From patchwork Tue Mar 19 16:58:46 2013 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gustavo Zacarias X-Patchwork-Id: 229143 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from whitealder.osuosl.org (whitealder.osuosl.org [140.211.166.138]) by ozlabs.org (Postfix) with ESMTP id 9A5362C00A3 for ; Wed, 20 Mar 2013 03:59:09 +1100 (EST) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id 1981A8A273; Tue, 19 Mar 2013 16:59:06 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T4ctOy7-7yUg; Tue, 19 Mar 2013 16:59:04 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by whitealder.osuosl.org (Postfix) with ESMTP id 4098F89C30; Tue, 19 Mar 2013 16:59:03 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from whitealder.osuosl.org (whitealder.osuosl.org [140.211.166.138]) by ash.osuosl.org (Postfix) with ESMTP id 1174F8F74B for ; Tue, 19 Mar 2013 16:59:09 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id 79A1789C9F for ; Tue, 19 Mar 2013 16:59:01 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Aw+xaH4nciy4 for ; Tue, 19 Mar 2013 16:58:59 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from loknar.toptech.com.ar (loknar.toptech.com.ar [78.46.79.162]) by whitealder.osuosl.org (Postfix) with ESMTPS id 3A07187BE8 for ; Tue, 19 Mar 2013 16:58:58 +0000 (UTC) Received: from asgard (host67.190-138-38.telecom.net.ar [190.138.38.67]) (authenticated bits=0) by loknar.toptech.com.ar (8.14.6/8.14.6) with ESMTP id r2JGwnKI002355 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Tue, 19 Mar 2013 16:58:54 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=zacarias.com.ar; s=dkey; t=1363712336; bh=ptqEGu8461JSXwbxLvSRoEwGcI7SFqlNqKQ0YCuj6cU=; h=From:To:Cc:Subject:Date; b=b3RvEohoEvgeJxEQSU958qjsdfz/APG8MXqpUThaA8cHsl+w9lD7ssrlT8DKhUbQx 8GJLRMW0MCRtxwfuwg/dJX+FOnB4mSfE3Krsbt5G2MR7IAfHPisUHr267t1ANr8Qp6 Pj30HvygKbH4wW7iuknmQgdFWt8HtqNpHnLBDcMk= Received: by asgard (sSMTP sendmail emulation); Tue, 19 Mar 2013 13:58:46 -0300 From: Gustavo Zacarias To: buildroot@busybox.net Date: Tue, 19 Mar 2013 13:58:46 -0300 Message-Id: <1363712326-29884-1-git-send-email-gustavo@zacarias.com.ar> X-Mailer: git-send-email 1.8.1.5 X-Virus-Scanned: clamav-milter 0.97.6 at loknar X-Virus-Status: Clean Subject: [Buildroot] [PATCH] stunnel: security bump to version 4.55 X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: buildroot-bounces@busybox.net Sender: buildroot-bounces@busybox.net Fixes CVE-2013-1762, improves CVE-2010-3684 workaround. Signed-off-by: Gustavo Zacarias --- package/stunnel/Config.in | 1 + package/stunnel/stunnel.mk | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package/stunnel/Config.in b/package/stunnel/Config.in index b1977ed..e4a9567 100644 --- a/package/stunnel/Config.in +++ b/package/stunnel/Config.in @@ -1,5 +1,6 @@ config BR2_PACKAGE_STUNNEL bool "stunnel" + depends on BR2_USE_MMU # fork() select BR2_PACKAGE_OPENSSL help Stunnel is a program that wraps any TCP connection with an SSL diff --git a/package/stunnel/stunnel.mk b/package/stunnel/stunnel.mk index 7c280cc..92344d1 100644 --- a/package/stunnel/stunnel.mk +++ b/package/stunnel/stunnel.mk @@ -4,12 +4,12 @@ # ############################################################# -STUNNEL_VERSION = 4.44 +STUNNEL_VERSION = 4.55 STUNNEL_SITE = http://ftp.nluug.nl/pub/networking/stunnel STUNNEL_DEPENDENCIES = openssl -STUNNEL_CONF_OPT += \ - --with-ssl=$(STAGING_DIR)/usr \ - --with-threads=fork +STUNNEL_CONF_OPT = --with-ssl=$(STAGING_DIR)/usr --with-threads=fork +STUNNEL_LICENSE = GPLv2+ +STUNNEL_LICENSE_FILES = COPYING COPYRIGHT.GPL define STUNNEL_INSTALL_CONF_SCRIPT $(INSTALL) -m 0755 -D package/stunnel/S50stunnel $(TARGET_DIR)/etc/init.d/S50stunnel