blob: 1e83a421c206bc5c068938d89714149175c5201e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
|
# Contriburo: Łukasz Jendrysik <scadu@yandex.com>
# Contributor: Michael Mason <ms13sp@gmail.com>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=gnutls
pkgver=3.4.17
pkgrel=0
pkgdesc="A TLS protocol implementation"
url="http://www.gnutls.org/"
arch="all"
license="GPL"
depends=
depends_dev="nettle-dev zlib-dev libtasn1-dev p11-kit-dev"
makedepends="$depends_dev texinfo"
install=
subpackages="$pkgname-dbg $pkgname-doc $pkgname-dev $pkgname-utils $pkgname-c++:xx"
_v=${pkgver%.*}
case $pkgver in
*.*.*.*) _v=${_v%.*};;
esac
source="ftp://ftp.gnutls.org/gcrypt/gnutls/v${_v}/$pkgname-$pkgver.tar.xz
CVE-2017-7507-1.patch
CVE-2017-7507-2.patch
CVE-2017-7507-3.patch
"
_builddir="$srcdir/$pkgname-$pkgver"
# secfixes:
# 3.14.17-r1:
# - CVE-2017-7507
prepare() {
cd "$_builddir"
for i in $source; do
case $i in
*.patch) msg $i; patch -p1 -i "$srcdir"/$i || return 1;;
esac
done
}
build() {
cd "$_builddir"
LIBS="-lgmp" ./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--sysconfdir=/etc \
--mandir=/usr/share/man \
--infodir=/usr/share/info \
--disable-openssl-compatibility \
--disable-rpath \
--disable-static \
--disable-guile \
--disable-valgrind-tests \
|| return 1
make
}
package() {
cd "$_builddir"
make -j1 DESTDIR="$pkgdir" install
}
utils() {
pkgdesc="Command line tools for TLS protocol"
mkdir -p "$subpkgdir"/usr/
mv "$pkgdir"/usr/bin "$subpkgdir"/usr/
}
xx() {
pkgdesc="The C++ interface to GnuTLS"
mkdir -p "$subpkgdir"/usr/lib
mv "$pkgdir"/usr/lib/lib*xx.so.* "$subpkgdir"/usr/lib/
}
md5sums="e7556cec73c8b34fd2ff0b591e24e44c gnutls-3.4.7.tar.xz
e411086bcb837aa76053a4684ceb5df3 CVE-2016-7444.patch"
sha256sums="c1be9e4b30295d7b5f96fa332c6a908e6fa2254377b67811301fca92eb882e5a gnutls-3.4.7.tar.xz
6c4f45bef3a07fa7e1796481412316c71551dca7b2894217f2849cc97f06571f CVE-2016-7444.patch"
sha512sums="fdfca4c37292ee07d2d1e398380afe79a20f56040a7c84deb7a5b5221f3bcb4080471b9644c7f2bacb42247c3cc62e32a511f1e2ec6e31c15d9b08b20e8050b6 gnutls-3.4.7.tar.xz
a8bab56c0b9b31bd29a3b4d4f1948cc58b090a6d10a468d906b16796645bf8dcec2112683c9f9b4c07a08b89342728a624dbd16bd95c041b91e450a2319f29e7 CVE-2016-7444.patch"
md5sums="4ea5b239bd8bf1b734dda02997b36459 gnutls-3.4.15.tar.xz"
sha256sums="eb2a013905f5f2a0cbf7bcc1d20c85a50065063ee87bd33b496c4e19815e3498 gnutls-3.4.15.tar.xz"
sha512sums="03157f2da22890ecd080ad58144a9aabe933382c0b7e969b7b194a0248bb5e6e25207078c0a92755650d0004970eb1c0cf0140dbdbf2e615808f9978e965a5e5 gnutls-3.4.15.tar.xz"
md5sums="03ea7575a43f58964635a5064cce4dc0 gnutls-3.4.17.tar.xz
28aefc8e42aab54e74a822ff0c853cd3 CVE-2017-7507-1.patch
8a1c1a0973acd3e9a1dfe47570e10a24 CVE-2017-7507-2.patch
c1d5e149d8ea74256dc07b9c3e125a90 CVE-2017-7507-3.patch"
sha256sums="9b50e8a670d5e950425d96935c7ddd415eb6f8079615a36df425f09a3143172e gnutls-3.4.17.tar.xz
0832efdec6e96f71100ed9061a07650ad957d35ebd75915427f4f9c8410bb6e6 CVE-2017-7507-1.patch
82be76e052c1b923dec9b1fc0c5976985d7333d22da5bf14ba5ad6c04c600354 CVE-2017-7507-2.patch
17a1e102b1dec536384922ac68ee68017a46c3251b34c1d45d122b815ac2c308 CVE-2017-7507-3.patch"
sha512sums="a0a578034e8092dd422dc310a655fda3c4a2de5cb06745d9b47bb39734cb983902553b56dfbbabc618b3824defc62489b1b3c8de3b824b97b28273ddedd06ea7 gnutls-3.4.17.tar.xz
7eb981825ea242eda606e0d679aa3a6f6be91835d8828a4ff86e750db71e639869dfc6106be98af92c3963ab5b16ead0d3f135aac186ad4280c2f8f4ca7dec7e CVE-2017-7507-1.patch
d7b14a6da31bb07358850e6e78e9de8db6ae08c85b60dc25c784457a09557044a0a5bb5b5304399ce994447a4cd0b92efe8c01892652aae799ec68f5792f52e5 CVE-2017-7507-2.patch
b67445ede75441e7cee35435292f5345636d90c8ebdb72e03c2658836605b56c3fc85304f650a5bd1984d937bba747839d44c1ae39ddb3ef7f7c39181443be8f CVE-2017-7507-3.patch"
|