kumquat-buildroot

NetCube-Systems-Austria/kumquat-buildroot

Go to file

Fabrice Fontaine e4ef408e8f package/sysstat: security bump to version 12.6.1 Fix CVE-2022-39377: sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). Despite what is written above in the CVE announcement, and as written in the Changelog, the fix is also included in version 12.6.1 (12.7.1 is a development version): `c1e631eddc` As a consequence, 12.6.1 is still reported as being affected. Until the NVD is updated appropriately, we mark the CVE as ignored with a comment that explains why. Note: that commit is not reachable from any branch in the sysstat repository, and Github warns about that, but the commit does belong to the upstream repository and is reachable from the 12.6.1 tag (it looks like sysstat only pushes tags-with-history for fix releases). https://github.com/sysstat/sysstat/security/advisories/GHSA-q8r6-g56f-9w7x https://github.com/sysstat/sysstat/blob/v12.6.1/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> [yann.morin.1998@free.fr: - ignore the CVE, explain why - explain why github warns about the fix commit ] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>		2022-11-20 12:05:13 +01:00
arch	arch/arch.mk.xtensa: relax check on overlay file to apply only to internal toolchains	2022-11-13 22:32:31 +01:00
board	board/zynqmp/kria/kv260/kv260.sh: fix u-boot.itb without CONFIG_MULTI_DTB_FIT option	2022-11-14 21:58:08 +01:00
boot	boot/arm-trusted-firmware: fix SSP disable in v2.2	2022-11-13 21:54:57 +01:00
configs	configs/kontron_bl_imx8mm_defconfig: bump U-boot to 2022.10	2022-11-13 14:31:20 +01:00
docs	docs/website: update for 2022.02.7	2022-11-17 15:18:33 +01:00
fs	fs/cpio: don't fail systems without /dev/null	2022-11-01 21:44:49 +01:00
linux	package/linux: don't leak host timezone into linux version string	2022-11-05 15:09:33 +01:00
package	package/sysstat: security bump to version 12.6.1	2022-11-20 12:05:13 +01:00
support	Update for 2022.08.2	2022-11-17 08:24:23 +01:00
system	package/systemd: add setting for systemd default.target	2022-05-02 22:58:44 +02:00
toolchain	package/glibc: headers >= 5.4 needed on RISC-V 32-bit	2022-10-30 12:44:15 +01:00
utils	utils/genrandconfig: disallow configs with BR2_XTENSA_CUSTOM=y	2022-11-13 22:37:27 +01:00
.clang-format	.clang-format: initial import from Linux 5.15.6	2022-01-01 15:01:13 +01:00
.defconfig
.flake8	Revert ".flake8: fix check for 80/132 columns"	2021-01-02 17:38:20 +01:00
.gitignore
.gitlab-ci.yml	utils/checkpackagelib/lib_sysv: run shellcheck	2022-02-06 18:27:03 +01:00
.shellcheckrc	utils/check-package: improve shellcheck reproducibility	2022-07-25 23:52:47 +02:00
CHANGES	Update for 2022.02.7	2022-11-17 15:15:54 +01:00
Config.in	Config.in: move toolchain menu before build options	2022-07-27 11:11:19 +02:00
Config.in.legacy	package/libdcadec: remove package	2022-11-05 19:09:54 +01:00
COPYING
DEVELOPERS	DEVELOPERS: drop entry related to inexisting directory	2022-11-11 22:58:42 +01:00
Makefile	Update for 2022.11-rc2	2022-11-16 13:58:00 +01:00
Makefile.legacy
README	docs: move the IRC channel away from Freenode	2021-05-29 22:16:23 +02:00

README

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on OFTC IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches