mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
c9659fd9e8
In Buildroot there are multiple way to apply patches on a package [1]
- Adding `.patch` file in the package directory.
- Define `<pkg>_PATCH` variable with the location of the patch tar.gz.
It used to download Debian patches tarball.
- Implement custom patching logic with `PRE`/`POST` patches hooks.
To make the CycloneDX SBOM generation not dependant on downloading the
packages, the two last options have the downside of not appearing on the
generated SBOM.
The heirloom-mailx package is downloading a tarball from the Debian
mirror with the `<pkg>_PATCH` method [2].
To improve the tracking of the patched vulnerabilities for the
heirloom-mailx package this commit import the patches previously
downloaded with the `_PATCH` variable in the Buildroot tree. This allows
to add the `CVE:` trailer [3] on the patches that fix vulnerabilities to
better track which patch is fixing the vulnerability.
[1] https://buildroot.org/downloads/manual/manual.html#patch-policy
[2] http://snapshot.debian.org/archive/debian/20150815T155609Z/pool/main/h/heirloom-mailx/heirloom-mailx_12.5-5.debian.tar.xz
[3] 1167d0ff3d docs/manual: mention CVE trailer
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
70 lines
1.8 KiB
Diff
70 lines
1.8 KiB
Diff
From 9984ae5cb0ea0d61df1612b06952a61323c083d9 Mon Sep 17 00:00:00 2001
|
|
From: Florian Weimer <fweimer@redhat.com>
|
|
Date: Mon, 17 Nov 2014 11:13:38 +0100
|
|
Subject: [PATCH] outof: Introduce expandaddr flag
|
|
|
|
Document that address expansion is disabled unless the expandaddr
|
|
binary option is set.
|
|
|
|
This has been assigned CVE-2014-7844 for BSD mailx, but it is not
|
|
a vulnerability in Heirloom mailx because this feature was documented.
|
|
|
|
CVE: CVE-2014-7844
|
|
Upstream: https://sources.debian.org/patches/heirloom-mailx/12.5-4/0011-outof-Introduce-expandaddr-flag.patch/
|
|
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
|
|
---
|
|
mailx.1 | 14 ++++++++++++++
|
|
names.c | 3 +++
|
|
2 files changed, 17 insertions(+)
|
|
|
|
diff --git a/mailx.1 b/mailx.1
|
|
index 70a7859..22a171b 100644
|
|
--- a/mailx.1
|
|
+++ b/mailx.1
|
|
@@ -656,6 +656,14 @@ but any reply returned to the machine
|
|
will have the system wide alias expanded
|
|
as all mail goes through sendmail.
|
|
.SS "Recipient address specifications"
|
|
+If the
|
|
+.I expandaddr
|
|
+option is not set (the default), recipient addresses must be names of
|
|
+local mailboxes or Internet mail addresses.
|
|
+.PP
|
|
+If the
|
|
+.I expandaddr
|
|
+option is set, the following rules apply:
|
|
When an address is used to name a recipient
|
|
(in any of To, Cc, or Bcc),
|
|
names of local mail folders
|
|
@@ -2391,6 +2399,12 @@ and exits immediately.
|
|
If this option is set,
|
|
\fImailx\fR starts even with an empty mailbox.
|
|
.TP
|
|
+.B expandaddr
|
|
+Causes
|
|
+.I mailx
|
|
+to expand message recipient addresses, as explained in the section,
|
|
+Recipient address specifications.
|
|
+.TP
|
|
.B flipr
|
|
Exchanges the
|
|
.I Respond
|
|
diff --git a/names.c b/names.c
|
|
index 66e976b..c69560f 100644
|
|
--- a/names.c
|
|
+++ b/names.c
|
|
@@ -268,6 +268,9 @@ outof(struct name *names, FILE *fo, struct header *hp)
|
|
FILE *fout, *fin;
|
|
int ispipe;
|
|
|
|
+ if (value("expandaddr") == NULL)
|
|
+ return names;
|
|
+
|
|
top = names;
|
|
np = names;
|
|
time(&now);
|
|
--
|
|
1.9.3
|
|
|
|
|