mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-19 16:40:46 -09:00
package/systemd: security bump to version v250.8
Fixes the following security issue:
- CVE-2022-3821: An off-by-one Error issue was discovered in Systemd in
format_timespan() function of time-util.c. An attacker could supply
specific values for time and accuracy that leads to buffer overrun in
format_timespan(), leading to a Denial of Service.
https://github.com/systemd/systemd/issues/23928
Drop now upstream 0001-missing-syscall-define-MOVE_MOUNT_T_EMPTY_PATH-if-mi.patch
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit e24033f76a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
@@ -1,33 +0,0 @@
|
|||||||
From 16c132a6a0389e0eaea70c4ad95dbfd1637ec5ba Mon Sep 17 00:00:00 2001
|
|
||||||
From: Romain Naour <romain.naour@smile.fr>
|
|
||||||
Date: Fri, 7 Jan 2022 22:25:23 +0100
|
|
||||||
Subject: [PATCH] missing-syscall: define MOVE_MOUNT_T_EMPTY_PATH if missing
|
|
||||||
|
|
||||||
MOVE_MOUNT_T_EMPTY_PATH has been added to systemd 250 by [1]
|
|
||||||
but it's defined in kernel headers since version 5.2.
|
|
||||||
|
|
||||||
[1] c7bf079bbc19e3b409acc0c7acc3e14749211fe2
|
|
||||||
|
|
||||||
Signed-off-by: Romain Naour <romain.naour@smile.fr>
|
|
||||||
---
|
|
||||||
src/basic/missing_syscall.h | 4 ++++
|
|
||||||
1 file changed, 4 insertions(+)
|
|
||||||
|
|
||||||
diff --git a/src/basic/missing_syscall.h b/src/basic/missing_syscall.h
|
|
||||||
index 8267b1a90c..793d111c55 100644
|
|
||||||
--- a/src/basic/missing_syscall.h
|
|
||||||
+++ b/src/basic/missing_syscall.h
|
|
||||||
@@ -569,6 +569,10 @@ static inline int missing_open_tree(
|
|
||||||
#define MOVE_MOUNT_F_EMPTY_PATH 0x00000004 /* Empty from path permitted */
|
|
||||||
#endif
|
|
||||||
|
|
||||||
+#ifndef MOVE_MOUNT_T_EMPTY_PATH
|
|
||||||
+#define MOVE_MOUNT_T_EMPTY_PATH 0x00000040 /* Empty to path permitted */
|
|
||||||
+#endif
|
|
||||||
+
|
|
||||||
static inline int missing_move_mount(
|
|
||||||
int from_dfd,
|
|
||||||
const char *from_pathname,
|
|
||||||
--
|
|
||||||
2.31.1
|
|
||||||
|
|
||||||
@@ -1,5 +1,5 @@
|
|||||||
# sha256 locally computed
|
# sha256 locally computed
|
||||||
sha256 d2bda9d225da11dc9ff48b48e59fc36798d3e66902ed400a9f78fa370c596864 systemd-250.4.tar.gz
|
sha256 638a2fc78828765fc97bc73f428205b6dc1d359149b6c6bfe4d2a649cba2cca8 systemd-250.8.tar.gz
|
||||||
sha256 ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6 LICENSE.GPL2
|
sha256 ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6 LICENSE.GPL2
|
||||||
sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 LICENSE.LGPL2.1
|
sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 LICENSE.LGPL2.1
|
||||||
sha256 e5a8645ad94aab24e312dd0c6be2aa54236eb9374480b1b14ea5c61598874fd5 LICENSES/BSD-2-Clause.txt
|
sha256 e5a8645ad94aab24e312dd0c6be2aa54236eb9374480b1b14ea5c61598874fd5 LICENSES/BSD-2-Clause.txt
|
||||||
|
|||||||
@@ -19,7 +19,7 @@
|
|||||||
# - Diff sysusers.d with the previous version
|
# - Diff sysusers.d with the previous version
|
||||||
# - Diff factory/etc/nsswitch.conf with the previous version
|
# - Diff factory/etc/nsswitch.conf with the previous version
|
||||||
# (details are often sprinkled around in README and manpages)
|
# (details are often sprinkled around in README and manpages)
|
||||||
SYSTEMD_VERSION = 250.4
|
SYSTEMD_VERSION = 250.8
|
||||||
SYSTEMD_SITE = $(call github,systemd,systemd-stable,v$(SYSTEMD_VERSION))
|
SYSTEMD_SITE = $(call github,systemd,systemd-stable,v$(SYSTEMD_VERSION))
|
||||||
SYSTEMD_LICENSE = \
|
SYSTEMD_LICENSE = \
|
||||||
LGPL-2.1+, \
|
LGPL-2.1+, \
|
||||||
|
|||||||
Reference in New Issue
Block a user