From unknown Sat Sep 06 14:24:02 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#73689] [PATCH] gnu: toybox: Update to 0.8.11. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 08 Oct 2024 06:23:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 73689 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 73689@debbugs.gnu.org Cc: Nicolas Graves X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.17283685423331 (code B ref -1); Tue, 08 Oct 2024 06:23:01 +0000 Received: (at submit) by debbugs.gnu.org; 8 Oct 2024 06:22:22 +0000 Received: from localhost ([127.0.0.1]:50387 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sy3bv-0000ra-9C for submit@debbugs.gnu.org; Tue, 08 Oct 2024 02:22:22 -0400 Received: from lists.gnu.org ([209.51.188.17]:33436) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sy3bs-0000rS-SE for submit@debbugs.gnu.org; Tue, 08 Oct 2024 02:22:17 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sy3Zd-0000yu-5z for guix-patches@gnu.org; Tue, 08 Oct 2024 02:19:58 -0400 Received: from 16.mo550.mail-out.ovh.net ([178.33.104.224]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sy3Za-0002ec-Ou for guix-patches@gnu.org; Tue, 08 Oct 2024 02:19:56 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.109.140.207]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XN5TV331Rz1TZL for ; Tue, 8 Oct 2024 06:19:42 +0000 (UTC) Received: from ghost-submission-55b549bf7b-ggdqn (unknown [10.108.54.28]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id E791F1FD46; Tue, 8 Oct 2024 06:19:41 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-55b549bf7b-ggdqn with ESMTPSA id Sm89Kf3OBGdiQAAAT2A5Bg (envelope-from ); Tue, 08 Oct 2024 06:19:41 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G005351e2afc-7fc1-4565-8731-2e34cbfa40c1, 83E631236A2B63DF756DDFD3729F0B2EAC058DF1) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Tue, 8 Oct 2024 08:19:26 +0200 Message-ID: <20241008061939.22005-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 14915359017073500898 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdeftddguddtjecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeekffegteffgfffjeegjedvfffgtddvueeutefgfeeuvdejgedvgeejjeevueeuveenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtfeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepghhuihigqdhprghttghhvghssehgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=Hfpd0mp8djXucQvsqyrLteYAKK1i86pDQEeRjmHFw9Q=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1728368382; v=1; b=CA4JVc9qtH+10kQEGo6jPdtHkllVOZcL6CGxrGTP2aBU/6uMTVOltBfsedLyuAkHL3L3YM3J Dw+Doj3sg1iDnjfmiHs5JsDQucNLIkGqcpMlZ4eYhyGcpGbk3NOeRTj4ESPd9u/jeIZuKEpAoXv Gdm0nKySA8NCuYbaAtJzTqYPK7nauczALn54k8OAxhPmgvDas82MINZMtfeddbB9AZDaVWz7Tv2 Asc9nKzdJH7mFdXHEOx2j9U9deYZpaBHDh8R/ltbFv7FnnMjhCk8bT66YFkg+dxTRf38bwLalqt 2jeBDyxrM3ayJ2/eM98J1QjKoo9slBc2VINQtaJmAKzUA== Received-SPF: pass client-ip=178.33.104.224; envelope-from=ngraves@ngraves.fr; helo=16.mo550.mail-out.ovh.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) This fixes CVE-2022-32298. * gnu/packages/busybox.scm (toybox): Update to 0.8.11. [arguments]<#:phases>: Adjust phase 'fix-or-skip-broken-tests. --- gnu/packages/busybox.scm | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/gnu/packages/busybox.scm b/gnu/packages/busybox.scm index a8b775b944..f811a7175f 100644 --- a/gnu/packages/busybox.scm +++ b/gnu/packages/busybox.scm @@ -130,7 +130,7 @@ (define-public busybox (define-public toybox (package (name "toybox") - (version "0.8.7") + (version "0.8.11") (source (origin (method url-fetch) (uri (string-append @@ -138,7 +138,7 @@ (define-public toybox version ".tar.gz")) (sha256 (base32 - "150lvp7hf9ndafvmr42kb8xi86hxjd2zj4binwwhgjw2dwrvy25m")))) + "1p37zqxhj48klwwxl8jc2hw1x7pr2w39bfb1nx6qghaf5y1kzahm")))) (build-system gnu-build-system) (arguments (list #:make-flags @@ -154,11 +154,15 @@ (define-public toybox (lambda _ ;; Some tests expect $USER to magically be the current user. (setenv "USER" (passwd:name (getpwnam (geteuid)))) + ;; This uses /bin/sh. + (substitute* "tests/timeout.test" + (("/bin/sh") (which "bash"))) ;; This expects directories to be exactly 4K. They aren't! (delete-file "tests/du.test") ;; Delete tests that expect a root or 0 user to exist. (substitute* "tests/id.test" - (("^testing .*[ \\(]root.*") "")))) + (("^testing .*[ \\(]root.*") "")) + (delete-file "tests/tar.test"))) (add-after 'install 'remove-usr-directory (lambda* (#:key outputs #:allow-other-keys) (delete-file-recursively (string-append #$output "/usr"))))) -- 2.46.0 From unknown Sat Sep 06 14:24:02 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Nicolas Graves Subject: bug#73689: closed (gnu: toybox: Update to 0.8.11. [security fixes]) Message-ID: References: <875xpyrck6.fsf@gmail.com> <20241008061939.22005-1-ngraves@ngraves.fr> X-Gnu-PR-Message: they-closed 73689 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 73689@debbugs.gnu.org Date: Fri, 11 Oct 2024 13:33:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1728653583-10832-1" This is a multi-part message in MIME format... ------------=_1728653583-10832-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #73689: [PATCH] gnu: toybox: Update to 0.8.11. [security fixes] which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 73689@debbugs.gnu.org. --=20 73689: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D73689 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1728653583-10832-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 73689-done) by debbugs.gnu.org; 11 Oct 2024 13:32:42 +0000 Received: from localhost ([127.0.0.1]:33826 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1szFl3-0002nz-Uw for submit@debbugs.gnu.org; Fri, 11 Oct 2024 09:32:42 -0400 Received: from mail-ej1-f49.google.com ([209.85.218.49]:52281) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1szFky-0002ni-40 for 73689-done@debbugs.gnu.org; Fri, 11 Oct 2024 09:32:39 -0400 Received: by mail-ej1-f49.google.com with SMTP id a640c23a62f3a-a99791e4defso151862066b.0 for <73689-done@debbugs.gnu.org>; Fri, 11 Oct 2024 06:32:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1728653482; x=1729258282; darn=debbugs.gnu.org; h=mime-version:message-id:date:subject:to:from:from:to:cc:subject :date:message-id:reply-to; bh=rgbmACC2cl1KCYH2fD5yuMBZSYO44Lo963g7P7uBUCA=; b=JcSSnYmeP9bW2AIFVK7yeY6i6NBS6nUcG/nyIMljLuUaHWGw84b+/vGmEj8d7heY1z DCaG2JPN8E/0GQQXhFygRd+8OxceV6TzCGsuoBij8OK6Btjnla74KApfD2zKe4wQHomJ Np55XDl9sntPW7i75Pw1GSOUiRgjSpROJ1LhQQG7W53/QoM4h1bN1awfxVlh/18gTU5e mvwpI++fsgct2u95wxur6flYq5+PdHGPKqjBSzu1M18YBRNbKUVxLOImIbnkYjMiUst1 PlQwV9gpFg3+Ijy6KTl6G3N8tdcUYkng+QXjdn51o9soiH8W/w1cg5ata+iWam8y3mHF 0gow== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1728653482; x=1729258282; h=mime-version:message-id:date:subject:to:from:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=rgbmACC2cl1KCYH2fD5yuMBZSYO44Lo963g7P7uBUCA=; b=m68Xzsrym3AcV6oSuRR9PuhT5Dy2FTkpIMxKoq8Qpn1NE/wdsWhWVHi+1zA9kaBpq0 PKB/ofge3WB2i2v8+mCPw+O6PP9M0XzxO1bX2BblSr3sR8yHLX2LLnOExHci+8d7C7dE UCgZxhTDfAqVk4xY90gNAUGQDYiFfRm8wiBfwjAp5w3pTqEYUTLSq4N41Fk7JxDXcLtJ SgT8oztnVh+ZMlJYDkWkXire012KG4qlKzBQpFrMm3es5NvZf5LiQV6zYbPy/1QzL2zk cRKbJzMEnN02XN812B2UTxKonD8XnpOoVpeNTemgq7s9i577jTd8HkYcSSLxBUqiqVp8 b8bA== X-Gm-Message-State: AOJu0YxHDKwfL1R+XXTM5Ly6f/9RoxJJ+lN4MJJJSYZqz6ChR3Z7zSuD phv3PjJBURzzECb8sb+VSIY9qFJ/iJ2PtoJVzxXSk/adNG052lYVpT+kk8wS X-Google-Smtp-Source: AGHT+IHnsIMHH4n9eJt/nUU1V1pbbI78wVdwLX3aDXo6TVyG8R/dfl+2qT9tNdVTr0tNF+p+OkGi/g== X-Received: by 2002:a05:6402:2688:b0:5c9:446c:88f8 with SMTP id 4fb4d7f45d1cf-5c948cb38camr2255335a12.10.1728653482443; Fri, 11 Oct 2024 06:31:22 -0700 (PDT) Received: from guxtil (cpc100684-bagu15-2-0-cust967.1-3.cable.virginm.net. [86.8.111.200]) by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-5c93711bc1bsm1940879a12.23.2024.10.11.06.31.21 for <73689-done@debbugs.gnu.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 11 Oct 2024 06:31:21 -0700 (PDT) From: Sharlatan Hellseher To: 73689-done@debbugs.gnu.org Subject: gnu: toybox: Update to 0.8.11. [security fixes] Date: Fri, 11 Oct 2024 14:31:21 +0100 Message-ID: <875xpyrck6.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 73689-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain Pushed as e347386a7ff96fce644894ba2a0889d273500e11 to master. Thanks, Oleg --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmEeB3micIcJkGAhndtcnv/Ys0rUFAmcJKKkACgkQdtcnv/Ys 0rW6XA/+NAXPyXZeU6mqS1eva1avTw29VYmIGNzr8ATfp4K5O93w9sCGoXGbjjvr wVQGYbHggHtCJ68pqcRKSNMX78Q2apcFQTs+nCCcgmXkzdz82fG4okY1SCmgb6Co eQ6rK+VnqRuZSW+EHCG9170rz1weprOmpUbpfO+up5LGBMVpO5FRrh4L9kgM5CWs m4L7qhQY1qFbCJeeBB1mzDB6Z62RFyMpFiXKQeNCVjkr0clodLhd1KJPMzrfcF+f FKbUGKDNNYNkYPrXOYMcWmii6CewALq7PVtL+E6CuhX54C00BN5NJ0ByOzvWWCrr ddfkSDTWsCgFYd+Ul8v+ZOZ/TS0jlVX4HqZuznPiocDAVBooTKWcJ1Uld3wUWYb3 dcnzjxKCh4ISwnM+w4naSYHNgxW9bTK2JMFzyybEuSXd/+qTkSd8MkwSLMBL85wS ibACgGT7xIuZYJEQmrW2Yja1KGBMnMt7L5C2pnYgTf1ZX2SVi7go4TD9Pv+Mx+bJ p8BAGguWMrKCZirDvE8wuRziyO3M3X341Z9gG20jTH8qwHYpGZcDbhX5SW6+KDNK cl4NT4GmdQVzBIq31UhITdckG70yh6rj+f04w3kG78/iZQM00Q+4e8cWCRAlWOd+ vgvJTJ6u/m+k8Bn1KBhlH4kyIJf5XT1TwHE81JqvvpK1924IGqc= =jMZZ -----END PGP SIGNATURE----- --=-=-=-- ------------=_1728653583-10832-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 8 Oct 2024 06:22:22 +0000 Received: from localhost ([127.0.0.1]:50387 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sy3bv-0000ra-9C for submit@debbugs.gnu.org; Tue, 08 Oct 2024 02:22:22 -0400 Received: from lists.gnu.org ([209.51.188.17]:33436) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sy3bs-0000rS-SE for submit@debbugs.gnu.org; Tue, 08 Oct 2024 02:22:17 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sy3Zd-0000yu-5z for guix-patches@gnu.org; Tue, 08 Oct 2024 02:19:58 -0400 Received: from 16.mo550.mail-out.ovh.net ([178.33.104.224]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sy3Za-0002ec-Ou for guix-patches@gnu.org; Tue, 08 Oct 2024 02:19:56 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.109.140.207]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XN5TV331Rz1TZL for ; Tue, 8 Oct 2024 06:19:42 +0000 (UTC) Received: from ghost-submission-55b549bf7b-ggdqn (unknown [10.108.54.28]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id E791F1FD46; Tue, 8 Oct 2024 06:19:41 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-55b549bf7b-ggdqn with ESMTPSA id Sm89Kf3OBGdiQAAAT2A5Bg (envelope-from ); Tue, 08 Oct 2024 06:19:41 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G005351e2afc-7fc1-4565-8731-2e34cbfa40c1, 83E631236A2B63DF756DDFD3729F0B2EAC058DF1) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves To: guix-patches@gnu.org Subject: [PATCH] gnu: toybox: Update to 0.8.11. [security fixes] Date: Tue, 8 Oct 2024 08:19:26 +0200 Message-ID: <20241008061939.22005-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 14915359017073500898 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdeftddguddtjecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeekffegteffgfffjeegjedvfffgtddvueeutefgfeeuvdejgedvgeejjeevueeuveenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtfeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepghhuihigqdhprghttghhvghssehgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=Hfpd0mp8djXucQvsqyrLteYAKK1i86pDQEeRjmHFw9Q=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1728368382; v=1; b=CA4JVc9qtH+10kQEGo6jPdtHkllVOZcL6CGxrGTP2aBU/6uMTVOltBfsedLyuAkHL3L3YM3J Dw+Doj3sg1iDnjfmiHs5JsDQucNLIkGqcpMlZ4eYhyGcpGbk3NOeRTj4ESPd9u/jeIZuKEpAoXv Gdm0nKySA8NCuYbaAtJzTqYPK7nauczALn54k8OAxhPmgvDas82MINZMtfeddbB9AZDaVWz7Tv2 Asc9nKzdJH7mFdXHEOx2j9U9deYZpaBHDh8R/ltbFv7FnnMjhCk8bT66YFkg+dxTRf38bwLalqt 2jeBDyxrM3ayJ2/eM98J1QjKoo9slBc2VINQtaJmAKzUA== Received-SPF: pass client-ip=178.33.104.224; envelope-from=ngraves@ngraves.fr; helo=16.mo550.mail-out.ovh.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit Cc: Nicolas Graves X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) This fixes CVE-2022-32298. * gnu/packages/busybox.scm (toybox): Update to 0.8.11. [arguments]<#:phases>: Adjust phase 'fix-or-skip-broken-tests. --- gnu/packages/busybox.scm | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/gnu/packages/busybox.scm b/gnu/packages/busybox.scm index a8b775b944..f811a7175f 100644 --- a/gnu/packages/busybox.scm +++ b/gnu/packages/busybox.scm @@ -130,7 +130,7 @@ (define-public busybox (define-public toybox (package (name "toybox") - (version "0.8.7") + (version "0.8.11") (source (origin (method url-fetch) (uri (string-append @@ -138,7 +138,7 @@ (define-public toybox version ".tar.gz")) (sha256 (base32 - "150lvp7hf9ndafvmr42kb8xi86hxjd2zj4binwwhgjw2dwrvy25m")))) + "1p37zqxhj48klwwxl8jc2hw1x7pr2w39bfb1nx6qghaf5y1kzahm")))) (build-system gnu-build-system) (arguments (list #:make-flags @@ -154,11 +154,15 @@ (define-public toybox (lambda _ ;; Some tests expect $USER to magically be the current user. (setenv "USER" (passwd:name (getpwnam (geteuid)))) + ;; This uses /bin/sh. + (substitute* "tests/timeout.test" + (("/bin/sh") (which "bash"))) ;; This expects directories to be exactly 4K. They aren't! (delete-file "tests/du.test") ;; Delete tests that expect a root or 0 user to exist. (substitute* "tests/id.test" - (("^testing .*[ \\(]root.*") "")))) + (("^testing .*[ \\(]root.*") "")) + (delete-file "tests/tar.test"))) (add-after 'install 'remove-usr-directory (lambda* (#:key outputs #:allow-other-keys) (delete-file-recursively (string-append #$output "/usr"))))) -- 2.46.0 ------------=_1728653583-10832-1--