From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id 8PCNO6JQHGeDCQAAqHPOHw:P1 (envelope-from ) for ; Sat, 26 Oct 2024 02:14:59 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id 8PCNO6JQHGeDCQAAqHPOHw (envelope-from ) for ; Sat, 26 Oct 2024 04:14:59 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=sbiBhGFN; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1729908898; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-to:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=fAH7MpvxHVBY00RuMh/3BgXaqj4kLP/EkjCfMWziGbs=; b=N3TQHZpYxuen8shfbEIyvqVrwWSlOM1z1Kq5+ab7gpkrhHivbZ2JX1PotcH2RnCM/cE1YJ 1hWEZEHv8HQkPBrHDz8uEZctOIZOxf+eaUGDfzYQSBk6WRKjdiKu+QHxvz/UH09vXefV/O +nNChR0b1/h6DJ4SM5slCZnUtHiy9DMlimr+rFbnpOvP+N4iztQkA6wfn0V81frePtePuS nJv8QD8Er0lufReYGMpENzBh1v57UnFohqMVjunbSea+34GUP9UotEx+DHsUUDXFKZubCx tw8+rYOO4IVvwc3AiDVl9bad0wCGpvwzTvAI/d+T8FN9K3cuymx64pu1B8LUzw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=sbiBhGFN; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1729908898; a=rsa-sha256; cv=none; b=UYSktGGVCJrSluHLFvUPdBBKcGEghYHqRZ/OMdIwnWEY+FtpU2667OIfyGDEpvxCk193sa aiDMTONiaAaB0CpFQv377/ToqKwcrlmIDi9qIW+fnJubGOzvi9CU5MKYRLvY+QNloh2kKe 7y9rwA3G34v8Zi+chsnAKOOuw7NwRNrQ6643rAvW3wj6thZHdvyh/BDWNAvFD3jBzbPhdc 579lar4yhLihFsrC3mPRsz7NMfkiPGV37ESFZ6XOk9tecrhj574uA0nPpmL/xAMKw4tCIa yE067dZ6868KpKq16N0kiDQ+mUOwufMtKNDqkdovc992SsWiPX1UORTFtkgq8Q== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 77E0344F0A for ; Sat, 26 Oct 2024 04:14:58 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4WK1-0000sS-42; Fri, 25 Oct 2024 22:14:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4WJy-0000s8-3Y for guix-patches@gnu.org; Fri, 25 Oct 2024 22:14:30 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4WJx-00063K-Jc for guix-patches@gnu.org; Fri, 25 Oct 2024 22:14:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:References:In-Reply-To:From:To:Subject; bh=fAH7MpvxHVBY00RuMh/3BgXaqj4kLP/EkjCfMWziGbs=; b=sbiBhGFNRYcGsyxhstg2QmOqQ7UAOb6uQgpBBYl69QleDhca82rg9uDlNumYydH8oDZ17yrLp8uiQ56tttUbyYQH75epyOFg/LqwqcB2A0lJLQ7TuRt7Brp0KDI/4E4iXRxiDLuiPWWeLN2Yet1NFrGKqr4IhuyTEur76YMnGnWwk9jOgloNOYB8Hi5bboDU4QDD805JVB7iLC2mjm3alwlNWWMavJOkOPDB/oIxO5QKKMbIUmxftZklZQIQYoPRULAeDnrfbj7sZ+mzE/x3aynpj2iV44CJxQzPU7IWIEoy3Wm5oCxbItl6lJvpKICrXdhKdffr3A6JhBjofV86hQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4WKU-0006nx-5c for guix-patches@gnu.org; Fri, 25 Oct 2024 22:15:02 -0400 Subject: bug#74004: [PATCH] gnu: busybox: Update to 1.37.0. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-To: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 02:15:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 74004 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Nicolas Graves via Guix-patches via Cc: 74004-done@debbugs.gnu.org, Nicolas Graves Mail-Followup-To: 74004@debbugs.gnu.org, zhengjunjie@iscas.ac.cn, ngraves@ngraves.fr Received: via spool by 74004-done@debbugs.gnu.org id=D74004.172990886726084 (code D ref 74004); Sat, 26 Oct 2024 02:15:01 +0000 Received: (at 74004-done) by debbugs.gnu.org; 26 Oct 2024 02:14:27 +0000 Received: from localhost ([127.0.0.1]:40002 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4WJv-0006me-0r for submit@debbugs.gnu.org; Fri, 25 Oct 2024 22:14:27 -0400 Received: from smtp21.cstnet.cn ([159.226.251.21]:38284 helo=cstnet.cn) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4WJs-0006mM-Cr for 74004-done@debbugs.gnu.org; Fri, 25 Oct 2024 22:14:26 -0400 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowADX3SlIUBxn+vOnCg--.27504S2; Sat, 26 Oct 2024 10:13:43 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241025073849.8217-1-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Fri, 25 Oct 2024 09:38:47 +0200") References: <20241025073849.8217-1-ngraves@ngraves.fr> Date: Sat, 26 Oct 2024 10:13:16 +0800 Message-ID: <87ed43ipc3.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowADX3SlIUBxn+vOnCg--.27504S2 X-Coremail-Antispam: 1UD129KBjvdXoW7JFWkuF48ZF4UZFW3AFy7ZFb_yoWDZFbEvr 9xAw12qrZYvr4UKay8uwsxXa45ZrWUGrW0gF43tFsrKF9a9w4DWrs29ry8A3W7CFW8tF18 tan8Ar40g398WjkaLaAFLSUrUUUUjb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUIcSsGvfJTRUUUbsAYjsxI4VWkKwAYFVCjjxCrM7AC8VAFwI0_Jr0_Gr1l1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVWUJVWUCwA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVWUJVW8JwA2z4x0Y4vEx4A2jsIE14v26r4j6F4UM28EF7xvwVC2z2 80aVCY1x0267AKxVW8Jr0_Cr1UM2vj62AExVA0xI801c8C04v26x02cVCv0xWle2I262IY c4CY6c8Ij28IcVAaY2xG8wASzI0EjI02j7AqF2xKxwAqx4xG64xvF2IEw4CE5I8CrVC2j2 WlYx0E2Ix0cI8IcVAFwI0_Jr0_Jr4lYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkE bVWUJVW8JwACjcxG0xvEwIxGrwCF04k20xvY0x0EwIxGrwCFx2IqxVCFs4IE7xkEbVWUJV W8JwC20s026c02F40E14v26r1j6r18MI8I3I0E7480Y4vE14v26r106r1rMI8E67AF67kF 1VAFwI0_Jrv_JF1lIxkGc2Ij64vIr41lIxAIcVC0I7IYx2IY67AKxVWUJVWUCwCI42IY6x IIjxv20xvEc7CjxVAFwI0_Jr0_Gr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvE x4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Jr0_GrUvcSsGvfC2KfnxnU UI43ZEXa7IUeAHUPUUUUU== X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Scanner: mx11.migadu.com X-Migadu-Spam-Score: -3.58 X-Spam-Score: -3.58 X-Migadu-Queue-Id: 77E0344F0A X-TUID: y2xRCAkXioW/ --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2023-42363, CVE-2023-42364, CVE-2023-42365 and > CVE-2023-42366. > > * gnu/packages/busybox.scm (busybox): Update to 1.37.0. > --- > gnu/packages/busybox.scm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/busybox.scm b/gnu/packages/busybox.scm > index f811a7175f..46398da213 100644 > --- a/gnu/packages/busybox.scm > +++ b/gnu/packages/busybox.scm > @@ -36,7 +36,7 @@ (define-module (gnu packages busybox) > (define-public busybox > (package > (name "busybox") > - (version "1.36.1") > + (version "1.37.0") > (source (origin > (method url-fetch) > (uri (string-append > @@ -44,7 +44,7 @@ (define-public busybox > version ".tar.bz2")) > (sha256 > (base32 > - "0573gpj51phcz04sg77iznvcxmf5jnbk9gn3g5r9x02daz4j9k5q")))) > + "1923f21rnlbv1qjvk2qhgqnki5mkgr6z0p8dvzs9jr3l5vrxy49k")))) > (build-system gnu-build-system) > (arguments > (list #:phases push, close. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmccUDwACgkQO1qpk+Gi 3/A2nw/+P52FByTvy+gVaxVkt+n97iSOzDfqBlnOjteSDhK7faOCtp122N9Khway 3t3iwy7CohOQJMkTiQUqyEfQjc3KJeoHcJXG2qrSkq2lZApsBfxNA19O+dBxJI7i FhouXomaIyWtZEz7jsrjrRcGpxrqiWES6oSYS2X2lbUjI0dliPIxR+KNNt/HKFWm zcuB7t9XRcqXtTZvawJ9MMXzvzwbw0uOkSUy/tjFSVlzKJR8CX2NSTr0jbTA6/GF Sf2nI3m876lRUaeXSMQTAm0Yf9+vJGrnqzzmNAV6JMPyzmIiIHHEmI8Qu+voaIe1 0KZAqjt0eY72EXsZ4Tnuqk06dKPZz8DGmX6oW7RW7cXSnsXKU6FdTEUc8cH8Qta9 k0LGMMVV7n0Glwn0Bctop55oFrKNJXKKUVcGof4iTPAtrqz4U5wn38KXaVpDkqQN FSC7m75uBibAaupX7qMp7Li78GY/RijSS0dteO7nY793PZUbTlD2XUrAbrdzxtza pmh0SbNl4uTOvS3/6gGHWxVM8t1hiKfLTuf7S0uaEi4uUWuVP3+wVGVvoEXUQPkN L3olRKCO59qKoZsNR931CHPOiLHJpPqt2NwZXK2e5oUMYslVtj67H6fXpq+j/y2c wy2a7CfodjrvE95D93cYyhBBoEgXHjqoFBxXn5kd/tuqcoltuyc= =ql7t -----END PGP SIGNATURE----- --=-=-=--