* [ptxdist] Update of Busybox.
@ 2022-01-13 15:42 Christian Melki
2022-01-21 8:09 ` Michael Olbrich
0 siblings, 1 reply; 2+ messages in thread
From: Christian Melki @ 2022-01-13 15:42 UTC (permalink / raw)
To: ptxdist
Busybox saw > 14 CVE:s in 2021.
(Apparently someone got bored and started digging in Busybox...)
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
1.31.1 is > 2 yo.
https://www.cvedetails.com/product/7452/Busybox-Busybox.html?vendor_id=4282
Regards,
Christian
_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [ptxdist] Update of Busybox.
2022-01-13 15:42 [ptxdist] Update of Busybox Christian Melki
@ 2022-01-21 8:09 ` Michael Olbrich
0 siblings, 0 replies; 2+ messages in thread
From: Michael Olbrich @ 2022-01-21 8:09 UTC (permalink / raw)
To: Christian Melki; +Cc: ptxdist
On Thu, Jan 13, 2022 at 04:42:18PM +0100, Christian Melki wrote:
> Busybox saw > 14 CVE:s in 2021.
> (Apparently someone got bored and started digging in Busybox...)
> https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
>
> 1.31.1 is > 2 yo.
> https://www.cvedetails.com/product/7452/Busybox-Busybox.html?vendor_id=4282
Right, nobody cares enough about busybox in general to update it
regularly... And with the config stuff, it's a bit more complex than other
packages. I'll take care of it. It should hit master in the near future.
Michael
--
Pengutronix e.K. | |
Steuerwalder Str. 21 | http://www.pengutronix.de/ |
31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2022-01-21 8:09 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-01-13 15:42 [ptxdist] Update of Busybox Christian Melki
2022-01-21 8:09 ` Michael Olbrich
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox