Fixes the following security issue:
- CVE-2021-28831: decompress_gunzip.c in BusyBox through 1.32.1 mishandles
the error bit on the huft_build result pointer, with a resultant invalid
free or segmentation fault, via malformed gzip data.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit
|
||
---|---|---|
.. | ||
0001-networking-libiproute-use-linux-if_packet.h-instead-.patch | ||
0002-Makefile.flags-strip-non-l-arguments-returned-by-pkg.patch | ||
0003-update_passwd-fix-context-variable.patch | ||
0004-decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch | ||
busybox-minimal.config | ||
busybox.config | ||
busybox.hash | ||
busybox.mk | ||
Config.in | ||
inittab | ||
mdev.conf | ||
S01syslogd | ||
S02klogd | ||
S02sysctl | ||
S10mdev | ||
S15watchdog | ||
S50telnet | ||
udhcpc.script |