I have compared no/suid links between these versions. So, I was trying to enable the same applets like in older version and do not enable the new one. Some applets could not be disabled (they are automatically enabled) due to dependencies.
For this version of defconfig the new applets are: chrt cttyhack init lzcat mdev nproc setsid xzcat partprobe On 10/03/2017 08:12 PM, Andre McCurdy wrote: > On Tue, Oct 3, 2017 at 8:38 AM, Andrej Valek <andrej.va...@siemens.com> wrote: >> Update busybox to version 1.27.2 >> Fix CVE-20177-5325 >> >> Changes: >> - busybox: 1.24.1 -> 1.27.2: >> - fixed link creation to shell >> - reported bug with suid shells >> [https://bugs.busybox.net/show_bug.cgi?id=10346] >> - removed and modified already merged patches >> - updated defconfig regarding to new version > > Did you compare the list of applets enabled before and after the > update? Any notable changes? > -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core
