Format: 1.8 Date: Wed, 06 Mar 2019 15:51:41 -0500 Source: busybox Binary: busybox busybox-static busybox-initramfs busybox-udeb busybox-syslogd udhcpc udhcpd Architecture: ppc64el Version: 1:1.27.2-2ubuntu3.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: busybox - Tiny utilities for small and embedded systems busybox-initramfs - Standalone shell setup for initramfs busybox-static - Standalone rescue shell with tons of builtin utilities busybox-syslogd - Provides syslogd and klogd using busybox busybox-udeb - Tiny utilities for the debian-installer (udeb) udhcpc - Provides the busybox DHCP client implementation udhcpd - Provides the busybox DHCP server implementation Changes: busybox (1:1.27.2-2ubuntu3.2) bionic-security; urgency=medium . * SECURITY UPDATE: buffer overflow in wget - debian/patches/CVE-2018-1000517.patch: check chunk length in networking/wget.c. - CVE-2018-1000517 * SECURITY UPDATE: out-of-bounds read in udhcp - debian/patches/CVE-2018-20679.patch: check that 4-byte options are indeed 4-byte in networking/udhcp/common.*, networking/udhcp/dhcpc.c, networking/udhcp/dhcpd.c. - CVE-2018-20679 * SECURITY UPDATE: incomplete fix for out-of-bounds read in udhcp - debian/patches/CVE-2019-5747.patch: when decoding DHCP_SUBNET, ensure it is 4 bytes long in networking/udhcp/common.*, networking/udhcp/dhcpc.c. - CVE-2019-5747 Checksums-Sha1: 708e52cd234a643de273ab3427015531d6821e7c 1636576 busybox-dbgsym_1.27.2-2ubuntu3.2_ppc64el.ddeb 40b1910419edda89ed1d4f53e2d25c5e9f32d538 791952 busybox-initramfs-dbgsym_1.27.2-2ubuntu3.2_ppc64el.ddeb d9bda9bf0660b62a0654b71447f9057a7a6d8d56 224040 busybox-initramfs_1.27.2-2ubuntu3.2_ppc64el.deb 66ca97080057023d76ad1bac7cb59f113e85febc 1828796 busybox-static-dbgsym_1.27.2-2ubuntu3.2_ppc64el.ddeb bb88c434a8886327ea289e5eda666784088697a4 1025612 busybox-static_1.27.2-2ubuntu3.2_ppc64el.deb 4228f8069676cd36f362c1709ec92518125fa73f 230584 busybox-udeb_1.27.2-2ubuntu3.2_ppc64el.udeb 621eed56137a8c628de8cae569125101f946fb94 7392 busybox_1.27.2-2ubuntu3.2_ppc64el.buildinfo 84be6a3ae8034d71a02d1e5a3264fcbec1d8a799 506920 busybox_1.27.2-2ubuntu3.2_ppc64el.deb 34525c8db0c677f5125f21c4ca1fff9b9de505ca 2944 udhcpc_1.27.2-2ubuntu3.2_ppc64el.deb 6a997560213c35a7b29db840a618fe13829f364c 5760 udhcpd_1.27.2-2ubuntu3.2_ppc64el.deb Checksums-Sha256: 2adcddf49ab2d429570e5d2f4fa629088b9e4be504e7328c99a946eeb9ee0cea 1636576 busybox-dbgsym_1.27.2-2ubuntu3.2_ppc64el.ddeb 04f43582054910408bbf97a27b4ef65907f19e7ae955a10d66b4100d84172df3 791952 busybox-initramfs-dbgsym_1.27.2-2ubuntu3.2_ppc64el.ddeb d83872e553468496c7590051afdf467ce7df733777fd3685026200313872dcf8 224040 busybox-initramfs_1.27.2-2ubuntu3.2_ppc64el.deb 0635b3ef0042e8c619e960f7303f91dad2d1afbd759e992a9f8431b42a1cafb1 1828796 busybox-static-dbgsym_1.27.2-2ubuntu3.2_ppc64el.ddeb 864bf890bf1e30178ca4faa28ccda5cdb9d237ece2b0a4ab1fc2902aff187121 1025612 busybox-static_1.27.2-2ubuntu3.2_ppc64el.deb 33d2a0399f2712a22a728e87e1511c1c5c0923a90988943c136d5e76d902d9ad 230584 busybox-udeb_1.27.2-2ubuntu3.2_ppc64el.udeb eae493c7eae21f7379939d99f77f5a770c7887857b0107c0c68833a8a91d2519 7392 busybox_1.27.2-2ubuntu3.2_ppc64el.buildinfo fe231d425fe732cc815f8b304c4a71e357759f9327ce7876cd5409e9e8f166d2 506920 busybox_1.27.2-2ubuntu3.2_ppc64el.deb fe7304c6f0263fb9a0e7bdeb6a6f90198c4d477625b4b8ffea902b3379821e1b 2944 udhcpc_1.27.2-2ubuntu3.2_ppc64el.deb 048f6759a58a6bf1679fcb644bb06196d0bf8b79e0ff449fa9d7629635758b57 5760 udhcpd_1.27.2-2ubuntu3.2_ppc64el.deb Files: 094c9d1765b286593f55abe97ce008fd 1636576 debug optional busybox-dbgsym_1.27.2-2ubuntu3.2_ppc64el.ddeb 27b5072ce3ff466982b31d7a734a646e 791952 debug optional busybox-initramfs-dbgsym_1.27.2-2ubuntu3.2_ppc64el.ddeb 5d3380974636390f83a35f2df2bc78d6 224040 shells optional busybox-initramfs_1.27.2-2ubuntu3.2_ppc64el.deb 5709d68e1f6b53d5d2273b94d218b5ee 1828796 debug optional busybox-static-dbgsym_1.27.2-2ubuntu3.2_ppc64el.ddeb e83d2642aa709dc8b14c0bb30e744cfe 1025612 shells optional busybox-static_1.27.2-2ubuntu3.2_ppc64el.deb bb3f4ba9923c99e0f448d2fdf86aac74 230584 debian-installer optional busybox-udeb_1.27.2-2ubuntu3.2_ppc64el.udeb 4f5681e4c4b990c15ce829d3f73f93ce 7392 utils optional busybox_1.27.2-2ubuntu3.2_ppc64el.buildinfo ae6e19ea26a2bdaab116d22f730f03b9 506920 utils optional busybox_1.27.2-2ubuntu3.2_ppc64el.deb a43ed9fca4472ba2a6fccecc67429385 2944 net optional udhcpc_1.27.2-2ubuntu3.2_ppc64el.deb 674ff3c124d10fa6d7868e2f329c4772 5760 net optional udhcpd_1.27.2-2ubuntu3.2_ppc64el.deb Original-Maintainer: Debian Install System Team