Format: 1.8 Date: Wed, 06 Mar 2019 15:51:41 -0500 Source: busybox Binary: busybox busybox-static busybox-initramfs busybox-udeb busybox-syslogd udhcpc udhcpd Architecture: armhf Version: 1:1.27.2-2ubuntu3.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: busybox - Tiny utilities for small and embedded systems busybox-initramfs - Standalone shell setup for initramfs busybox-static - Standalone rescue shell with tons of builtin utilities busybox-syslogd - Provides syslogd and klogd using busybox busybox-udeb - Tiny utilities for the debian-installer (udeb) udhcpc - Provides the busybox DHCP client implementation udhcpd - Provides the busybox DHCP server implementation Changes: busybox (1:1.27.2-2ubuntu3.2) bionic-security; urgency=medium . * SECURITY UPDATE: buffer overflow in wget - debian/patches/CVE-2018-1000517.patch: check chunk length in networking/wget.c. - CVE-2018-1000517 * SECURITY UPDATE: out-of-bounds read in udhcp - debian/patches/CVE-2018-20679.patch: check that 4-byte options are indeed 4-byte in networking/udhcp/common.*, networking/udhcp/dhcpc.c, networking/udhcp/dhcpd.c. - CVE-2018-20679 * SECURITY UPDATE: incomplete fix for out-of-bounds read in udhcp - debian/patches/CVE-2019-5747.patch: when decoding DHCP_SUBNET, ensure it is 4 bytes long in networking/udhcp/common.*, networking/udhcp/dhcpc.c. - CVE-2019-5747 Checksums-Sha1: 25f1e81fff374c8c7dcfe19d5a9ce170371b8347 1374700 busybox-dbgsym_1.27.2-2ubuntu3.2_armhf.ddeb e6e6a3235b794a86cdecd11087ccb882d209218d 654284 busybox-initramfs-dbgsym_1.27.2-2ubuntu3.2_armhf.ddeb aa44aaac7a7985d5946d7bfd148165959f914602 158016 busybox-initramfs_1.27.2-2ubuntu3.2_armhf.deb 840b30a0bc12aab197540c1ed5473b5448e841e7 1540824 busybox-static-dbgsym_1.27.2-2ubuntu3.2_armhf.ddeb 188a84ee9a2e19e2ff726be5cd7aa45ad19d4225 726936 busybox-static_1.27.2-2ubuntu3.2_armhf.deb d9d9a7e166f051ebf12fd45b36ad1bea4af7862d 163108 busybox-udeb_1.27.2-2ubuntu3.2_armhf.udeb b72c6ffc20048195ae5a153715cb5e97f3f4c6a2 7259 busybox_1.27.2-2ubuntu3.2_armhf.buildinfo 04e5ab57100147c6763e1eb888271647b2fcae38 375656 busybox_1.27.2-2ubuntu3.2_armhf.deb 7073d466c8aa6cbcaaa8d50589d00d90f6cd91b9 2944 udhcpc_1.27.2-2ubuntu3.2_armhf.deb 827b0136a8216b335efcd8a66329e3bfb5bfd980 5756 udhcpd_1.27.2-2ubuntu3.2_armhf.deb Checksums-Sha256: 4c2edcc75667da64de591502a37ed9c9defedec4b1ce2cc022d280778f11ba7f 1374700 busybox-dbgsym_1.27.2-2ubuntu3.2_armhf.ddeb 0d2ea985a6aaa1c0f1d720e07bdfb23432367dc1a54b74988c00eb589b67b770 654284 busybox-initramfs-dbgsym_1.27.2-2ubuntu3.2_armhf.ddeb 39aa96255fb09350e1326b44943c612877f4c709923b66c2f9b64741b1f3cacd 158016 busybox-initramfs_1.27.2-2ubuntu3.2_armhf.deb 9cef54efbde20a18fa32ca7145b9ceda5043acf23cc368325b76a060bfcd2d91 1540824 busybox-static-dbgsym_1.27.2-2ubuntu3.2_armhf.ddeb 15f8eae5aae21bb386c268910d4ee0925fb6b12c195818e008b6e2dc9e0cf6eb 726936 busybox-static_1.27.2-2ubuntu3.2_armhf.deb 93027f34e381b7cbc7845bcb167e1a8f571b77d784a3f661334c2ceed0e0fdd8 163108 busybox-udeb_1.27.2-2ubuntu3.2_armhf.udeb 3ce69f4509161eb478921e4e6ffe03116b9dc1bd389100cae2ec594b1aa2fb57 7259 busybox_1.27.2-2ubuntu3.2_armhf.buildinfo 549c3e141894bf205dc72f95759a14e1c87fe3c49088bc3397094a2366597b82 375656 busybox_1.27.2-2ubuntu3.2_armhf.deb 60fdede08507d39408aef01e299f1253ee9dd23afc7d5c3395039692dbae0f1f 2944 udhcpc_1.27.2-2ubuntu3.2_armhf.deb 5896af9e1bc42a5b9a93ae1ac7264692244c42877f15974ac163b5a392b0ea94 5756 udhcpd_1.27.2-2ubuntu3.2_armhf.deb Files: 2cf1933e44a732237f35d9b61aac2ac5 1374700 debug optional busybox-dbgsym_1.27.2-2ubuntu3.2_armhf.ddeb e7c25decb0df0522afe2843c8fba5624 654284 debug optional busybox-initramfs-dbgsym_1.27.2-2ubuntu3.2_armhf.ddeb a591c67a0d9c9fcbd13c6d1639f75e32 158016 shells optional busybox-initramfs_1.27.2-2ubuntu3.2_armhf.deb d1eafc1e2aaeaa70bbd149222f614c40 1540824 debug optional busybox-static-dbgsym_1.27.2-2ubuntu3.2_armhf.ddeb 16c67be17d904fd558021eff3b2bb7de 726936 shells optional busybox-static_1.27.2-2ubuntu3.2_armhf.deb 1998b700ad8dd1f5a00ecd79b3c3153d 163108 debian-installer optional busybox-udeb_1.27.2-2ubuntu3.2_armhf.udeb 13483c90e780aee6db1e492d9916a264 7259 utils optional busybox_1.27.2-2ubuntu3.2_armhf.buildinfo 7f914c423420f5b85b52d3aed5edcc4f 375656 utils optional busybox_1.27.2-2ubuntu3.2_armhf.deb 58c4d9b1779395cff135edacf5872e71 2944 net optional udhcpc_1.27.2-2ubuntu3.2_armhf.deb c8ba0e2418b5a5b995b5363c9586f486 5756 net optional udhcpd_1.27.2-2ubuntu3.2_armhf.deb Original-Maintainer: Debian Install System Team