mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 16:01:54 -09:00
283a7a15b2
Fixes the following security issues: - Parse the chunk-size with a dedicated function and reject "unreasonably" large values to prevent silent truncation by sscanf(), integer overflows and misinterpretation of the content later on. Heap buffer overflows on platforms with 32-bit pointers were alleged as well. Commit 5b3bb22b77. OVE-20260515-0002. Reported by @TristanInSec. - ssl_send_certificate_error(): Store the generated message on the heap instead of the stack to prevent an alleged segmentation fault if there are enough certificates in the chain to exceed the stack size. While at it, replace another variable-length array that was probably unproblematic with a heap-based buffer as well. Commit 4963aa4f08. OVE-20260515-0001. Reported by @TristanInSec. https://www.privoxy.org/gitweb/?p=privoxy.git;a=blob;f=ChangeLog;h=d62aa6bf0b2cb26100e4ba8e528638259502711d;hb=0c5225b6844dd1a838b80d09d715a6c4ccbda2c6 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> [Peter: add vulnerability info] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at https://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches