| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: busybox | Distribution: openSUSE:Factory:zSystems |
| Version: 1.36.1 | Vendor: openSUSE |
| Release: 3.1 | Build date: Sat Dec 9 23:57:56 2023 |
| Group: System/Base | Build host: s390zl21 |
| Size: 1461329 | Source RPM: busybox-1.36.1-3.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://www.busybox.net/ | |
| Summary: Minimalist variant of UNIX utilities linked in a single executable | |
BusyBox combines tiny versions of many common UNIX utilities into a single executable. It provides minimalist replacements for utilities usually found in fileutils, shellutils, findutils, textutils, grep, gzip, tar, and more. BusyBox provides a fairly complete POSIX environment for small or embedded systems. The utilities in BusyBox generally have fewer options than their GNU cousins. The options that are included provide the expected functionality and behave much like their GNU counterparts. BusyBox is for emergency and special use cases. Replacing the standard tools in a system is not supported. Some tools don't work out of the box but need special configuration, like udhcpc, the dhcp client.
GPL-2.0-or-later
* Fri Dec 08 2023 Thorsten Kukuk <kukuk@suse.com>
- Install udhcpc and udhcpc6 into the same directory
(udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
configuration and does not work out of the box [bsc#1217883]
* Tue Aug 29 2023 Radoslav Kolev <radoslav.kolev@suse.com>
- Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
in ash (CVE-2022-48174, bsc#1214538)
* Fri Jun 02 2023 Dirk Müller <dmueller@suse.com>
- update to 1.36.1:
* fixes for line editing, detection of hardware sha1/sha256
support, unzip
(do not create suid/sgid files unless -K),
shell (printf and sleep with no args, handing of SIGINT
in sleep), ed.
* Fri Jan 06 2023 Radoslav Kolev <radoslav.kolev@suse.com>
- Update to version 1.36.0
- awk: fix use after free (CVE-2022-30065)
- various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
- improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
- new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
- ash: enable sleep built-in
- enable new applets: seedrng, tree, tsort
- enable SHA hardware acceleration
- try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream
* Tue Dec 27 2022 Ludwig Nussel <lnussel@suse.com>
- Replace transitional %usrmerged macro with regular version check (boo#1206798)
* Wed Nov 23 2022 Dominique Leuenberger <dimstar@opensuse.org>
- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
boo#1199744).
* Mon Nov 14 2022 Radoslav Kolev <radoslav.kolev@suse.com>
- Fix build under SLE-12
* Mon Oct 17 2022 Radoslav Kolev <radoslav.kolev@suse.com>
- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
* CVE-2014-9645 (bsc#914660): strips of / in module names that can lead to loading unwanted modules
* Thu Jun 30 2022 Ludwig Nussel <lnussel@suse.de>
- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag
* Fri Jun 10 2022 Marcos de Souza <mpdesouza@suse.com>
- Enable switch_root
With this change virtme --force-initramfs works as expected.
* Wed Mar 30 2022 Marcos de Souza <mpdesouza@suse.com>
- Enable udhcpc
* Wed Mar 23 2022 Dominique Leuenberger <dimstar@opensuse.org>
- BuildRequire hostname: the test suite wants to compare the output
of 'hostname' against 'busybox hostname'. We should not rely
hostname to be present in the build environment.
* Wed Jan 12 2022 Thorsten Kukuk <kukuk@suse.com>
- Update to 1.35.0
- awk: fix printf %%, fix read beyond end of buffer
- chrt: silence analyzer warning
- libarchive: remove duplicate forward declaration
- mount: "mount -o rw ...." should not fall back to RO mount
- ps: fix -o pid=PID,args interpreting entire "PID,args" as header
- tar: prevent malicious archives with long name sizes causing OOM
- udhcpc6: fix udhcp_find_option to actually find DHCP6 options
- xxd: fix -p -r
- support for new optoins added to basename, cpio, date, find,
mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio
* Thu Jan 06 2022 Radoslav Kolev <radoslav.kolev@suse.com>
- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
* CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
* CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
* CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
* CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
* CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
* CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
* CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
* CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
* CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
- CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
- CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
- CVE-2018-1000517 (bsc#1099260): Heap-based buffer overflow in the retrieve_file_data()
- CVE-2011-5325 (bsc#951562): tar directory traversal
- CVE-2018-1000500 (bsc#1099263): wget: Missing SSL certificate validation
* Sat Oct 30 2021 Stephan Kulow <coolo@suse.com>
- Disable crc32 to avoid conflict with perl-Archive-Zip
(until some project really requires crc32)
* Wed Oct 27 2021 Egbert Eich <eich@suse.com>
- Build busybox-warewulf3 for i586 as well. This allowes to set up
i586 nodes.
* Fri Oct 22 2021 Lukas Lansky <lukas.lansky@suse.com>
- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo
* Thu Oct 21 2021 Stephan Kulow <coolo@suse.com>
- Remove the duplicated config entries and construct the snippets
on the fly based on the main config. This way it's easier to
keep track of what's different
* Thu Oct 21 2021 Stephan Kulow <coolo@suse.com>
- Update to 1.34.1:
* build system: use SOURCE_DATE_EPOCH for timestamp if available
* many bug fixes and new features
* touch: make FEATURE_TOUCH_NODEREF unconditional
* Sat Oct 09 2021 Egbert Eich <eich@suse.com>
- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
flavor of busybox with the
additional setting:
CONFIG_REBOOT=y
CONFIG_SWITCH_ROOT=y
CONFIG_CTTYHACK=y
(bsc#1191514).
* Fri May 07 2021 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.33.1:
* httpd: fix sendfile
* ash: fix HISTFILE corruptio
* ash: fix unset variable pattern expansion
* traceroute: fix option parsing
* gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature
* Thu Jan 28 2021 Thorsten Kukuk <kukuk@suse.com>
- Update to version 1.33.0
- many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux
* Tue Jan 05 2021 Thorsten Kukuk <kukuk@suse.com>
- Update to version 1.32.1
- fixes a case where in ash, "wait" never finishes.
* Tue Jan 05 2021 Thorsten Kukuk <kukuk@suse.com>
- sendmail-ignore-F-option.patch: ignore -F option as used by
cron (workaround for [bbn#13426])
* Wed Dec 09 2020 Thorsten Kukuk <kukuk@suse.com>
- Don't require nogroup for adduser command, as this can lead to
a dependency cycle with sysusers-tools.
* Mon Dec 07 2020 Thorsten Kukuk <kukuk@suse.com>
- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm
* Fri Nov 20 2020 Ludwig Nussel <lnussel@suse.de>
- prepare usrmerge (boo#1029961)
* Tue Sep 29 2020 Thorsten Kukuk <kukuk@suse.com>
- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities
* Fri Aug 21 2020 Thorsten Kukuk <kukuk@suse.com>
- Set CONFIG_FIRST_SYSTEM_ID to 101 as we use 100 already as fixed
ID for a system account.
- Require group "nogroup" (used by adduser)
* Wed Aug 12 2020 Thorsten Kukuk <kukuk@suse.com>
- Enable SELinux for the dynamic version
* Wed Jul 22 2020 Thorsten Kukuk <kukuk@suse.com>
- Update to busybox 1.32.0
- many bugfixes and new features
- Obsoletes busybox-no-stime.patch
* Wed Jul 22 2020 Thorsten Kukuk <kukuk@suse.com>
- Disable ftpget/ftpput, non-standard, ftp is outdated
- Disable run-init, we don't use that
- Disable cttyhack, we don't provide the calling tools
- Disable dnsd
* Sat Jul 11 2020 Thorsten Kukuk <kukuk@suse.com>
- Enable syslogd for containers
* Wed Jul 08 2020 Stephan Kulow <coolo@suse.com>
- Enable testsuite and package it for later rerun (for QA,
jsc#CAR-15)
* Fri Apr 17 2020 Thorsten Kukuk <kukuk@suse.com>
- Re-add modutils
* Sat Mar 21 2020 Thorsten Kukuk <kukuk@suse.com>
- Set last ID to 65533, else nobody cannot be created
* Fri Mar 13 2020 Thorsten Kukuk <kukuk@suse.com>
- Merge config of default, -container and -static to be able to
drop -container variant
* Sat Feb 22 2020 Thorsten Kukuk <kukuk@suse.com>
- Disable CONFIG_FEATURE_NSLOOKUP_BIG as it leads to incompatible
nslookup behavior
* Mon Feb 10 2020 Thorsten Kukuk <kukuk@suse.com>
- Eanble FEATURE_TFTP_HPA_COMPAT and SH_MATH_BASE
* Sat Feb 08 2020 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 1.31.1:
+ Bug fix release. 1.30.1 has fixes for dc, ash (PS1 expansion
fix), hush, dpkg-deb, telnet and wget.
- Changes from version 1.31.0:
+ many bugfixes and new features.
- Add busybox-no-stime.patch: stime() has been deprecated in glibc
2.31 and replaced with clock_settime().
/etc/man.conf /usr/bin/busybox /usr/bin/busybox.install /usr/share/busybox /usr/share/busybox/busybox.links /usr/share/doc/packages/busybox /usr/share/doc/packages/busybox/mdev.txt /usr/share/licenses/busybox /usr/share/licenses/busybox/LICENSE /usr/share/man/man1/busybox.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Mar 9 12:50:11 2024