Natanael Copa 1747c01fb9 main/busybox: fix CVE-2023-42364 and CVE-2023-42365 ...

backport upstream fix for CVEs and fix the regression that introduced.

ref: http://lists.busybox.net/pipermail/busybox/2024-May/090766.html
(cherry picked from commit 8a4bf5971168bf48201c05afda7bee0fbb188e13)

2024-06-10 07:11:47 +00:00

..

0001-awk-fix-use-after-free-CVE-2023-42363.patch

main/busybox: fix CVE-2023-4236[345]

2024-05-20 19:37:37 +02:00

0001-modutils-check-ELF-header-before-calling-finit_modul.patch

…

0001-wget-add-header-Accept.patch

main/busybox: fix wget headers

2024-03-11 13:17:58 +00:00

0002-adduser-default-to-sbin-nologin-as-shell-for-system-.patch

…

0003-ash-add-built-in-BB_ASH_VERSION-variable.patch

…

0004-Avoid-redefined-warnings-when-buiding-with-utmps.patch

…

0005-libbb-sockaddr2str-ensure-only-printable-characters-.patch

…

0006-modinfo-add-k-option-for-kernel-version.patch

…

0007-nologin-Install-applet-to-sbin-instead-of-usr-sbin.patch

…

0008-pgrep-add-support-for-matching-against-UID-and-RUID.patch

…

0009-properly-fix-wget-https-support.patch

…

0010-sed-check-errors-writing-file-with-sed-i.patch

…

0011-fsck-resolve-LABEL-.-UUID-.-spec-to-device.patch

…

0012-nslookup-sanitize-all-printed-strings-with-printable.patch

…

0013-ash-exec-busybox.static.patch

…

0014-app-location-for-cpio-vi-and-lspci.patch

…

0015-udhcpc-set-default-discover-retries-to-5.patch

…

0016-ping-make-ping-work-without-root-privileges.patch

…

0017-fbsplash-support-console-switching.patch

…

0018-fbsplash-support-image-and-bar-alignment-and-positio.patch

…

0019-depmod-support-generating-kmod-binary-index-files.patch

…

0020-Add-flag-for-not-following-symlinks-when-recursing.patch

…

0021-udhcpc-Don-t-background-if-n-is-given.patch

…

0023-tests-fix-tarball-creation.patch

…

0024-tests-musl-doesn-t-seem-to-recognize-UTC0-as-a-timez.patch

…

0025-Hackfix-to-disable-HW-acceleration-for-MD5-SHA1-on-x.patch

…

0026-lineedit-Handle-SIGWINCH-gracefully.patch

…

0027-umount-Implement-O-option-to-unmount-by-mount-option.patch

…

0028-ash-use-after-free-in-bash-pattern-substitution.patch

main/busybox: backport another fix for bash pattern substitutions

2023-05-25 05:48:21 +00:00

0029-awk-fix-use-after-realloc-CVE-2021-42380-closes-1560.patch

main/busybox: backport upstream awk and ash bug fixes

2023-06-28 06:57:12 +00:00

0030-shell-avoid-segfault-on-0-0-0-09J-.-Closes-15216.patch

main/busybox: backport upstream awk and ash bug fixes

2023-06-28 06:57:12 +00:00

0031-ash-initialize-basepf.buf-in-ash.patch

main/busybox: backport additional fix for ash

2023-09-09 17:12:07 +02:00

0032-install-Fix-chown-resetting-suid-sgid-bits-from-chmo.patch

main/busybox: backport upstream fix for install(1)

2023-10-02 00:24:32 +02:00

0033-find-fix-xdev-depth-and-delete.patch

main/busybox: fix find -xdev -depth return status

2023-11-02 13:56:03 +00:00

0034-udhcp-Avoid-leaking-uninitialized-stale-data.patch

main/busybox: backport upstream fix for udhcpc

2023-10-06 22:27:21 +02:00

0035-ash-fix-handling-of-single-quoted-strings-in-pattern.patch

main/busybox: backport yet another ash pattern substitution fix

2024-03-03 05:01:51 +01:00

0036-fix-dos-in-math.patch

main/busybox: add more paches from upstream

2024-04-04 11:21:52 +00:00

0037-awk.c-fix-CVE-2023-42366-bug-15874.patch

main/busybox: add more paches from upstream

2024-04-04 11:21:52 +00:00

0038-tsort-avoid-use-after-free.patch

main/busybox: add more paches from upstream

2024-04-04 11:21:52 +00:00

acpid.initd

…

acpid.logrotate

…

APKBUILD

main/busybox: fix CVE-2023-42364 and CVE-2023-42365

2024-06-10 07:11:47 +00:00

bbsuid.c

…

busybox-extras.post-install

…

busybox-extras.pre-deinstall

main/busybox: remove 'cd /' from scripts

2024-01-16 17:10:30 +00:00

busybox.post-install

main/busybox: run klogd as klogd user and not root

2023-12-20 14:59:51 +00:00

busybox.post-upgrade

main/busybox: remove 'cd /' from scripts

2024-01-16 17:10:30 +00:00

busybox.trigger

…

busyboxconfig

main/busybox: fix stack alignment on x86

2023-09-13 10:11:13 +02:00

busyboxconfig-extras

main/busybox: also fix stack alignment on i386 for -extras

2023-10-07 21:13:49 +00:00

crond.confd

…

crond.initd

…

CVE-2023-42364-CVE-2023-42365.patch

main/busybox: fix CVE-2023-42364 and CVE-2023-42365

2024-06-10 07:11:47 +00:00

dad.if-up

main/busybox: fix posix compliance of dad.if-up

2024-03-27 16:49:43 +00:00

default.script

…

dnsd.initd

…

httpd.initd

…

inetd.initd

…

klogd.confd

…

klogd.initd

main/busybox: run klogd as klogd user and not root

2023-12-20 14:59:51 +00:00

loadkmap.confd

…

loadkmap.initd

…

mdev.initd

…

ntpd.confd

…

ntpd.initd

main/busybox: run ntpd as ntp user and not root Inspired by https://filipsjanis.com/articles/linux-rootless-ntpd-capabilities.html

2023-11-09 07:49:53 +00:00

rdate.confd

main/busybox: fix default rdate server

2023-07-06 12:27:54 +00:00

rdate.initd

…

ssl_client.c

main/busybox: fix ssl error with domains ending with a dot

2024-04-26 11:57:08 +00:00

syslog.confd

…

syslog.initd

…

udhcpc.conf

main/busybox: add example /etc/udhcpc/udhcpc.conf

2023-08-16 10:24:53 +00:00

udhcpd.initd

…

watchdog.confd

…

watchdog.initd

…