mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 16:01:54 -09:00
16d4159d44
Fixes the following security issues: GNUTLS-SA-2025-07-08-1 CVE-2025-32989 Severity Medium; Heap read buffer overflow When an X.509 certificate contains an SCT (signed certificate timestamp) extension and its length field is malformed, the library could read the memory buffer past the boundary. The issue was reported in the issue tracker as <https://gitlab.com/gnutls/gnutls/-/issues/1695>. ------------------------------------------------------------------------------ GNUTLS-SA-2025-07-08-2 CVE-2025-32988 Severity Low; Memory corruption on error path When any error occurs during exporting a certificate with an otherName in the SAN (subject alternative name) extension, the library could potentially double free the ASN.1 structure. The issue was reported in the issue tracker as <https://gitlab.com/gnutls/gnutls/-/issues/1694>. ------------------------------------------------------------------------------ GNUTLS-SA-2025-07-08-3 CVE-2025-32990 Severity Low; Heap write buffer overflow When the certtool program is invoked with a template file with a number of string pairs for a single keyword, a NULL pointer could be written past the memory boundary. The issue was reported in the issue tracker as <https://gitlab.com/gnutls/gnutls/-/issues/1696>. ------------------------------------------------------------------------------ GNUTLS-SA-2025-07-08-4 CVE-2025-6395 Severity Medium; Denial of service When a TLS 1.3 handshake involves a Hello Retry Request and the second Client Hello omits the PSK which was present in the first Client Hello, the GnuTLS server can dereference a NULL pointer. The issue was reported in the issue tracker as <https://gitlab.com/gnutls/gnutls/-/issues/1718>. https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at http://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches