mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 08:14:09 -09:00
b3f959fe96
Commit 7d2779ecbb
("support/script/pkg-stats: handle exception when version comparison
fails") erroneousy introduced a "break" within a try/expect block.
This break has the unfortunate consequence that every CVE that was
using the <= operator was skipped, and according to the current
CVE statistics, made us miss 74 CVEs out of 141 CVEs.
Here is for reference the complete list of CVEs we missed:
- gnupg
CVE-2006-3082
CVE-2019-13050
- jhead
CVE-2020-6624
CVE-2020-6625
- patch
CVE-2018-6952
CVE-2019-20633
- json-c
CVE-2020-12762
- git
CVE-2018-1000110
CVE-2018-1000182
CVE-2019-1003010
CVE-2020-2136
- iperf2
CVE-2016-4303
- libtorrent
CVE-2009-1760
CVE-2016-5301
- lua
CVE-2020-15888
CVE-2020-15889
CVE-2020-15945
CVE-2020-24342
- openvpn
CVE-2020-7224
- smack
CVE-2016-10027
- bashtop
CVE-2019-18276
- links
CVE-2008-3319
- argus
CVE-2011-3332
- libraw
CVE-2020-15503
- netcat
CVE-2008-5727
CVE-2008-5728
CVE-2008-5729
CVE-2008-5730
CVE-2008-5742
CVE-2015-2214
- subversion
CVE-2017-1000085
CVE-2018-1000111
CVE-2020-2111
- python
CVE-2013-1753
CVE-2015-5652
CVE-2017-17522
CVE-2017-18207
CVE-2019-20907
CVE-2019-9674
- cereal
CVE-2020-11104
CVE-2020-11105
- opencv
CVE-2017-1000450
CVE-2017-12597
CVE-2017-12598
CVE-2017-12599
CVE-2017-12600
CVE-2017-12601
CVE-2017-12602
CVE-2017-12603
CVE-2017-12604
CVE-2017-12605
CVE-2017-12606
CVE-2017-12862
CVE-2017-12863
CVE-2017-12864
CVE-2019-15939
- docker
CVE-2015-1843
CVE-2015-3627
CVE-2015-3630
CVE-2015-3631
CVE-2016-3697
CVE-2017-14992
CVE-2019-16884
- trousers
CVE-2020-24330
CVE-2020-24331
CVE-2020-24332
- libcroco
CVE-2020-12825
- libpupnp
CVE-2020-13848
- openjpeg
CVE-2020-15389
- flex
CVE-2015-1773
- libesmtp
CVE-2019-19977
- ed
CVE-2015-2987
- libmad
CVE-2018-7263
- grub
CVE-2020-15705
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at http://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on Freenode IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches