aboutsummaryrefslogtreecommitdiffstats
path: root/package/utils/busybox/patches/005-backport-CVE-2021-28831.patch
Commit message (Collapse)AuthorAgeFilesLines
* busybox: update to 1.33.1Nick Hainke2021-05-121-52/+0
| | | | | | | | | | | | | | Remove backports: - 001-backport1330fix-ash-make-strdup-copy.patch - 002-backport1330fix-traceroute.patch - 005-backport-CVE-2021-28831.patch Remove upstreamed: - 010-fix-wrong-variable.patch Signed-off-by: Nick Hainke <vincent@systemli.org> [don't use $(AUTORELEASE) for now] Signed-off-by: Paul Spooren <mail@aparcar.org>
* busybox: backport fix for CVE-2021-28831Hauke Mehrtens2021-05-021-0/+52
This backports a fix for the low priority CVE-2021-28831: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>