[ubuntu/eoan-proposed] busybox 1:1.30.1-4ubuntu1 (Accepted)

Wed Apr 24 06:51:14 UTC 2019

busybox (1:1.30.1-4ubuntu1) eoan; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - [udeb] Enable chvt, killall, losetup, od, and stat.
    - test-bin.patch: Move test and friends to /bin.
    - static-sh-alias.patch: Add static-sh alias name for ash, and install
      /bin/static-sh symlink to busybox in busybox-static.
    - Add busybox-initramfs.
    - Enable chpasswd in standard and static builds (needed by LXC).
    - Move zz-busybox to busybox-initramfs to ensure we get links to all
      the tools we need, stop shipping it anywhere else.
    - Prefer busybox commands over klibc commands where there is duplication.
    - Add Ubuntu configuration for busybox binaries.
  * Dropped changes, included in Debian:
    - debian/patches/handle-ip-valid_lft.patch: Don't choke on ip addr add
      [...] valid_lft [...] preferred_lft.
  * Dropped changes, included upstream:
    - debian/patches/CVE-2011-5325-2.patch
    - debian/patches/CVE-2011-5325-3.patch
    - debian/patches/CVE-2011-5325-4.patch
    - debian/patches/CVE-2011-5325-5.patch
    - debian/patches/CVE-2018-1000517.patch
    - debian/patches/CVE-2018-20679.patch
    - debian/patches/CVE-2019-5747.patch
  * Enable the new klibc utility implementations, nuke, resume, and run-init,
    in the initramfs package; and also enable reboot.  Doesn't yet make
    klibc-utils irrelevant - we still use ipconfig, fstype, and nfsmount
    - but it moves us much closer and should save a little bit of disk
    space.

busybox (1:1.30.1-4) unstable; urgency=high

  [ Ben Hutchings ]
  * Drop "Stop overriding stack alignment on i386" as this behaviour is now
    configurable
  * debian/rules: Enable verbose output (V=1) for "make oldconfig"

  [ Cyril Brulebois ]
  * Reinstate temp-deb-installer-hack.patch and FEATURE_DI_ENV_HACK=y
    Closes: #925979

busybox (1:1.30.1-3) unstable; urgency=high

  * Ignore any valid_lft or preferred_lft parameters to ip, thanks
    Steve Langasek. Closes: #924442
  * Fix ip oneline, thanks Dominik George. Closes: #924374

busybox (1:1.30.1-2) unstable; urgency=high

  * Complete the fix for [CVE-2018-20679] Closes: #918846

busybox (1:1.30.1-1) unstable; urgency=high

  [ Christoph Biedl ]
  * New upstream version 1.30.1
    Closes: #918846 [CVE-2018-20679]
  * Refresh patch queue
  * Update busybox configurations for new upstream version

  * Debian packaging changes:
    [ Chris Boot ]
    * Check signatures on upstream tarballs:
      - d/watch: set opts=pgpsigurlmangle
      - d/upstream/signing-key.asc: import Denis Vlasenko's key
    * d/changelog:
      - Correct CVE reference in changelog entry for previous upload.
      - Remove trailing whitespace.
    * d/rules:
      - Remove trailing whitespace.
    * Switch to debhelper 11.
    * d/control:
      - Set Rules-Requires-Root: no.
      - Bump Standards-Version to 4.1.5; no other changes required.
    * Remove obsolete files:
      - d/bin/genorig.py: not needed since ~2008.
      - d/udeb-sizes: not updated since ~2012.
    [ Christoph Biedl ]
    * Add a README for any package maintainer

  [ Chris Boot ]
  * Refresh and rework patches:
    - Drop patches cherry-picked from upstream.
    - Drop temp-deb-installer-hack.patch: no longer needed.
    - Rework patches to account for upstream changes:
      - shell-ash-export-HOME.patch
      - version.patch
  * Enable new applets for use by initramfs-tools: nuke, resume, run-init.

busybox (1:1.27.2-3) unstable; urgency=medium

  [ Cyril Brulebois ]
  * Update Vcs-{Browser,Git} to point to salsa (alioth's replacement).

  [ Chris Lamb ]
  * PEP8 fixes.

  [ Ben Hutchings ]
  * Stop overriding stack alignment on i386 (Closes: #886506)
  * Apply security fixes for wget from upstream:
    - wget: more thorough sanitization of other side's data
    - wget: check chunk length for overflowing off_t (CVE-2018-1000517)
      (Closes: #902724)
    - wget: handle URLs with @ or hash differently

Date: Mon, 22 Apr 2019 22:44:28 -0700
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/busybox/1:1.30.1-4ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 22 Apr 2019 22:44:28 -0700
Source: busybox
Architecture: source
Version: 1:1.30.1-4ubuntu1
Distribution: eoan
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Closes: 886506 902724 918846 924374 924442 925979
Changes:
 busybox (1:1.30.1-4ubuntu1) eoan; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
     - [udeb] Enable chvt, killall, losetup, od, and stat.
     - test-bin.patch: Move test and friends to /bin.
     - static-sh-alias.patch: Add static-sh alias name for ash, and install
       /bin/static-sh symlink to busybox in busybox-static.
     - Add busybox-initramfs.
     - Enable chpasswd in standard and static builds (needed by LXC).
     - Move zz-busybox to busybox-initramfs to ensure we get links to all
       the tools we need, stop shipping it anywhere else.
     - Prefer busybox commands over klibc commands where there is duplication.
     - Add Ubuntu configuration for busybox binaries.
   * Dropped changes, included in Debian:
     - debian/patches/handle-ip-valid_lft.patch: Don't choke on ip addr add
       [...] valid_lft [...] preferred_lft.
   * Dropped changes, included upstream:
     - debian/patches/CVE-2011-5325-2.patch
     - debian/patches/CVE-2011-5325-3.patch
     - debian/patches/CVE-2011-5325-4.patch
     - debian/patches/CVE-2011-5325-5.patch
     - debian/patches/CVE-2018-1000517.patch
     - debian/patches/CVE-2018-20679.patch
     - debian/patches/CVE-2019-5747.patch
   * Enable the new klibc utility implementations, nuke, resume, and run-init,
     in the initramfs package; and also enable reboot.  Doesn't yet make
     klibc-utils irrelevant - we still use ipconfig, fstype, and nfsmount
     - but it moves us much closer and should save a little bit of disk
     space.
 .
 busybox (1:1.30.1-4) unstable; urgency=high
 .
   [ Ben Hutchings ]
   * Drop "Stop overriding stack alignment on i386" as this behaviour is now
     configurable
   * debian/rules: Enable verbose output (V=1) for "make oldconfig"
 .
   [ Cyril Brulebois ]
   * Reinstate temp-deb-installer-hack.patch and FEATURE_DI_ENV_HACK=y
     Closes: #925979
 .
 busybox (1:1.30.1-3) unstable; urgency=high
 .
   * Ignore any valid_lft or preferred_lft parameters to ip, thanks
     Steve Langasek. Closes: #924442
   * Fix ip oneline, thanks Dominik George. Closes: #924374
 .
 busybox (1:1.30.1-2) unstable; urgency=high
 .
   * Complete the fix for [CVE-2018-20679] Closes: #918846
 .
 busybox (1:1.30.1-1) unstable; urgency=high
 .
   [ Christoph Biedl ]
   * New upstream version 1.30.1
     Closes: #918846 [CVE-2018-20679]
   * Refresh patch queue
   * Update busybox configurations for new upstream version
 .
   * Debian packaging changes:
     [ Chris Boot ]
     * Check signatures on upstream tarballs:
       - d/watch: set opts=pgpsigurlmangle
       - d/upstream/signing-key.asc: import Denis Vlasenko's key
     * d/changelog:
       - Correct CVE reference in changelog entry for previous upload.
       - Remove trailing whitespace.
     * d/rules:
       - Remove trailing whitespace.
     * Switch to debhelper 11.
     * d/control:
       - Set Rules-Requires-Root: no.
       - Bump Standards-Version to 4.1.5; no other changes required.
     * Remove obsolete files:
       - d/bin/genorig.py: not needed since ~2008.
       - d/udeb-sizes: not updated since ~2012.
     [ Christoph Biedl ]
     * Add a README for any package maintainer
 .
   [ Chris Boot ]
   * Refresh and rework patches:
     - Drop patches cherry-picked from upstream.
     - Drop temp-deb-installer-hack.patch: no longer needed.
     - Rework patches to account for upstream changes:
       - shell-ash-export-HOME.patch
       - version.patch
   * Enable new applets for use by initramfs-tools: nuke, resume, run-init.
 .
 busybox (1:1.27.2-3) unstable; urgency=medium
 .
   [ Cyril Brulebois ]
   * Update Vcs-{Browser,Git} to point to salsa (alioth's replacement).
 .
   [ Chris Lamb ]
   * PEP8 fixes.
 .
   [ Ben Hutchings ]
   * Stop overriding stack alignment on i386 (Closes: #886506)
   * Apply security fixes for wget from upstream:
     - wget: more thorough sanitization of other side's data
     - wget: check chunk length for overflowing off_t (CVE-2018-1000517)
       (Closes: #902724)
     - wget: handle URLs with @ or hash differently
Checksums-Sha1:
 8e147d87546d2e0e61ad98a8c3a2e695169502fe 2452 busybox_1.30.1-4ubuntu1.dsc
 5d9a78fa2789cd22cdac78058296e195e67faf59 7793781 busybox_1.30.1.orig.tar.bz2
 f93b085790a5c6bc8a3b61319aff3d7155cfac33 59680 busybox_1.30.1-4ubuntu1.debian.tar.xz
 f135880555992a2f6aff170a394f5d48115ed53a 5619 busybox_1.30.1-4ubuntu1_source.buildinfo
Checksums-Sha256:
 9eb5fe1881dfd34323289763013f921b359adf9f2a962f9e975620d577445623 2452 busybox_1.30.1-4ubuntu1.dsc
 3d1d04a4dbd34048f4794815a5c48ebb9eb53c5277e09ffffc060323b95dfbdc 7793781 busybox_1.30.1.orig.tar.bz2
 d0a97d0eaad4ce1a3ce4b3393141b9c0164c273eaf9523698a5c323c1a921e0f 59680 busybox_1.30.1-4ubuntu1.debian.tar.xz
 0352684ae0142b2e3fe2ee60eda92c21e37f05d29107361dadf766d81a4dc5c4 5619 busybox_1.30.1-4ubuntu1_source.buildinfo
Files:
 dee543a2c5c8a0abe8853d391131007c 2452 utils optional busybox_1.30.1-4ubuntu1.dsc
 4f72fc6abd736d5f4741fc4a2485547a 7793781 utils optional busybox_1.30.1.orig.tar.bz2
 6f4841894532116957794141174c1f32 59680 utils optional busybox_1.30.1-4ubuntu1.debian.tar.xz
 4764668695fd9b7810551ddab53a73b3 5619 utils optional busybox_1.30.1-4ubuntu1_source.buildinfo
Original-Maintainer: Debian Install System Team <debian-boot at lists.debian.org>

-----BEGIN PGP SIGNATURE-----

iQJOBAEBCgA4FiEErEg/aN5yj0PyIC/KVo0w8yGyEz0FAly//FoaHHN0ZXZlLmxh
bmdhc2VrQHVidW50dS5jb20ACgkQVo0w8yGyEz2aGBAArGKa6QEwczrroXXU3BaY
gLpRXV943ovAUJefCywcaBkizIBawPtua7ih6mro+4iV5J3eKSFlpyxq5ncTpwuh
ZzkDD8+vztJHYQBgSmXH+LRdvJQdiW0kGQQ/ElKmC+c4x2IOXllzK2hmp98MvtlD
8OL/Z05EfiLpIVEAOu86qGkXzYAdh4EoPl7E4aINjn1KP6IgZL6yZ0j9fd+TnQqV
hz8orKanDQmxyeraHNDYQN1gdAyzIHF44P3j8FBtKn0Zn8cycg8b8WQzmdkyjCFa
LiQ9/W5UHUsj+KUZJp9JLiuocCIKrXMXxBcV0UvagdIZTG3FY8Ajpl4w8Bb+vvVt
K8Vd4JzKEHBWalU/eWs+kSHMI3JVe8syDkaxE8Pv0e7p1dWh+ABjEgMHdacO0SmP
pocOcdGuJUCFA+6HBRJY0Ih4AMRY41IcPHiKuzJPnYYdOPf6bi2iIwFCnL48AdUc
rHq4W8wfMxEHNleMf8aHiiLFqbarowtep32XzOdoEmIpbKbq63nTVHi8CTffw42d
3Wz4q2bVZBP0Z7i79MOliG32GXHngBqrKc5rHFKOjuhSC0nPrIAD86pvJkpnkz7z
Ey9mG1o6D/2r62cVLuINNi/j9hvS9+Xj8xJVMonB+eQIii/sQyvYVqy7lW7NP55o
tRpcm32oTlUnnAv/PVa3fOs=
=IPvb
-----END PGP SIGNATURE-----