openSUSE-SU-2021:1408-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2021:1408-1

Related

Published

2021-10-31T14:53:16Z

Modified

2021-10-31T14:53:16Z

Summary

Security update for busybox

Details

This update for busybox fixes the following issues:

CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).
CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).
CVE-2018-1000517: Fixed buffer overflow in the retrievefiledata() (bsc#1099260).
CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562).
CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263).

This update was imported from the SUSE:SLE-15:Update update project.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.26.2-lp152.5.3.1

{
    "binaries": [
        {
            "busybox": "1.26.2-lp152.5.3.1",
            "busybox-static": "1.26.2-lp152.5.3.1"
        }
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.26.2-lp152.5.3.1

{
    "binaries": [
        {
            "busybox": "1.26.2-lp152.5.3.1",
            "busybox-static": "1.26.2-lp152.5.3.1"
        }
    ]
}