Re: [Buildroot] [PATCH 1/3] package/dracut: security bump to version 112

Julien Olivain via buildroot <[email protected]>
Newsgroups net.busybox.buildroot
Message-ID <[email protected]>
On 13/08/2026 16:34, Fiona Klute via buildroot wrote:
> From: "Fiona Klute (Othermo GmbH)" <[email protected]>
> 
> Upstream changelog:
> https://github.com/dracut-ng/dracut/releases/tag/112
> 
> The changelog lists multiple "security related commits", though only
> one mentions a CVE: CVE-2026-6893 [1], which allows a malicious DHCP
> server to inject code into shell scripts.
> 
> [1] https://nvd.nist.gov/vuln/detail/CVE-2026-6893
> 
> Signed-off-by: Fiona Klute (Othermo GmbH) <[email protected]>

I applied the first 2 patches of this series to master, thanks.

I kept the third patch (dracut-util) as new to give it more time for
review and testing.

Best regards,

Julien.
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.