GNU bug report logs -
#74004
[PATCH] gnu: busybox: Update to 1.37.0. [security fixes]
Previous Next
Reported by: Nicolas Graves <ngraves <at> ngraves.fr>
Date: Fri, 25 Oct 2024 07:42:02 UTC
Severity: normal
Tags: patch
Done: Zheng Junjie <zhengjunjie <at> iscas.ac.cn>
Bug is archived. No further changes may be made.
Full log
View this message in rfc822 format
[Message part 1 (text/plain, inline)]
Your bug report
#74004: [PATCH] gnu: busybox: Update to 1.37.0. [security fixes]
which was filed against the guix-patches package, has been closed.
The explanation is attached below, along with your original report.
If you require more details, please reply to 74004 <at> debbugs.gnu.org.
--
74004: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=74004
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems
[Message part 2 (message/rfc822, inline)]
[Message part 3 (text/plain, inline)]
Nicolas Graves via Guix-patches via <guix-patches <at> gnu.org> writes:
> This fixes CVE-2023-42363, CVE-2023-42364, CVE-2023-42365 and
> CVE-2023-42366.
>
> * gnu/packages/busybox.scm (busybox): Update to 1.37.0.
> ---
> gnu/packages/busybox.scm | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/busybox.scm b/gnu/packages/busybox.scm
> index f811a7175f..46398da213 100644
> --- a/gnu/packages/busybox.scm
> +++ b/gnu/packages/busybox.scm
> @@ -36,7 +36,7 @@ (define-module (gnu packages busybox)
> (define-public busybox
> (package
> (name "busybox")
> - (version "1.36.1")
> + (version "1.37.0")
> (source (origin
> (method url-fetch)
> (uri (string-append
> @@ -44,7 +44,7 @@ (define-public busybox
> version ".tar.bz2"))
> (sha256
> (base32
> - "0573gpj51phcz04sg77iznvcxmf5jnbk9gn3g5r9x02daz4j9k5q"))))
> + "1923f21rnlbv1qjvk2qhgqnki5mkgr6z0p8dvzs9jr3l5vrxy49k"))))
> (build-system gnu-build-system)
> (arguments
> (list #:phases
push, close.
[signature.asc (application/pgp-signature, inline)]
[Message part 5 (message/rfc822, inline)]
This fixes CVE-2023-42363, CVE-2023-42364, CVE-2023-42365 and
CVE-2023-42366.
* gnu/packages/busybox.scm (busybox): Update to 1.37.0.
---
gnu/packages/busybox.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/gnu/packages/busybox.scm b/gnu/packages/busybox.scm
index f811a7175f..46398da213 100644
--- a/gnu/packages/busybox.scm
+++ b/gnu/packages/busybox.scm
@@ -36,7 +36,7 @@ (define-module (gnu packages busybox)
(define-public busybox
(package
(name "busybox")
- (version "1.36.1")
+ (version "1.37.0")
(source (origin
(method url-fetch)
(uri (string-append
@@ -44,7 +44,7 @@ (define-public busybox
version ".tar.bz2"))
(sha256
(base32
- "0573gpj51phcz04sg77iznvcxmf5jnbk9gn3g5r9x02daz4j9k5q"))))
+ "1923f21rnlbv1qjvk2qhgqnki5mkgr6z0p8dvzs9jr3l5vrxy49k"))))
(build-system gnu-build-system)
(arguments
(list #:phases
--
2.46.0
This bug report was last modified 208 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.