diff options
| author | Peter Marko <peter.marko@siemens.com> | 2025-07-12 18:06:56 +0200 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-07-21 09:17:59 -0700 |
| commit | b7460a996b8d6b218dfc0a5faf4c1a6fde1c3a33 (patch) | |
| tree | abfd3700d6d3899b1733f55cf96d8bdbcb19ccdc /scripts/patchtest | |
| parent | 7330c95d85dd94a92de60e646a90c8a67e7ed9ce (diff) | |
| download | poky-b7460a996b8d6b218dfc0a5faf4c1a6fde1c3a33.tar.gz | |
busybox: apply patch for CVE-2023-39810
Backport patch referencing this CVE.
Note that the hardening is not activated by default, it adds defconfig
option to enable it.
Since it introduces a breaking change, it shouldn't be enabled in LTS
release by default.
This patch makes busybox cpio equivalent in this release to what is
currently in master and in kirkstone.
Also note that gnu cpio also does not have this hardening, but the CVE
is created only against busybox.
(From OE-Core rev: c9d071556aa2e066abffc35031d86ee8ee9437d8)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/patchtest')
0 files changed, 0 insertions, 0 deletions