Skip to content

package/connman: fix CVE-2023-28488

Clement Ramirez buildroot 1 version Applied

Status from this message: Applied to master, thanks.

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 patches 1 replyApplied

Patches in v1 Applied

#Subject and filesSizeRepliesApplied
1/2package/connman: fix CVE-2023-28488.checkpackageignore package/connman/0004-gdhcp-Verify-and-sanitize-packet-length-first.patch package/connman/connman.mk+66 -00 replies
2/2package/connman: security bump version to 1.42.checkpackageignore package/connman/0001-gweb-Fix-OOB-write-in-received_data.patch package/connman/0002-wispr-Add-reference-counter-to-portal-context.patch +4 more+2 -4310 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [Buildroot] [PATCH 0/2] package/connman: fix CVE-2023-28488

Hi,

This patch series is designed to fix the CVE-2023-28488:

- The first commit backports the CVE-2023-28488 patch fix onto the 1.41 connman version.

- The second commit bumps connman to 1.42 and removes the previous deprecated patches that introduced fixes now present in the 1.42.

This way the first commit can be used to fix the CVE in LTS releases, and the second one for future releases of Buildroot.

Clement Ramirez (2):
package/connman: fix CVE-2023-28488
package/connman: security bump version to 1.42

 .checkpackageignore                           |   3 -
 ...-gweb-Fix-OOB-write-in-received_data.patch |  36 ----
 ...-reference-counter-to-portal-context.patch | 142 --------------
 ...spr-Update-portal-context-references.patch | 175 ------------------
 package/connman/connman.hash                  |   2 +-
 package/connman/connman.mk                    |   9 +-
 6 files changed, 2 insertions(+), 365 deletions(-)
 delete mode 100644 package/connman/0001-gweb-Fix-OOB-write-in-received_data.patch
 delete mode 100644 package/connman/0002-wispr-Add-reference-counter-to-portal-context.patch
 delete mode 100644 package/connman/0003-wispr-Update-portal-context-references.patch
Signature · 6 lines
2.34.1

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot