diff options
| author | Alexander Kanavin <alex.kanavin@gmail.com> | 2024-04-19 14:19:35 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2024-04-22 22:05:57 +0100 |
| commit | cd01fd2bb15b5324328afbaf12a702d9da8dc46d (patch) | |
| tree | a8ac1c0863afeceb56607947c7ab9bbaff506391 | |
| parent | 7585f36f1408752986c7334aa530cda4cc8632ae (diff) | |
| download | poky-cd01fd2bb15b5324328afbaf12a702d9da8dc46d.tar.gz | |
busybox: submit CVE-2022-28391 patches upstream
(From OE-Core rev: 40ecc0219441998f9ca986f0ca599d1c2d2a74fe)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-core/busybox/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch b/meta/recipes-core/busybox/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch index 4635250170..ceb3ad7250 100644 --- a/meta/recipes-core/busybox/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch +++ b/meta/recipes-core/busybox/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch | |||
| @@ -5,7 +5,7 @@ Subject: [PATCH 1/2] libbb: sockaddr2str: ensure only printable characters are | |||
| 5 | returned for the hostname part | 5 | returned for the hostname part |
| 6 | 6 | ||
| 7 | CVE: CVE-2022-28391 | 7 | CVE: CVE-2022-28391 |
| 8 | Upstream-Status: Pending | 8 | Upstream-Status: Submitted [https://bugs.busybox.net/show_bug.cgi?id=15001] |
| 9 | Signed-off-by: Ariadne Conill <ariadne@dereferenced.org> | 9 | Signed-off-by: Ariadne Conill <ariadne@dereferenced.org> |
| 10 | Signed-off-by: Steve Sakoman <steve@sakoman.com> | 10 | Signed-off-by: Steve Sakoman <steve@sakoman.com> |
| 11 | --- | 11 | --- |
diff --git a/meta/recipes-core/busybox/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch b/meta/recipes-core/busybox/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch index 0d7409ddc3..1dbc3388a4 100644 --- a/meta/recipes-core/busybox/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch +++ b/meta/recipes-core/busybox/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch | |||
| @@ -8,7 +8,7 @@ Otherwise, terminal sequences can be injected, which enables various terminal in | |||
| 8 | attacks from DNS results. | 8 | attacks from DNS results. |
| 9 | 9 | ||
| 10 | CVE: CVE-2022-28391 | 10 | CVE: CVE-2022-28391 |
| 11 | Upstream-Status: Pending | 11 | Upstream-Status: Submitted [https://bugs.busybox.net/show_bug.cgi?id=15001] |
| 12 | Signed-off-by: Ariadne Conill <ariadne@dereferenced.org> | 12 | Signed-off-by: Ariadne Conill <ariadne@dereferenced.org> |
| 13 | Signed-off-by: Steve Sakoman <steve@sakoman.com> | 13 | Signed-off-by: Steve Sakoman <steve@sakoman.com> |
| 14 | --- | 14 | --- |