[ubuntu/bionic-proposed] busybox 1:1.27.2-1ubuntu1 (Accepted)

Steve Langasek steve.langasek at ubuntu.com
Thu Oct 26 10:35:21 UTC 2017


busybox (1:1.27.2-1ubuntu1) bionic; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - [udeb] Enable chvt, killall, losetup, od, and stat.
    - test-bin.patch: Move test and friends to /bin.
    - static-sh-alias.patch: Add static-sh alias name for ash, and install
      /bin/static-sh symlink to busybox in busybox-static.
    - Add busybox-initramfs.
    - Enable chpasswd in standard and static builds (needed by LXC).
    - Move zz-busybox to busybox-initramfs to ensure we get links to all
      the tools we need, stop shipping it anywhere else.
    - Prefer busybox commands over klibc commands where there is duplication.
    - Add Ubuntu configuration for busybox binaries.
    - readlink-in-slash-bin.patch: move readlink to /bin.
  * Refresh busybox-initramfs config to keep it in sync with the featureset
    of the other builds.
    - FEATURE_USE_TERMIOS dropped upstream.
    - FEATURE_STAT_FILESYSTEM enabled.
    - disable FDFLUSH.

busybox (1:1.27.2-1) unstable; urgency=medium

  * New upstream release. This addresses:
    - Segmentation fault when creating compressed tar files. (Closes: #812074)
    - Pointer misuse unziping files. (Closes: #803097)
    - Buffer overflow in the DHCP client [CVE-2016-2148]. (Closes: #818497)
    - Integer overflow in the DHCP client [CVE-2016-2147]. (Closes: #818499)
  * Postpone creation of symlinks with "suspicious" targets [CVE-2011-5325].
    (Closes: #802702)
  * Re-enable the test suite during build. (Closes: #794526)
  * udhcpc: correct a typo in /etc/udhcpc/default.script. (Closes: #873472)
  * Debian packaging changes:
    - Run wrap-and-sort -st.
    - Update debian/control:
      - Replace Uploaders with myself and Christoph Biedl. Many thanks to
        Bastian Blank and Michael Tokarev for having maintained busybox for
        many years prior.
      - Remove Build-Depends to avoid ancient broken libc-dev-bin.
      - Bump Build-Depends on debhelper to >= 10.
    - Rewrite debian/rules:
      - Simplify and use the dh sequencer.
      - Remove test for ancient broken libc6 versions with static binaries.
      - Strip -O2 from CFLAGS, falling back to -Os from the busybox
        configuration.
      - Abort the build if 'make oldconfig' changes the configuration at all.
    - Update busybox build configuration files for the new upstream release.
      - The udeb configuration mostly hasn't changed, but enable fgrep,
        blkdiscard, bzcat and lsscsi.
      - The deb and static configurations have had upstream recommendations
        enabled for new options.
    - Switch to debhelper compatibility level 10.
    - Add Depends on lsb-base to busybox-syslogd and udhcpd.
    - Update debian/.gitignore.
    - Update Standards-Version to 4.0.1:
      - Disable tests that require networking.

Date: Wed, 25 Oct 2017 23:23:50 -0700
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/busybox/1:1.27.2-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 25 Oct 2017 23:23:50 -0700
Source: busybox
Binary: busybox busybox-static busybox-initramfs busybox-udeb busybox-syslogd udhcpc udhcpd
Architecture: source
Version: 1:1.27.2-1ubuntu1
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Description:
 busybox    - Tiny utilities for small and embedded systems
 busybox-initramfs - Standalone shell setup for initramfs
 busybox-static - Standalone rescue shell with tons of builtin utilities
 busybox-syslogd - Provides syslogd and klogd using busybox
 busybox-udeb - Tiny utilities for the debian-installer (udeb)
 udhcpc     - Provides the busybox DHCP client implementation
 udhcpd     - Provides the busybox DHCP server implementation
Closes: 794526 802702 803097 812074 818497 818499 873472
Changes:
 busybox (1:1.27.2-1ubuntu1) bionic; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
     - [udeb] Enable chvt, killall, losetup, od, and stat.
     - test-bin.patch: Move test and friends to /bin.
     - static-sh-alias.patch: Add static-sh alias name for ash, and install
       /bin/static-sh symlink to busybox in busybox-static.
     - Add busybox-initramfs.
     - Enable chpasswd in standard and static builds (needed by LXC).
     - Move zz-busybox to busybox-initramfs to ensure we get links to all
       the tools we need, stop shipping it anywhere else.
     - Prefer busybox commands over klibc commands where there is duplication.
     - Add Ubuntu configuration for busybox binaries.
     - readlink-in-slash-bin.patch: move readlink to /bin.
   * Refresh busybox-initramfs config to keep it in sync with the featureset
     of the other builds.
     - FEATURE_USE_TERMIOS dropped upstream.
     - FEATURE_STAT_FILESYSTEM enabled.
     - disable FDFLUSH.
 .
 busybox (1:1.27.2-1) unstable; urgency=medium
 .
   * New upstream release. This addresses:
     - Segmentation fault when creating compressed tar files. (Closes: #812074)
     - Pointer misuse unziping files. (Closes: #803097)
     - Buffer overflow in the DHCP client [CVE-2016-2148]. (Closes: #818497)
     - Integer overflow in the DHCP client [CVE-2016-2147]. (Closes: #818499)
   * Postpone creation of symlinks with "suspicious" targets [CVE-2011-5325].
     (Closes: #802702)
   * Re-enable the test suite during build. (Closes: #794526)
   * udhcpc: correct a typo in /etc/udhcpc/default.script. (Closes: #873472)
   * Debian packaging changes:
     - Run wrap-and-sort -st.
     - Update debian/control:
       - Replace Uploaders with myself and Christoph Biedl. Many thanks to
         Bastian Blank and Michael Tokarev for having maintained busybox for
         many years prior.
       - Remove Build-Depends to avoid ancient broken libc-dev-bin.
       - Bump Build-Depends on debhelper to >= 10.
     - Rewrite debian/rules:
       - Simplify and use the dh sequencer.
       - Remove test for ancient broken libc6 versions with static binaries.
       - Strip -O2 from CFLAGS, falling back to -Os from the busybox
         configuration.
       - Abort the build if 'make oldconfig' changes the configuration at all.
     - Update busybox build configuration files for the new upstream release.
       - The udeb configuration mostly hasn't changed, but enable fgrep,
         blkdiscard, bzcat and lsscsi.
       - The deb and static configurations have had upstream recommendations
         enabled for new options.
     - Switch to debhelper compatibility level 10.
     - Add Depends on lsb-base to busybox-syslogd and udhcpd.
     - Update debian/.gitignore.
     - Update Standards-Version to 4.0.1:
       - Disable tests that require networking.
Checksums-Sha1:
 300df833bfbc8ae6fee3956fcc1cd6fff79d8a10 2407 busybox_1.27.2-1ubuntu1.dsc
 11669e223cc38de646ce26080e91ca29b8d42ad9 2216527 busybox_1.27.2.orig.tar.bz2
 c0204a61ccab30ff4c226c3326262833b5456db2 58592 busybox_1.27.2-1ubuntu1.debian.tar.xz
 598f9bfe4bdf70807bd696ecb50298b09db47355 6333 busybox_1.27.2-1ubuntu1_source.buildinfo
Checksums-Sha256:
 277616feb5fb419a68dc0c099d1f48a2b8c0c479ff9521fe625ff6380ab7820e 2407 busybox_1.27.2-1ubuntu1.dsc
 9d4be516b61e6480f156b11eb42577a13529f75d3383850bb75c50c285de63df 2216527 busybox_1.27.2.orig.tar.bz2
 344fa0ccd16b43a5934c7d74ca6a4ace6c9ffcbc88a8bea41f177d8e8adf0c57 58592 busybox_1.27.2-1ubuntu1.debian.tar.xz
 522e0cc61f580dca76a79e4df2f155126b76b7811cd0e10dbfdda19caa690e2e 6333 busybox_1.27.2-1ubuntu1_source.buildinfo
Files:
 97e374961e059adf45d455529841721c 2407 utils optional busybox_1.27.2-1ubuntu1.dsc
 476186f4bab81781dab2369bfd42734e 2216527 utils optional busybox_1.27.2.orig.tar.bz2
 f21ff164e2937624e864afa3d47a65b5 58592 utils optional busybox_1.27.2-1ubuntu1.debian.tar.xz
 3f6063269b02b4d61aee671de9e68205 6333 utils optional busybox_1.27.2-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Install System Team <debian-boot at lists.debian.org>


More information about the Bionic-changes mailing list