Re: security alerts in busybox

On Fri, 24 Apr 2026 at 19:44, Aaro Koskinen <[email protected]> wrote:
>
> Hi,
>
> On Fri, Apr 24, 2026 at 07:30:22PM +0200, Roberto A. Foglietta wrote:
> > (1) These are trivial alerts, therefore I faced it first to provide an
> > example. [...] And the second main question is straightforward: (2)
> > does this fix worth 177 bytes? In relative terms it is 150 ppm
> > compared with the full size footprint. In terms of certifications is a
> > solid step towards peace of mind.
>
> IMHO, it does not make sense to churn the code just to silence some
> random unnamed tool without any real proper reason, and it certainly
> does not give any piece of mind.

I read: "random unnamed tool" -- I see what is the information you are
seeking for... LOL

Spoiler: usually the security reports have a graceful period of time,
a few weeks or months.

Guess by yourself why. ;-)

Best regards, R-