From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <ptxdist-bounces@pengutronix.de>
From: Jan Luebbe <jlu@pengutronix.de>
Date: Thu,  2 May 2013 16:01:17 +0200
Message-Id: <1367503277-12005-1-git-send-email-jlu@pengutronix.de>
Subject: [ptxdist] [PATCH] strongswan: update to 5.0.4
Reply-To: ptxdist@pengutronix.de
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
	<mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/pipermail/ptxdist>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
	<mailto:ptxdist-request@pengutronix.de?subject=subscribe>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ptxdist-bounces@pengutronix.de
Errors-To: ptxdist-bounces@pengutronix.de
To: ptxdist@pengutronix.de
Cc: Jan Luebbe <jlu@pengutronix.de>

The security bug fixed in 5.0.4 affected only the openssl plugin,
which is disabled in this package.
---
 rules/strongswan.make |   13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/rules/strongswan.make b/rules/strongswan.make
index 31b7221..6401832 100644
--- a/rules/strongswan.make
+++ b/rules/strongswan.make
@@ -17,8 +17,8 @@ PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
 #
 # Paths and names
 #
-STRONGSWAN_VERSION	:= 5.0.2
-STRONGSWAN_MD5		:= 77dc16443fd141f46183d3a4f60986ef
+STRONGSWAN_VERSION	:= 5.0.4
+STRONGSWAN_MD5		:= 0ab0397b44b197febfd0f89148344035
 STRONGSWAN		:= strongswan-$(STRONGSWAN_VERSION)
 STRONGSWAN_SUFFIX	:= tar.bz2
 STRONGSWAN_URL		:= http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
@@ -34,6 +34,7 @@ STRONGSWAN_CONF_TOOL	:= autoconf
 STRONGSWAN_CONF_OPT	:= \
 	$(CROSS_AUTOCONF_USR) \
 	--$(call ptx/endis, PTXCONF_STRONGSWAN_LIBCURL)-curl \
+	--disable-unbound \
 	--disable-soup \
 	--disable-ldap \
 	--enable-aes \
@@ -57,6 +58,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--enable-pkcs8 \
 	--enable-pgp \
 	--enable-dnskey \
+	--disable-ipseckey \
 	--enable-pem \
 	--enable-hmac \
 	--enable-cmac \
@@ -95,6 +97,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--enable-xauth-generic \
 	--disable-xauth-eap \
 	--disable-xauth-pam \
+	--disable-xauth-noauth \
 	--disable-tnc-ifmap \
 	--disable-tnc-pdp \
 	--disable-tnc-imc \
@@ -146,7 +149,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-addrblock \
 	--disable-unity \
 	--disable-uci \
-	--disable-android \
+	--disable-android-dns \
 	--disable-android-log \
 	--disable-maemo \
 	--disable-nm \
@@ -155,6 +158,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-lookip \
 	--disable-error-notify \
 	--disable-certexpire \
+	--disable-systime-fix \
 	--disable-led \
 	--disable-duplicheck \
 	--disable-coupling \
@@ -162,6 +166,9 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-vstr \
 	--disable-monolithic \
 	--disable-bfd-backtraces \
+	--disable-unit-tests \
+	--disable-tkm \
+	--disable-defaults \
 	--enable-dependency-tracking \
 	--enable-shared \
 	--disable-static \
-- 
1.7.10.4


-- 
ptxdist mailing list
ptxdist@pengutronix.de