diff options
| author | Alexander Kanavin <alex.kanavin@gmail.com> | 2024-04-19 14:19:35 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2024-04-24 14:27:53 +0100 |
| commit | 2dee886efec3cc60260b3d58dba12c717379e704 (patch) | |
| tree | b0a8659ad34a93b71bf53648d24a6c6fa2fc3164 | |
| parent | c7275486597e4f6fa53764f1ffc53765e4836581 (diff) | |
| download | poky-2dee886efec3cc60260b3d58dba12c717379e704.tar.gz | |
busybox: submit CVE-2022-28391 patches upstream
(From OE-Core rev: d52d10bdcc5554d8b9b2654e77eb2aa27f3a0a26)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-core/busybox/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch b/meta/recipes-core/busybox/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch index 4635250170..ceb3ad7250 100644 --- a/meta/recipes-core/busybox/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch +++ b/meta/recipes-core/busybox/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch | |||
| @@ -5,7 +5,7 @@ Subject: [PATCH 1/2] libbb: sockaddr2str: ensure only printable characters are | |||
| 5 | returned for the hostname part | 5 | returned for the hostname part |
| 6 | 6 | ||
| 7 | CVE: CVE-2022-28391 | 7 | CVE: CVE-2022-28391 |
| 8 | Upstream-Status: Pending | 8 | Upstream-Status: Submitted [https://bugs.busybox.net/show_bug.cgi?id=15001] |
| 9 | Signed-off-by: Ariadne Conill <ariadne@dereferenced.org> | 9 | Signed-off-by: Ariadne Conill <ariadne@dereferenced.org> |
| 10 | Signed-off-by: Steve Sakoman <steve@sakoman.com> | 10 | Signed-off-by: Steve Sakoman <steve@sakoman.com> |
| 11 | --- | 11 | --- |
diff --git a/meta/recipes-core/busybox/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch b/meta/recipes-core/busybox/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch index 0d7409ddc3..1dbc3388a4 100644 --- a/meta/recipes-core/busybox/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch +++ b/meta/recipes-core/busybox/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch | |||
| @@ -8,7 +8,7 @@ Otherwise, terminal sequences can be injected, which enables various terminal in | |||
| 8 | attacks from DNS results. | 8 | attacks from DNS results. |
| 9 | 9 | ||
| 10 | CVE: CVE-2022-28391 | 10 | CVE: CVE-2022-28391 |
| 11 | Upstream-Status: Pending | 11 | Upstream-Status: Submitted [https://bugs.busybox.net/show_bug.cgi?id=15001] |
| 12 | Signed-off-by: Ariadne Conill <ariadne@dereferenced.org> | 12 | Signed-off-by: Ariadne Conill <ariadne@dereferenced.org> |
| 13 | Signed-off-by: Steve Sakoman <steve@sakoman.com> | 13 | Signed-off-by: Steve Sakoman <steve@sakoman.com> |
| 14 | --- | 14 | --- |