From ffb3af55331786a5d2cd7b304f18fd32bdbde1a2 Mon Sep 17 00:00:00 2001 From: Joachim Wiberg Date: Wed, 10 Jul 2024 05:24:26 +0200 Subject: [PATCH] buildroot: bump for security fixes - OpenSSH CVE-2024-6387 - GLIBC-SA-2024-0004: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961) - GLIBC-SA-2024-0005: nscd: Stack-based buffer overflow in netgroup cache (CVE-2024-33599) - GLIBC-SA-2024-0006: nscd: Null pointer crash after notfound response (CVE-2024-33600) - GLIBC-SA-2024-0007: nscd: netgroup cache may terminate daemon on memory allocation failure (CVE-2024-33601) - GLIBC-SA-2024-0008: nscd: netgroup cache assumes NSS callback uses in-buffer strings (CVE-2024-33602) Please note, with this bump it is required to enable the new OpenSSL option BR2_PACKAGE_LIBOPENSSL_ENGINES, otherwise libssh will not build. Signed-off-by: Joachim Wiberg --- buildroot | 2 +- configs/aarch64_defconfig | 1 + configs/r2s_defconfig | 1 + configs/x86_64_defconfig | 1 + 4 files changed, 4 insertions(+), 1 deletion(-) diff --git a/buildroot b/buildroot index 633f3b44..7afca538 160000 --- a/buildroot +++ b/buildroot @@ -1 +1 @@ -Subproject commit 633f3b44b78aad002e1f844104e0a35d23e99464 +Subproject commit 7afca538fd88e038972f079c6f232f144a3511d3 diff --git a/configs/aarch64_defconfig b/configs/aarch64_defconfig index d26e23bd..9e5028e0 100644 --- a/configs/aarch64_defconfig +++ b/configs/aarch64_defconfig @@ -60,6 +60,7 @@ BR2_PACKAGE_LIBSSH2=y BR2_PACKAGE_LIBSSH2_OPENSSL=y BR2_PACKAGE_LIBXCRYPT=y BR2_PACKAGE_LIBOPENSSL_BIN=y +BR2_PACKAGE_LIBOPENSSL_ENGINES=y BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_NETOPEER2_CLI=y BR2_PACKAGE_NSS_MDNS=y diff --git a/configs/r2s_defconfig b/configs/r2s_defconfig index 3b5d5855..79613056 100644 --- a/configs/r2s_defconfig +++ b/configs/r2s_defconfig @@ -70,6 +70,7 @@ BR2_PACKAGE_LIBSSH2=y BR2_PACKAGE_LIBSSH2_OPENSSL=y BR2_PACKAGE_LIBXCRYPT=y BR2_PACKAGE_LIBOPENSSL_BIN=y +BR2_PACKAGE_LIBOPENSSL_ENGINES=y BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_NETOPEER2_CLI=y BR2_PACKAGE_NSS_MDNS=y diff --git a/configs/x86_64_defconfig b/configs/x86_64_defconfig index 600decea..ecb127b6 100644 --- a/configs/x86_64_defconfig +++ b/configs/x86_64_defconfig @@ -55,6 +55,7 @@ BR2_PACKAGE_LIBSSH2=y BR2_PACKAGE_LIBSSH2_OPENSSL=y BR2_PACKAGE_LIBXCRYPT=y BR2_PACKAGE_LIBOPENSSL_BIN=y +BR2_PACKAGE_LIBOPENSSL_ENGINES=y BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_NETOPEER2_CLI=y BR2_PACKAGE_NSS_MDNS=y