busybox

busybox copied to clipboard

The latest busybox becomes compiled dynamic?

10

``` 606487dc92ff318103b5b5482# ldd /tmp/registry/docker/registry/v2/blobs/sha256/97/97dc7d325bed4fb89cd8ce42bbf8084403bf3aa342f422736f056a2ab2902451/bin/cp /tmp/registry/docker/registry/v2/blobs/sha256/97/97dc7d325bed4fb89cd8ce42bbf8084403bf3aa342f422736f056a2ab2902451/bin/cp: /lib/x86_64-linux-gnu/libm.so.6: version `GLIBC_2.29' not found (required by /tmp/registry/docker/registry/v2/blobs/sha256/97/97dc7d325bed4fb89cd8ce42bbf8084403bf3aa342f422736f056a2ab2902451/bin/cp) /tmp/registry/docker/registry/v2/blobs/sha256/97/97dc7d325bed4fb89cd8ce42bbf8084403bf3aa342f422736f056a2ab2902451/bin/cp: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.28' not found (required by /tmp/registry/docker/registry/v2/blobs/sha256/97/97dc7d325bed4fb89cd8ce42bbf8084403bf3aa342f422736f056a2ab2902451/bin/cp) linux-vdso.so.1 (0x00007fff050bc000) libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007fbfdadfe000) libresolv.so.2 =>...

ywk253100

CVE-2022-28391 BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.

4

[CVE-2022-28391](https://nvd.nist.gov/vuln/detail/CVE-2022-28391) BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker...

amehta-mstr

ping: bad address, Running in k8s.

3

``` root@linuxserver-image-0:/# cat /etc/resolv.conf search somewhere.svc.cluster.local svc.cluster.local cluster.local local.mydomain.com nameserver 10.152.183.10 options ndots:5 ``` ``` root@linuxserver-image-0:/# nslookup google.com Server: 10.152.183.10 Address: 10.152.183.10:53 Non-authoritative answer: Name: google.com Address: [multiple results omitted....

XtremeOwnageDotCom

nc: bad port spec 'local:/...'

4

I want to have an init script in my tiny Busybox container check to make sure a socket like `/dev/log` both exists and that there is something listening to it...

lump

Enable https verification for wget or disable https

11

busybox wget as included in the busybox base image doesn't verify TLS certificate: ``` $ docker run -ti --rm busybox wget -q https://expired.badssl.com && echo $? wget: note: TLS certificate...

discordianfish

wget Connection reset by peer

14

When using version 1.36 in eks environment, wget request fails. I attach busybox.yaml file and wget command. It doesn't seem to be a problem with the eks environment because it...

cw-20021351

Consider single (standalone) applets variants

2

Consider adding alternative variants that have all applets built as standalone binaries.([make_single_applets.sh](https://github.com/mirror/busybox/blob/master/make_single_applets.sh)). This would be great for building Docker images `FROM scratch`. It would allow users to selectively consume only...

0xF4CED

Segfault on `riscv64`

14

As discovered in https://github.com/docker-library/busybox/pull/202, `busybox` segfaults when running on real `riscv64` hardware but works fine on QEMU 😭. Just opening this as a tracking issue. ```console + gdb -core=rootfs/core -silent...

yosifkit

TLS error from peer (alert code 40)

1

busybox version：BusyBox v1.36.1 (2023-05-18 22:34:17 UTC) multi-call binary wget --no-check-certificate --spider https://prometheus:9090/prometheus/-/ready Connecting to prometheus:9090 (172.18.0.4:9090) wget: TLS error from peer (alert code 40): handshake failure wget: error getting response:...

wcollin