d4d17e52d6
CHANGES summary:
Fix buffer overflow/overread vulnerabilities:
CVE-2017-16808 (AoE)
CVE-2018-14468 (FrameRelay)
CVE-2018-14469 (IKEv1)
CVE-2018-14470 (BABEL)
CVE-2018-14466 (AFS/RX)
CVE-2018-14461 (LDP)
CVE-2018-14462 (ICMP)
CVE-2018-14465 (RSVP)
CVE-2018-14881 (BGP)
CVE-2018-14464 (LMP)
CVE-2018-14463 (VRRP)
CVE-2018-14467 (BGP)
CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)
CVE-2018-14880 (OSPF6)
CVE-2018-16451 (SMB)
CVE-2018-14882 (RPL)
CVE-2018-16227 (802.11)
CVE-2018-16229 (DCCP)
CVE-2018-16301 (was fixed in libpcap)
CVE-2018-16230 (BGP)
CVE-2018-16452 (SMB)
CVE-2018-16300 (BGP)
CVE-2018-16228 (HNCP)
CVE-2019-15166 (LMP)
CVE-2019-15167 (VRRP)
Fix for cmdline argument/local issues:
CVE-2018-14879 (tcpdump -V)
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
33 lines
995 B
Makefile
33 lines
995 B
Makefile
################################################################################
|
|
#
|
|
# tcpdump
|
|
#
|
|
################################################################################
|
|
|
|
TCPDUMP_VERSION = 4.9.3
|
|
TCPDUMP_SITE = http://www.tcpdump.org/release
|
|
TCPDUMP_LICENSE = BSD-3-Clause
|
|
TCPDUMP_LICENSE_FILES = LICENSE
|
|
TCPDUMP_CONF_ENV = \
|
|
ac_cv_linux_vers=2 \
|
|
td_cv_buggygetaddrinfo=no \
|
|
PCAP_CONFIG=$(STAGING_DIR)/usr/bin/pcap-config
|
|
TCPDUMP_CONF_OPTS = \
|
|
--without-crypto \
|
|
--with-system-libpcap \
|
|
$(if $(BR2_PACKAGE_TCPDUMP_SMB),--enable-smb,--disable-smb)
|
|
TCPDUMP_DEPENDENCIES = zlib libpcap
|
|
|
|
ifeq ($(BR2_STATIC_LIBS),y)
|
|
TCPDUMP_CONF_OPTS += LIBS="`$(STAGING_DIR)/usr/bin/pcap-config --static --additional-libs`"
|
|
endif
|
|
|
|
# make install installs an unneeded extra copy of the tcpdump binary
|
|
define TCPDUMP_REMOVE_DUPLICATED_BINARY
|
|
rm -f $(TARGET_DIR)/usr/sbin/tcpdump.$(TCPDUMP_VERSION)
|
|
endef
|
|
|
|
TCPDUMP_POST_INSTALL_TARGET_HOOKS += TCPDUMP_REMOVE_DUPLICATED_BINARY
|
|
|
|
$(eval $(autotools-package))
|