From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 04 Jan 2023 10:10:53 +0100 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1pCznS-001IJM-9R for lore@lore.pengutronix.de; Wed, 04 Jan 2023 10:10:53 +0100 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1pCznQ-000261-0U; Wed, 04 Jan 2023 10:10:52 +0100 Received: from h1.cmg2.smtp.forpsi.com ([81.2.195.188]) by metis.ext.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pCzmk-00024g-Q5 for ptxdist@pengutronix.de; Wed, 04 Jan 2023 10:10:11 +0100 Received: from lenoch ([91.218.190.200]) by cmgsmtp with ESMTPSA id Czmhpno13v5uICzmipyT1r; Wed, 04 Jan 2023 10:10:09 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=triops.cz; s=f2019; t=1672823409; bh=Ocm5/UuOlm+RuDudQ7gz0zTQIYkESbyoF+SkhNfLmXw=; h=Date:From:To:Subject:Message-ID:MIME-Version:Content-Type; b=SKerfr+//2Rtl7cxbO5QpgfFBuBfm6k2Dw3YTFemvjQeeaW42meS1/IWAS32tMpHm KGYM/A+NCpRwn+u2RGydySFg7Qi8S6VsBdKljd485in7IQMLydQTSOaHP8G8TWtyMv Ho5L1Bu4LBvNa23InEIb5wV3eHMK+etvtugTioPs9JN+Dc1VquZIIgLmwuYcy/Lcwu Jh9FEZfXaq+jEbGuEKfK16szdaAIT6CSjAFk+rVfFBP0iWD0Ua3EeDUnTHfVaBdwoS 0dnTXO8mAFRGbER0cucw8jFsc+E5h/rb5bZFzsg2pjQm3D2T/KIYOAotDZ4lMSyIE3 urAuIB49tcdjw== Date: Wed, 4 Jan 2023 10:10:07 +0100 From: Ladislav Michl To: ptxdist@pengutronix.de Message-ID: References: <20230103222922.2143458-1-christian.melki@t2data.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20230103222922.2143458-1-christian.melki@t2data.com> X-CMAE-Envelope: MS4wfGjp/m/AkKrCyCnpdbbmilDk5pboBaeHEZzWOTcy/XiN2WBwmt6kqsbSYNNQLP1bixcaU9lPI3BJc7AcUz3Cn+Sisa6s2sfLbjKmjaAnx1Fzc4keAGen 2Qch3BjoB6fY/wyWUryGi8hu7iF3OcCuOyFN62/hY5/eH4blYmoX/+h2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.2 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_NONE, URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [PATCH] busybox: Version bump. 1.35.0 -> 1.36.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false Hi Christian, On Tue, Jan 03, 2023 at 11:29:22PM +0100, Christian Melki wrote: > After a year of low activity and questionmarks, > we finally have a new release of busybox. > Release changelog @ https://busybox.net/ > > Not that many new features, mostly fixes. > One notable addition is seedrng. > But it marks a new release that includes security fixes. > > Plugs CVEs: CVE-2022-28391, CVE-2022-30065 > > * Forward the ptxdist specific patches. > * Remove one security patch to awk that has been fixed. > * Update busybox imported kconfig tree. > Not that many changes, since it has been a slow year. > New utilites: tsort, seedrng and tree. > > Signed-off-by: Christian Melki > --- > config/busybox/Config.in | 4 +- > config/busybox/coreutils/Config.in | 7 ++- > config/busybox/libbb/Config.in | 62 ++++++++++++++++--- > config/busybox/miscutils/Config.in | 12 ++++ > config/busybox/networking/Config.in | 2 +- > config/busybox/networking/udhcp/Config.in | 7 ++- > config/busybox/shell/Config.in | 5 ++ > ...wk-fix-use-after-free-CVE-2022-30065.patch | 29 --------- > .../0200-reactivate-check-for-tty.patch | 0 > ...-only-pass-real-libs-to-SELINUX_LIBS.patch | 2 +- > ...honour-SKIP_STRIP-and-don-t-strip-if.patch | 0 > .../{busybox-1.35.0 => busybox-1.36.0}/series | 3 +- > 12 files changed, 89 insertions(+), 44 deletions(-) > delete mode 100644 patches/busybox-1.35.0/0203-awk-fix-use-after-free-CVE-2022-30065.patch > rename patches/{busybox-1.35.0 => busybox-1.36.0}/0200-reactivate-check-for-tty.patch (100%) > rename patches/{busybox-1.35.0 => busybox-1.36.0}/0201-build-system-only-pass-real-libs-to-SELINUX_LIBS.patch (94%) > rename patches/{busybox-1.35.0 => busybox-1.36.0}/0202-scripts-trylink-honour-SKIP_STRIP-and-don-t-strip-if.patch (100%) > rename patches/{busybox-1.35.0 => busybox-1.36.0}/series (74%) It seems rules/busybox.make is ommited from the patch... ladis