bussybox: updating to new version

bussybox: updating to new version

[Andrej Valek]

Hello everyone,

I would like to ask you a question about busybox upgrading.

Is there any reason, why we are still using the version 1.24.1?
I think that, the latest version 1.27.2 has a lot of fixes and it less
vulnerable then the current.

I have checked a license and it has not been changed.

Thank you for the explanation.

Andrej

Re: bussybox: updating to new version

[Khem Raj]

On Fri, Aug 18, 2017 at 3:16 AM, Andrej Valek <andrej.valek@siemens.com> wrote:
> Hello everyone,
>
> I would like to ask you a question about busybox upgrading.
>
> Is there any reason, why we are still using the version 1.24.1?
> I think that, the latest version 1.27.2 has a lot of fixes and it less
> vulnerable then the current.
>

I dont think its intentional. Feel free to send a patch if you can.

> I have checked a license and it has not been changed.
>
> Thank you for the explanation.
>
> Andrej
> --
> _______________________________________________
> Openembedded-core mailing list
> Openembedded-core@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: bussybox: updating to new version

[Leonardo Sandoval]

On Fri, 2017-08-18 at 12:16 +0200, Andrej Valek wrote:
> Hello everyone,
> 
> I would like to ask you a question about busybox upgrading.
> 
> Is there any reason, why we are still using the version 1.24.1?
> I think that, the latest version 1.27.2 has a lot of fixes and it less
> vulnerable then the current.
> 

feel free to send a patch with the upgrade. BTW, this is the upgrade
history of the recipe

http://recipes.yoctoproject.org/rrs/recipedetail/12601/

> I have checked a license and it has not been changed.
> 
> Thank you for the explanation.
> 
> Andrej

Re: bussybox: updating to new version

[Burton, Ross]

[-- Attachment #1: Type: text/plain, Size: 603 bytes --]

On 18 August 2017 at 11:16, Andrej Valek <andrej.valek@siemens.com> wrote:

> Hello everyone,
>
> I would like to ask you a question about busybox upgrading.
>
> Is there any reason, why we are still using the version 1.24.1?
> I think that, the latest version 1.27.2 has a lot of fixes and it less
> vulnerable then the current.
>
> I have checked a license and it has not been changed.
>
> Thank you for the explanation.
>

The last time an upgrade was submitted it ended up with /bin/sh being suid
root so was understandably rejected.  Nobody has submitted an upgrade since.

Ross

[-- Attachment #2: Type: text/html, Size: 961 bytes --]