* [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112
@ 2026-08-13 14:34 Fiona Klute via buildroot
2026-08-13 14:34 ` [Buildroot] [PATCH 2/3] package/dracut: update URLs Fiona Klute via buildroot
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Fiona Klute via buildroot @ 2026-08-13 14:34 UTC (permalink / raw)
To: buildroot; +Cc: Thierry Bultel, Fiona Klute (Othermo GmbH)
From: "Fiona Klute (Othermo GmbH)" <fiona.klute@gmx.de>
Upstream changelog:
https://github.com/dracut-ng/dracut/releases/tag/112
The changelog lists multiple "security related commits", though only
one mentions a CVE: CVE-2026-6893 [1], which allows a malicious DHCP
server to inject code into shell scripts.
[1] https://nvd.nist.gov/vuln/detail/CVE-2026-6893
Signed-off-by: Fiona Klute (Othermo GmbH) <fiona.klute@gmx.de>
---
package/dracut/dracut.hash | 2 +-
package/dracut/dracut.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/dracut/dracut.hash b/package/dracut/dracut.hash
index 1b5b3dce55..3615c2af14 100644
--- a/package/dracut/dracut.hash
+++ b/package/dracut/dracut.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 ca949190692e91611ef16ea3642c0f764f63948860f3f742524310728c991493 dracut-111.tar.gz
+sha256 839d21eb4bd27bb0ee40d74c9da46df088c2e1425fcd8c3ea62b7e3a3dd28a91 dracut-112.tar.gz
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
diff --git a/package/dracut/dracut.mk b/package/dracut/dracut.mk
index 3a1c1567e8..0bd24d49f4 100644
--- a/package/dracut/dracut.mk
+++ b/package/dracut/dracut.mk
@@ -4,7 +4,7 @@
#
################################################################################
-DRACUT_VERSION = 111
+DRACUT_VERSION = 112
DRACUT_SITE = $(call github,dracut-ng,dracut-ng,$(DRACUT_VERSION))
DRACUT_LICENSE = GPL-2.0
DRACUT_LICENSE_FILES = COPYING
--
2.55.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH 2/3] package/dracut: update URLs
2026-08-13 14:34 [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112 Fiona Klute via buildroot
@ 2026-08-13 14:34 ` Fiona Klute via buildroot
2026-08-13 14:34 ` [Buildroot] [PATCH 3/3] package/dracut: add subpackage for dracut-util Fiona Klute via buildroot
2026-08-13 20:16 ` [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112 Julien Olivain via buildroot
2 siblings, 0 replies; 4+ messages in thread
From: Fiona Klute via buildroot @ 2026-08-13 14:34 UTC (permalink / raw)
To: buildroot; +Cc: Thierry Bultel, Fiona Klute (Othermo GmbH)
From: "Fiona Klute (Othermo GmbH)" <fiona.klute@gmx.de>
The Github repository has been renamed from dracut-ng to dracut. The
wiki still exists, but the actual documentation has been moved to
dracut-ng.github.io.
Signed-off-by: Fiona Klute (Othermo GmbH) <fiona.klute@gmx.de>
---
package/dracut/Config.in.host | 2 +-
package/dracut/dracut.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/dracut/Config.in.host b/package/dracut/Config.in.host
index 88dec969c3..af68728457 100644
--- a/package/dracut/Config.in.host
+++ b/package/dracut/Config.in.host
@@ -8,4 +8,4 @@ config BR2_PACKAGE_HOST_DRACUT
dracut-ng is a drop-in replacement for the legacy
dracut project.
- https://github.com/dracut-ng/dracut-ng/wiki
+ https://dracut-ng.github.io/dracut/
diff --git a/package/dracut/dracut.mk b/package/dracut/dracut.mk
index 0bd24d49f4..0bf755319e 100644
--- a/package/dracut/dracut.mk
+++ b/package/dracut/dracut.mk
@@ -5,7 +5,7 @@
################################################################################
DRACUT_VERSION = 112
-DRACUT_SITE = $(call github,dracut-ng,dracut-ng,$(DRACUT_VERSION))
+DRACUT_SITE = $(call github,dracut-ng,dracut,$(DRACUT_VERSION))
DRACUT_LICENSE = GPL-2.0
DRACUT_LICENSE_FILES = COPYING
DRACUT_CPE_ID_VALID = YES
--
2.55.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH 3/3] package/dracut: add subpackage for dracut-util
2026-08-13 14:34 [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112 Fiona Klute via buildroot
2026-08-13 14:34 ` [Buildroot] [PATCH 2/3] package/dracut: update URLs Fiona Klute via buildroot
@ 2026-08-13 14:34 ` Fiona Klute via buildroot
2026-08-13 20:16 ` [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112 Julien Olivain via buildroot
2 siblings, 0 replies; 4+ messages in thread
From: Fiona Klute via buildroot @ 2026-08-13 14:34 UTC (permalink / raw)
To: buildroot; +Cc: Thierry Bultel, Fiona Klute (Othermo GmbH)
From: "Fiona Klute (Othermo GmbH)" <fiona.klute@gmx.de>
dracut-util is a small executable that provides dracut-getarg{,s}
commands for scripts in the initramfs. As such it must be built and
installed for the target so it is available when building the
initramfs.
The reason to create a subpackage instead of adding a target build for
package/dracut is to avoid a conflict in case someone needs "full"
dracut on the target in the future (to build an initramfs on the
target system, outside the Buildroot build). Also using ./configure
would require a dependency on kmod, which is not needed for
dracut-util.
Signed-off-by: Fiona Klute (Othermo GmbH) <fiona.klute@gmx.de>
---
package/Config.in | 1 +
package/dracut/Config.in | 1 +
package/dracut/Config.in.host | 1 +
package/dracut/dracut-util/Config.in | 14 +++++++++++++
package/dracut/dracut-util/dracut-util.hash | 1 +
package/dracut/dracut-util/dracut-util.mk | 23 +++++++++++++++++++++
package/dracut/dracut.mk | 2 ++
7 files changed, 43 insertions(+)
create mode 100644 package/dracut/Config.in
create mode 100644 package/dracut/dracut-util/Config.in
create mode 120000 package/dracut/dracut-util/dracut-util.hash
create mode 100644 package/dracut/dracut-util/dracut-util.mk
diff --git a/package/Config.in b/package/Config.in
index ce316334e1..34a848fa74 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -2822,6 +2822,7 @@ menu "System tools"
source "package/docker-credential-acr-env/Config.in"
source "package/docker-credential-gcr/Config.in"
source "package/docker-engine/Config.in"
+ source "package/dracut/Config.in"
source "package/dtui/Config.in"
source "package/earlyoom/Config.in"
source "package/efibootmgr/Config.in"
diff --git a/package/dracut/Config.in b/package/dracut/Config.in
new file mode 100644
index 0000000000..496b72c105
--- /dev/null
+++ b/package/dracut/Config.in
@@ -0,0 +1 @@
+source package/dracut/dracut-util/Config.in
diff --git a/package/dracut/Config.in.host b/package/dracut/Config.in.host
index af68728457..51e428ea2f 100644
--- a/package/dracut/Config.in.host
+++ b/package/dracut/Config.in.host
@@ -1,6 +1,7 @@
config BR2_PACKAGE_HOST_DRACUT
bool
select BR2_PACKAGE_HOST_KMOD
+ select BR2_PACKAGE_DRACUT_UTIL # must be included in initramfs
help
dracut-ng is used to create an initramfs image by
copying tools and files from an installed system
diff --git a/package/dracut/dracut-util/Config.in b/package/dracut/dracut-util/Config.in
new file mode 100644
index 0000000000..1de35bed40
--- /dev/null
+++ b/package/dracut/dracut-util/Config.in
@@ -0,0 +1,14 @@
+config BR2_PACKAGE_DRACUT_UTIL
+ bool
+ help
+ dracut-ng is used to create an initramfs image by
+ copying tools and files from an installed system
+ and combining it with the dracut framework.
+ dracut-ng is a drop-in replacement for the legacy
+ dracut project.
+
+ This package installs only the dracut-util executable, which
+ is needed by many of the Dracut scripts installed into the
+ initramfs.
+
+ https://dracut-ng.github.io/dracut/
diff --git a/package/dracut/dracut-util/dracut-util.hash b/package/dracut/dracut-util/dracut-util.hash
new file mode 120000
index 0000000000..22e15cf0aa
--- /dev/null
+++ b/package/dracut/dracut-util/dracut-util.hash
@@ -0,0 +1 @@
+../dracut.hash
\ No newline at end of file
diff --git a/package/dracut/dracut-util/dracut-util.mk b/package/dracut/dracut-util/dracut-util.mk
new file mode 100644
index 0000000000..e14e6bc5ad
--- /dev/null
+++ b/package/dracut/dracut-util/dracut-util.mk
@@ -0,0 +1,23 @@
+################################################################################
+#
+# dracut-util
+#
+################################################################################
+
+# The following assignments work only because dracut.mk is included
+# before this file is.
+DRACUT_UTIL_VERSION = $(DRACUT_VERSION)
+DRACUT_UTIL_SITE = $(DRACUT_SITE)
+DRACUT_UTIL_LICENSE = $(DRACUT_LICENSE)
+DRACUT_UTIL_LICENSE_FILES = $(DRACUT_LICENSE_FILES)
+
+# share the dracut archive, build only src/util
+DRACUT_UTIL_SOURCE = dracut-$(DRACUT_VERSION).tar.gz
+DRACUT_UTIL_DL_SUBDIR = dracut
+DRACUT_UTIL_SUBDIR = src/util
+
+define DRACUT_UTIL_INSTALL_TARGET_CMDS
+ $(INSTALL) -D -m 0755 $(@D)/src/util/dracut-util $(TARGET_DIR)/usr/bin/dracut-util
+endef
+
+$(eval $(cmake-package))
diff --git a/package/dracut/dracut.mk b/package/dracut/dracut.mk
index 0bf755319e..6844ac0b65 100644
--- a/package/dracut/dracut.mk
+++ b/package/dracut/dracut.mk
@@ -51,3 +51,5 @@ HOST_DRACUT_POST_INSTALL_HOOKS += HOST_DRACUT_POST_INSTALL_BUSYBOX_INIT_MODULE
endif
$(eval $(host-autotools-package))
+
+include package/dracut/dracut-util/dracut-util.mk
--
2.55.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112
2026-08-13 14:34 [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112 Fiona Klute via buildroot
2026-08-13 14:34 ` [Buildroot] [PATCH 2/3] package/dracut: update URLs Fiona Klute via buildroot
2026-08-13 14:34 ` [Buildroot] [PATCH 3/3] package/dracut: add subpackage for dracut-util Fiona Klute via buildroot
@ 2026-08-13 20:16 ` Julien Olivain via buildroot
2 siblings, 0 replies; 4+ messages in thread
From: Julien Olivain via buildroot @ 2026-08-13 20:16 UTC (permalink / raw)
To: Fiona Klute; +Cc: buildroot, Thierry Bultel
On 13/08/2026 16:34, Fiona Klute via buildroot wrote:
> From: "Fiona Klute (Othermo GmbH)" <fiona.klute@gmx.de>
>
> Upstream changelog:
> https://github.com/dracut-ng/dracut/releases/tag/112
>
> The changelog lists multiple "security related commits", though only
> one mentions a CVE: CVE-2026-6893 [1], which allows a malicious DHCP
> server to inject code into shell scripts.
>
> [1] https://nvd.nist.gov/vuln/detail/CVE-2026-6893
>
> Signed-off-by: Fiona Klute (Othermo GmbH) <fiona.klute@gmx.de>
I applied the first 2 patches of this series to master, thanks.
I kept the third patch (dracut-util) as new to give it more time for
review and testing.
Best regards,
Julien.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2026-08-13 20:16 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-13 14:34 [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112 Fiona Klute via buildroot
2026-08-13 14:34 ` [Buildroot] [PATCH 2/3] package/dracut: update URLs Fiona Klute via buildroot
2026-08-13 14:34 ` [Buildroot] [PATCH 3/3] package/dracut: add subpackage for dracut-util Fiona Klute via buildroot
2026-08-13 20:16 ` [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112 Julien Olivain via buildroot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox