIBRARY_FLAGS-shlibpath_var.patch
NETATALK_AUTORECONF = YES
NETATALK_CONFIG_SCRIPTS = netatalk-config
NETATALK_DEPENDENCIES = host-pkgconf openssl berkeleydb libgcrypt libgpg-error \
libevent
NETATALK_LICENSE = GPL-2.0+, LGPL-3.0+, MIT-like
NETATALK_LICENSE_FILES = COPYING COPYRIGHT
# Don't run ldconfig!
NETATALK_CONF_ENV += CC="$(TARGET_CC) -std=gnu99" \
ac_cv_path_NETA_LDCONFIG=""
NETATALK_CONF_OPTS += \
--with-cnid-cdb-backend \
--with-bdb=$(STAGING_DIR)/usr \
--with-ssl-dir=$(STAGING_DIR)/usr \
--with-libgcrypt-dir=$(STAGING_DIR)/usr \
--with-shadow \
--disable-shell-check \
--without-kerberos \
--without-pam \
--with-libevent=no \
--with-dtrace=no \
--with-mysql-config=no
ifeq ($(BR2_PACKAGE_ACL),y)
NETATALK_DEPENDENCIES += acl
else
NETATALK_CONF_OPTS += --with-acls=no
endif
ifeq ($(BR2_PACKAGE_AVAHI_DAEMON)$(BR2_PACKAGE_DBUS),yy)
NETATALK_DEPENDENCIES += avahi
NETATALK_CONF_OPTS += --enable-zeroconf=$(STAGING_DIR)/usr
else
NETATALK_CONF_OPTS += --disable-zeroconf
endif
ifeq ($(BR2_PACKAGE_CUPS),y)
NETATALK_DEPENDENCIES += cups
NETATALK_CONF_ENV += ac_cv_path_CUPS_CONFIG=$(STAGING_DIR)/usr/bin/cups-config
NETATALK_CONF_OPTS += --enable-cups
else
NETATALK_CONF_OPTS += --disable-cups
endif
define NETATALK_INSTALL_INIT_SYSV
$(INSTALL) -m 0755 -D package/netatalk/S50netatalk \
$(TARGET_DIR)/etc/init.d/S50netatalk
endef
$(eval $(autotools-package))