mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-19 16:40:46 -09:00
f6f9b0938b
Fixes the following security issue:
- CVE-2023-28882: Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows
a denial of service (worker crash and unresponsiveness) because some inputs
cause a segfault in the Transaction class for some configurations.
https://security-tracker.debian.org/tracker/CVE-2023-28882
- Drop 0003-Revert-Fix-maxminddb-link-on-FreeBSD.patch, handling of libmaxminddb
was fixed upstream in d2b700d
- Drop 0004-build-pcre.m4-fix-build-without-pcre.patch, handling of PCRE was
fixed upstream in 791964a
Signed-off-by: Frank Vanbever <frank.vanbever@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a1e0e7276c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
67 lines
1.9 KiB
Makefile
67 lines
1.9 KiB
Makefile
################################################################################
|
|
#
|
|
# libmodsecurity
|
|
#
|
|
################################################################################
|
|
|
|
LIBMODSECURITY_VERSION = 3.0.9
|
|
LIBMODSECURITY_SOURCE = modsecurity-v$(LIBMODSECURITY_VERSION).tar.gz
|
|
LIBMODSECURITY_SITE = https://github.com/SpiderLabs/ModSecurity/releases/download/v$(LIBMODSECURITY_VERSION)
|
|
LIBMODSECURITY_INSTALL_STAGING = YES
|
|
LIBMODSECURITY_LICENSE = Apache-2.0
|
|
LIBMODSECURITY_LICENSE_FILES = LICENSE
|
|
LIBMODSECURITY_CPE_ID_VENDOR = trustwave
|
|
LIBMODSECURITY_CPE_ID_PRODUCT = modsecurity
|
|
# We're patching configure.ac
|
|
LIBMODSECURITY_AUTORECONF = YES
|
|
|
|
LIBMODSECURITY_DEPENDENCIES = pcre2
|
|
LIBMODSECURITY_CONF_OPTS = \
|
|
--without-pcre \
|
|
--with-pcre2="$(STAGING_DIR)/usr" \
|
|
--disable-examples \
|
|
--without-lmdb \
|
|
--without-ssdeep \
|
|
--without-lua \
|
|
--without-yajl
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBXML2),y)
|
|
LIBMODSECURITY_DEPENDENCIES += libxml2
|
|
LIBMODSECURITY_CONF_OPTS += --with-libxml="$(STAGING_DIR)/usr/bin/xml2-config"
|
|
else
|
|
LIBMODSECURITY_CONF_OPTS += --without-libxml
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBCURL),y)
|
|
LIBMODSECURITY_DEPENDENCIES += libcurl
|
|
LIBMODSECURITY_CONF_OPTS += --with-curl="$(STAGING_DIR)/usr/bin/curl-config"
|
|
else
|
|
LIBMODSECURITY_CONF_OPTS += --without-curl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_GEOIP),y)
|
|
LIBMODSECURITY_DEPENDENCIES += geoip
|
|
LIBMODSECURITY_CONF_OPTS += --with-geoip
|
|
else
|
|
LIBMODSECURITY_CONF_OPTS += --without-geoip
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBMAXMINDDB),y)
|
|
LIBMODSECURITY_DEPENDENCIES += libmaxminddb
|
|
LIBMODSECURITY_CONF_OPTS += --with-maxmind
|
|
else
|
|
LIBMODSECURITY_CONF_OPTS += --without-maxmind
|
|
endif
|
|
|
|
LIBMODSECURITY_CXXFLAGS = $(TARGET_CXXFLAGS)
|
|
|
|
# m68k_cf can't use -fPIC that libmodsecurity forces to use, so we need
|
|
# to disable it to avoid a build failure.
|
|
ifeq ($(BR2_m68k_cf),y)
|
|
LIBMODSECURITY_CXXFLAGS += -fno-PIC
|
|
endif
|
|
|
|
LIBMODSECURITY_CONF_OPTS += CXXFLAGS="$(LIBMODSECURITY_CXXFLAGS)"
|
|
|
|
$(eval $(autotools-package))
|