[OE-core] [PATCH 0/2] busybox updating

[Andrej Valek]

I have compared no/suid links between these versions. So, I was trying
to enable the same applets like in older version and do not enable the
new one. Some applets could not be disabled (they are automatically
enabled) due to dependencies.

For this version of defconfig the new applets are:
chrt
cttyhack
init
lzcat
mdev
nproc
setsid
xzcat
partprobe

On 10/03/2017 08:12 PM, Andre McCurdy wrote:
> On Tue, Oct 3, 2017 at 8:38 AM, Andrej Valek <andrej.valek at siemens.com> wrote:
>> Update busybox to version 1.27.2
>> Fix CVE-20177-5325
>>
>> Changes:
>> - busybox: 1.24.1 -> 1.27.2:
>>  - fixed link creation to shell
>>   - reported bug with suid shells [https://bugs.busybox.net/show_bug.cgi?id=10346]
>>  - removed and modified already merged patches
>>  - updated defconfig regarding to new version
> 
> Did you compare the list of applets enabled before and after the
> update? Any notable changes?
>