Go to file
Fabrice Fontaine 2d32b043a6 package/connman: fix CVE-2022-3229{2,3}
Fix CVE-2022-32292: In ConnMan through 1.41, remote attackers able to
send HTTP requests to the gweb component are able to exploit a
heap-based buffer overflow in received_data to execute code.

Fix CVE-2022-32293: In ConnMan through 1.41, a man-in-the-middle attack
against a WISPR HTTP query could be used to trigger a use-after-free in
WISPR handling, leading to crashes or code execution.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2f2b4c80f4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-12-16 15:21:28 +01:00
arch arch/arch.mk.xtensa: relax check on overlay file to apply only to internal toolchains 2022-11-15 14:21:42 +01:00
board board/freescale/imx6ul(l)evk: fix repetition of "to" string 2022-12-06 23:19:52 +01:00
boot boot/edk2: refine license 2022-11-26 19:53:05 +01:00
configs configs/pine64: use mainline ATF 2022-11-13 22:20:38 +01:00
docs docs/manual: fixed some spelling mistakes 2022-12-07 14:35:11 +01:00
fs fs/oci: entrypoint and command are space-separated lists 2022-05-29 10:33:32 +02:00
linux {linux, linux-headers}: bump 4.{9, 14, 19}.x / 5.{4, 10, 15, 19}.x / 6.0.x series 2022-11-26 19:39:48 +01:00
package package/connman: fix CVE-2022-3229{2,3} 2022-12-16 15:21:28 +01:00
support Update for 2022.02.8 2022-12-10 16:17:16 +01:00
system system/skeleton: provide run/lock directory 2022-01-12 20:38:09 +01:00
toolchain toolchain/Config.in: fix check-package warning 2022-12-06 23:02:18 +01:00
utils utils/scanpypi: add LICENCE.TXT to the list of the license files 2022-11-26 19:54:48 +01:00
.clang-format .clang-format: initial import from Linux 5.15.6 2022-01-01 15:01:13 +01:00
.defconfig
.flake8
.gitignore
.gitlab-ci.yml utils/checkpackagelib/lib_sysv: run shellcheck 2022-02-06 18:27:03 +01:00
.shellcheckrc utils/check-package: improve shellcheck reproducibility 2022-08-18 07:59:26 +02:00
CHANGES Update for 2022.02.8 2022-12-10 16:17:16 +01:00
Config.in support/download: Add SFTP support 2022-01-06 09:34:05 +01:00
Config.in.legacy package/libopenssl: drop useless option for rc5 2022-11-27 21:12:46 +01:00
COPYING
DEVELOPERS package/mali-driver: remove Miquèl from the DEVELOPERS list 2022-11-26 19:22:31 +01:00
Makefile Update for 2022.02.8 2022-12-10 16:17:16 +01:00
Makefile.legacy
README

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on OFTC IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches