d170cde027
- Drop patches (already in version) and so autoreconf - Update COPYING hash (gpl mailing address updated with9bd45cc06e6a5997fbd6) - Fix CVE-2022-43634: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646. - Fix CVE-2022-45188: Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD (used for TrueNAS). - Fix CVE-2023-42464: Validate data type in dalloc_value_for_key() https://github.com/Netatalk/netatalk/blob/netatalk-3-1-17/NEWS Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
60 lines
1.7 KiB
Makefile
60 lines
1.7 KiB
Makefile
################################################################################
|
|
#
|
|
# netatalk
|
|
#
|
|
################################################################################
|
|
|
|
NETATALK_VERSION = 3.1.17
|
|
NETATALK_SITE = http://downloads.sourceforge.net/project/netatalk/netatalk-$(subst .,-,$(NETATALK_VERSION))
|
|
NETATALK_SOURCE = netatalk-$(NETATALK_VERSION).tar.xz
|
|
NETATALK_CONFIG_SCRIPTS = netatalk-config
|
|
NETATALK_DEPENDENCIES = host-pkgconf openssl berkeleydb libgcrypt libgpg-error \
|
|
libevent
|
|
NETATALK_LICENSE = GPL-2.0+, LGPL-3.0+, MIT-like
|
|
NETATALK_LICENSE_FILES = COPYING COPYRIGHT
|
|
NETATALK_CPE_ID_VENDOR = netatalk_project
|
|
|
|
# Don't run ldconfig!
|
|
NETATALK_CONF_ENV += CC="$(TARGET_CC) -std=gnu99" \
|
|
ac_cv_path_NETA_LDCONFIG=""
|
|
NETATALK_CONF_OPTS += \
|
|
--with-cnid-cdb-backend \
|
|
--with-bdb=$(STAGING_DIR)/usr \
|
|
--with-ssl-dir=$(STAGING_DIR)/usr \
|
|
--with-libgcrypt-dir=$(STAGING_DIR)/usr \
|
|
--with-shadow \
|
|
--disable-shell-check \
|
|
--without-kerberos \
|
|
--without-pam \
|
|
--with-libevent=no \
|
|
--with-dtrace=no \
|
|
--with-mysql-config=no
|
|
|
|
ifeq ($(BR2_PACKAGE_ACL),y)
|
|
NETATALK_DEPENDENCIES += acl
|
|
else
|
|
NETATALK_CONF_OPTS += --with-acls=no
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_AVAHI_DAEMON)$(BR2_PACKAGE_DBUS),yy)
|
|
NETATALK_DEPENDENCIES += avahi
|
|
NETATALK_CONF_OPTS += --enable-zeroconf=$(STAGING_DIR)/usr
|
|
else
|
|
NETATALK_CONF_OPTS += --disable-zeroconf
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_CUPS),y)
|
|
NETATALK_DEPENDENCIES += cups
|
|
NETATALK_CONF_ENV += ac_cv_path_CUPS_CONFIG=$(STAGING_DIR)/usr/bin/cups-config
|
|
NETATALK_CONF_OPTS += --enable-cups
|
|
else
|
|
NETATALK_CONF_OPTS += --disable-cups
|
|
endif
|
|
|
|
define NETATALK_INSTALL_INIT_SYSV
|
|
$(INSTALL) -m 0755 -D package/netatalk/S50netatalk \
|
|
$(TARGET_DIR)/etc/init.d/S50netatalk
|
|
endef
|
|
|
|
$(eval $(autotools-package))
|