mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-01 21:23:51 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/netatalk: security bump version to 4.4.3

Browse Source 
https://github.com/Netatalk/netatalk/blob/netatalk-4-4-3/NEWS.md

The bump from 4.4.2 to 4.4.3 fixes these CVEs:
CVE-2026-44047, CVE-2026-44048, CVE-2026-44049, CVE-2026-44050,
CVE-2026-44051, CVE-2026-44052, CVE-2026-44054, CVE-2026-44055,
CVE-2026-44057, CVE-2026-44060, CVE-2026-44062, CVE-2026-44064,
CVE-2026-44066, CVE-2026-44068, CVE-2026-44076, CVE-2026-45354,
CVE-2026-45355, CVE-2026-45356, CVE-2026-45698, CVE-2026-45699

Version 3.2.8 fixes these CVEs:
CVE-2024-1544, CVE-2024-5288, CVE-2024-5991, CVE-2024-5814

Version 3.2.1 fixes these CVEs:
CVE-2024-38439, CVE-2024-38440, CVE-2024-38441

Updated project URL in Config.in help text.

Removed md5 tarball hash and added sha256 and sha512 tarball hashes
provided by upstream.

Updated license hash due to upstream commits:
06e427ea02
934495d9e1

Switched _SITE to https.

Version 4.0.0 removed autotools and kept only meson as build system.

Reworked dependencies, sorted NETATALK_DEPENDENCIES.
Iniparser was added as mandatory dependency in 4.2.0.
Added optional dependencies to cracklib and openldap.

Disabled usage of libiconv for uClibc due to different definitions of
iconv_t (uClibc: typedef long vs. glibc: typedef void) which causes
a build error after the switch to meson.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
This commit is contained in:
Bernd Kuhls
2026-05-18 22:50:30 +02:00
committed by Arnout Vandecappelle
parent cc5aad27c6
commit 1f8905d38c
3 changed files with 62 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
package/netatalk/Config.in
View File

@@ -5,6 +5,7 @@ config BR2_PACKAGE_NETATALK
depends on BR2_USE_MMU # fork() depends on BR2_USE_MMU # fork()
depends on !BR2_STATIC_LIBS depends on !BR2_STATIC_LIBS
select BR2_PACKAGE_BERKELEYDB select BR2_PACKAGE_BERKELEYDB
select BR2_PACKAGE_INIPARSER
select BR2_PACKAGE_OPENSSL select BR2_PACKAGE_OPENSSL
select BR2_PACKAGE_LIBOPENSSL_ENABLE_CAST if BR2_PACKAGE_LIBOPENSSL select BR2_PACKAGE_LIBOPENSSL_ENABLE_CAST if BR2_PACKAGE_LIBOPENSSL
select BR2_PACKAGE_LIBOPENSSL_ENABLE_DES if BR2_PACKAGE_LIBOPENSSL select BR2_PACKAGE_LIBOPENSSL_ENABLE_DES if BR2_PACKAGE_LIBOPENSSL
@@ -16,7 +17,7 @@ config BR2_PACKAGE_NETATALK
extremely high-performance and reliable file server for extremely high-performance and reliable file server for
Macintosh computers. Macintosh computers.
http://netatalk.sourceforge.net/ https://netatalk.io/
comment "netatalk needs a toolchain w/ threads, dynamic library" comment "netatalk needs a toolchain w/ threads, dynamic library"
depends on BR2_USE_MMU depends on BR2_USE_MMU

12
package/netatalk/netatalk.hash
View File

@@ -1,7 +1,9 @@
# From http://sourceforge.net/projects/netatalk/files/netatalk/3.1.19/ # From https://sourceforge.net/projects/netatalk/files/netatalk-4-4-3/
md5 4861f0c2450ac7a6094e51090e6fdc75 netatalk-3.1.19.tar.xz sha1 31ccb1a14ee976e2bf16aef7c8be8620236e36cc netatalk-4.4.3.tar.xz
sha1 16900b3b14da9c2f40e1267ecb3e68021cc794b0 netatalk-3.1.19.tar.xz # From https://github.com/Netatalk/netatalk/releases/download/netatalk-4-4-3/netatalk-4.4.3.tar.xz.sha256sum
sha256 863d640ecc99f4923ead6c58e8d3406ab3a1ca9dd3b0d47ccdf6fdebb6efe3ab netatalk-4.4.3.tar.xz
# From https://github.com/Netatalk/netatalk/releases/download/netatalk-4-4-3/netatalk-4.4.3.tar.xz.sha512sum
sha512 24702be0325a6071ab97951dfb3e0525c7c8997310602a9007ed246470638d66999f59ca0d5bae0457e777e08f79b45edd572b61c9263e412ba88b402b54d0c3 netatalk-4.4.3.tar.xz
# Locally computed # Locally computed
sha256 433fa87ac23bc18a9acb0769b4f7f4047eeb14e02e0607ecd3a051c31859164f netatalk-3.1.19.tar.xz
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
sha256 7599ae145e53be03a08f8b558b2f2e0c828e1630f1843cc04f41981b8cefcd65 COPYRIGHT sha256 d13add335381938da94820bf1dfc65b2801dbff94b80d6c56b5c4e3ab996924c COPYRIGHT

78
package/netatalk/netatalk.mk
View File

@@ -4,51 +4,79 @@
# #
################################################################################ ################################################################################
NETATALK_VERSION = 3.1.19 NETATALK_VERSION = 4.4.3
NETATALK_SITE = http://downloads.sourceforge.net/project/netatalk/netatalk-$(subst .,-,$(NETATALK_VERSION)) NETATALK_SITE = https://downloads.sourceforge.net/project/netatalk/netatalk-$(subst .,-,$(NETATALK_VERSION))
NETATALK_SOURCE = netatalk-$(NETATALK_VERSION).tar.xz NETATALK_SOURCE = netatalk-$(NETATALK_VERSION).tar.xz
NETATALK_CONFIG_SCRIPTS = netatalk-config NETATALK_CONFIG_SCRIPTS = netatalk-config
NETATALK_DEPENDENCIES = host-pkgconf openssl berkeleydb libgcrypt libgpg-error \ NETATALK_DEPENDENCIES = \
libevent host-pkgconf \
berkeleydb \
iniparser \
libevent \
libgcrypt \
libgpg-error \
openssl
NETATALK_LICENSE = GPL-2.0+, LGPL-3.0+, MIT-like NETATALK_LICENSE = GPL-2.0+, LGPL-3.0+, MIT-like
NETATALK_LICENSE_FILES = COPYING COPYRIGHT NETATALK_LICENSE_FILES = COPYING COPYRIGHT
NETATALK_CPE_ID_VENDOR = netatalk NETATALK_CPE_ID_VENDOR = netatalk
# Don't run ldconfig!
NETATALK_CONF_ENV += CC="$(TARGET_CC) -std=gnu99" \
ac_cv_path_NETA_LDCONFIG=""
NETATALK_CONF_OPTS += \ NETATALK_CONF_OPTS += \
--with-cnid-cdb-backend \ -Dwith-init-style=none \
--with-bdb=$(STAGING_DIR)/usr \ -Dwith-afpstats=false \
--with-ssl-dir=$(STAGING_DIR)/usr \ -Dwith-cnid-backends=dbd \
--with-libgcrypt-dir=$(STAGING_DIR)/usr \ -Dwith-bdb-path=$(STAGING_DIR)/usr \
--with-shadow \ -Dwith-libgcrypt-path=$(STAGING_DIR)/usr \
--disable-shell-check \ -Dwith-shell-check=false \
--without-kerberos \ -Dwith-gssapi=false \
--without-pam \ -Dwith-kerberos=false \
--with-libevent=no \ -Dwith-krbV-uam=false \
--with-dtrace=no \ -Dwith-pam=false \
--with-mysql-config=no -Dwith-quota=false \
-Dwith-dtrace=false \
-Dwith-spotlight=false \
-Dwith-docs="" \
-Dwith-tcp-wrappers=false
ifeq ($(BR2_TOOLCHAIN_USES_UCLIBC),y)
NETATALK_CONF_OPTS += -Dwith-libiconv=false
else
NETATALK_CONF_OPTS += -Dwith-libiconv=true
endif
ifeq ($(BR2_PACKAGE_ACL),y) ifeq ($(BR2_PACKAGE_ACL),y)
NETATALK_DEPENDENCIES += acl NETATALK_DEPENDENCIES += acl
NETATALK_CONF_OPTS += -Dwith-acls=true
else else
NETATALK_CONF_OPTS += --with-acls=no NETATALK_CONF_OPTS += -Dwith-acls=false
endif endif
ifeq ($(BR2_PACKAGE_AVAHI_DAEMON)$(BR2_PACKAGE_DBUS),yy) ifeq ($(BR2_PACKAGE_AVAHI_DAEMON)$(BR2_PACKAGE_DBUS),yy)
NETATALK_DEPENDENCIES += avahi NETATALK_DEPENDENCIES += avahi
NETATALK_CONF_OPTS += --enable-zeroconf=$(STAGING_DIR)/usr NETATALK_CONF_OPTS += -Dwith-zeroconf=true
else else
NETATALK_CONF_OPTS += --disable-zeroconf NETATALK_CONF_OPTS += -Dwith-zeroconf=false
endif
ifeq ($(BR2_PACKAGE_CRACKLIB),y)
NETATALK_DEPENDENCIES += cracklib
NETATALK_CONF_OPTS += -Dwith-cracklib=true
else
NETATALK_CONF_OPTS += -Dwith-cracklib=false
endif endif
ifeq ($(BR2_PACKAGE_CUPS),y) ifeq ($(BR2_PACKAGE_CUPS),y)
NETATALK_DEPENDENCIES += cups NETATALK_DEPENDENCIES += cups
NETATALK_CONF_ENV += ac_cv_path_CUPS_CONFIG=$(STAGING_DIR)/usr/bin/cups-config NETATALK_CONF_OPTS += -Dwith-appletalk=true -Dwith-cups=true
NETATALK_CONF_OPTS += --enable-cups NETATALK_MESON_EXTRA_BINARIES += cups-config='$(STAGING_DIR)/usr/bin/cups-config'
else else
NETATALK_CONF_OPTS += --disable-cups NETATALK_CONF_OPTS += -Dwith-appletalk=false -Dwith-cups=false
endif
ifeq ($(BR2_PACKAGE_OPENLDAP),y)
NETATALK_DEPENDENCIES += openldap
NETATALK_CONF_OPTS += -Dwith-ldap=true
else
NETATALK_CONF_OPTS += -Dwith-ldap=false
endif endif
define NETATALK_INSTALL_INIT_SYSV define NETATALK_INSTALL_INIT_SYSV
@@ -56,4 +84,4 @@ define NETATALK_INSTALL_INIT_SYSV
$(TARGET_DIR)/etc/init.d/S50netatalk $(TARGET_DIR)/etc/init.d/S50netatalk
endef endef
$(eval $(autotools-package)) $(eval $(meson-package))