David Laing
|
50076c5031
|
busybox: 1.36.1 -> 1.37.0
Remove CVE patches now included upstream in 1.37.0:
- CVE-2022-28391 (sockaddr2str/nslookup sanitization)
- CVE-2022-48174 (shell segfault on malformed input)
- CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366 (awk fixes)
- tar TOCTOU symlink race condition
Add patch to fix aarch64-linux build failure where sha1_process_block64_shaNI
is x86-specific and needs architecture guards.
Release notes: https://busybox.net/news.html
Fix reference: https://lists.busybox.net/pipermail/busybox/2024-September/090943.html
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
2025-12-15 22:46:22 +00:00 |
|