Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | busybox: update to 1.33.1 | Nick Hainke | 2021-05-12 | 1 | -52/+0 |
| | | | | | | | | | | | | | | Remove backports: - 001-backport1330fix-ash-make-strdup-copy.patch - 002-backport1330fix-traceroute.patch - 005-backport-CVE-2021-28831.patch Remove upstreamed: - 010-fix-wrong-variable.patch Signed-off-by: Nick Hainke <vincent@systemli.org> [don't use $(AUTORELEASE) for now] Signed-off-by: Paul Spooren <mail@aparcar.org> | ||||
* | busybox: backport fix for CVE-2021-28831 | Hauke Mehrtens | 2021-05-02 | 1 | -0/+52 |
This backports a fix for the low priority CVE-2021-28831: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> |