mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
* [ptxdist] [PATCH] strongswan: update to 5.0.4
@ 2013-05-02 14:01 Jan Luebbe
  2013-05-13  7:32 ` Michael Olbrich
  0 siblings, 1 reply; 2+ messages in thread
From: Jan Luebbe @ 2013-05-02 14:01 UTC (permalink / raw)
  To: ptxdist; +Cc: Jan Luebbe

The security bug fixed in 5.0.4 affected only the openssl plugin,
which is disabled in this package.
---
 rules/strongswan.make |   13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/rules/strongswan.make b/rules/strongswan.make
index 31b7221..6401832 100644
--- a/rules/strongswan.make
+++ b/rules/strongswan.make
@@ -17,8 +17,8 @@ PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
 #
 # Paths and names
 #
-STRONGSWAN_VERSION	:= 5.0.2
-STRONGSWAN_MD5		:= 77dc16443fd141f46183d3a4f60986ef
+STRONGSWAN_VERSION	:= 5.0.4
+STRONGSWAN_MD5		:= 0ab0397b44b197febfd0f89148344035
 STRONGSWAN		:= strongswan-$(STRONGSWAN_VERSION)
 STRONGSWAN_SUFFIX	:= tar.bz2
 STRONGSWAN_URL		:= http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
@@ -34,6 +34,7 @@ STRONGSWAN_CONF_TOOL	:= autoconf
 STRONGSWAN_CONF_OPT	:= \
 	$(CROSS_AUTOCONF_USR) \
 	--$(call ptx/endis, PTXCONF_STRONGSWAN_LIBCURL)-curl \
+	--disable-unbound \
 	--disable-soup \
 	--disable-ldap \
 	--enable-aes \
@@ -57,6 +58,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--enable-pkcs8 \
 	--enable-pgp \
 	--enable-dnskey \
+	--disable-ipseckey \
 	--enable-pem \
 	--enable-hmac \
 	--enable-cmac \
@@ -95,6 +97,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--enable-xauth-generic \
 	--disable-xauth-eap \
 	--disable-xauth-pam \
+	--disable-xauth-noauth \
 	--disable-tnc-ifmap \
 	--disable-tnc-pdp \
 	--disable-tnc-imc \
@@ -146,7 +149,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-addrblock \
 	--disable-unity \
 	--disable-uci \
-	--disable-android \
+	--disable-android-dns \
 	--disable-android-log \
 	--disable-maemo \
 	--disable-nm \
@@ -155,6 +158,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-lookip \
 	--disable-error-notify \
 	--disable-certexpire \
+	--disable-systime-fix \
 	--disable-led \
 	--disable-duplicheck \
 	--disable-coupling \
@@ -162,6 +166,9 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-vstr \
 	--disable-monolithic \
 	--disable-bfd-backtraces \
+	--disable-unit-tests \
+	--disable-tkm \
+	--disable-defaults \
 	--enable-dependency-tracking \
 	--enable-shared \
 	--disable-static \
-- 
1.7.10.4


-- 
ptxdist mailing list
ptxdist@pengutronix.de

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [ptxdist] [PATCH] strongswan: update to 5.0.4
  2013-05-02 14:01 [ptxdist] [PATCH] strongswan: update to 5.0.4 Jan Luebbe
@ 2013-05-13  7:32 ` Michael Olbrich
  0 siblings, 0 replies; 2+ messages in thread
From: Michael Olbrich @ 2013-05-13  7:32 UTC (permalink / raw)
  To: ptxdist

On Thu, May 02, 2013 at 04:01:17PM +0200, Jan Luebbe wrote:
> The security bug fixed in 5.0.4 affected only the openssl plugin,
> which is disabled in this package.

Thanks, applied.

Michael

> ---
>  rules/strongswan.make |   13 ++++++++++---
>  1 file changed, 10 insertions(+), 3 deletions(-)
> 
> diff --git a/rules/strongswan.make b/rules/strongswan.make
> index 31b7221..6401832 100644
> --- a/rules/strongswan.make
> +++ b/rules/strongswan.make
> @@ -17,8 +17,8 @@ PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
>  #
>  # Paths and names
>  #
> -STRONGSWAN_VERSION	:= 5.0.2
> -STRONGSWAN_MD5		:= 77dc16443fd141f46183d3a4f60986ef
> +STRONGSWAN_VERSION	:= 5.0.4
> +STRONGSWAN_MD5		:= 0ab0397b44b197febfd0f89148344035
>  STRONGSWAN		:= strongswan-$(STRONGSWAN_VERSION)
>  STRONGSWAN_SUFFIX	:= tar.bz2
>  STRONGSWAN_URL		:= http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> @@ -34,6 +34,7 @@ STRONGSWAN_CONF_TOOL	:= autoconf
>  STRONGSWAN_CONF_OPT	:= \
>  	$(CROSS_AUTOCONF_USR) \
>  	--$(call ptx/endis, PTXCONF_STRONGSWAN_LIBCURL)-curl \
> +	--disable-unbound \
>  	--disable-soup \
>  	--disable-ldap \
>  	--enable-aes \
> @@ -57,6 +58,7 @@ STRONGSWAN_CONF_OPT	:= \
>  	--enable-pkcs8 \
>  	--enable-pgp \
>  	--enable-dnskey \
> +	--disable-ipseckey \
>  	--enable-pem \
>  	--enable-hmac \
>  	--enable-cmac \
> @@ -95,6 +97,7 @@ STRONGSWAN_CONF_OPT	:= \
>  	--enable-xauth-generic \
>  	--disable-xauth-eap \
>  	--disable-xauth-pam \
> +	--disable-xauth-noauth \
>  	--disable-tnc-ifmap \
>  	--disable-tnc-pdp \
>  	--disable-tnc-imc \
> @@ -146,7 +149,7 @@ STRONGSWAN_CONF_OPT	:= \
>  	--disable-addrblock \
>  	--disable-unity \
>  	--disable-uci \
> -	--disable-android \
> +	--disable-android-dns \
>  	--disable-android-log \
>  	--disable-maemo \
>  	--disable-nm \
> @@ -155,6 +158,7 @@ STRONGSWAN_CONF_OPT	:= \
>  	--disable-lookip \
>  	--disable-error-notify \
>  	--disable-certexpire \
> +	--disable-systime-fix \
>  	--disable-led \
>  	--disable-duplicheck \
>  	--disable-coupling \
> @@ -162,6 +166,9 @@ STRONGSWAN_CONF_OPT	:= \
>  	--disable-vstr \
>  	--disable-monolithic \
>  	--disable-bfd-backtraces \
> +	--disable-unit-tests \
> +	--disable-tkm \
> +	--disable-defaults \
>  	--enable-dependency-tracking \
>  	--enable-shared \
>  	--disable-static \
> -- 
> 1.7.10.4
> 
> 
> -- 
> ptxdist mailing list
> ptxdist@pengutronix.de
> 

-- 
Pengutronix e.K.                           |                             |
Industrial Linux Solutions                 | http://www.pengutronix.de/  |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

-- 
ptxdist mailing list
ptxdist@pengutronix.de

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2013-05-13  7:32 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2013-05-02 14:01 [ptxdist] [PATCH] strongswan: update to 5.0.4 Jan Luebbe
2013-05-13  7:32 ` Michael Olbrich

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox