Oval Definition:	oval:org.opensuse.security:def:105850
Revision Date: 2021-10-27 Version: 1 Title: Security update for busybox (Important) Description: This update for busybox fixes the following issues: - CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522). - CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426). - CVE-2018-1000517: Fixed buffer overflow in the retrieve_file_data() (bsc#1099260). - CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562). - CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263). Family: unix Class: patch Status: Reference(s): 1099260 1099263 1121426 1184522 951562 CVE-2011-5325 CVE-2014-7189 CVE-2015-8618 CVE-2016-3959 CVE-2016-5386 CVE-2017-15041 CVE-2017-15042 CVE-2017-8932 CVE-2018-1000500 CVE-2018-1000517 CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 CVE-2018-20679 CVE-2018-6574 CVE-2019-6486 CVE-2021-28831 SUSE-SU-2021:3531-1 Platform(s): openSUSE Tumbleweed SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS Product(s): Definition Synopsis openSUSE Tumbleweed is installed AND Package Information go1.10-1.10.8-8.2 is installed OR go1.10-doc-1.10.8-8.2 is installed OR go1.10-race-1.10.8-8.2 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed AND Package Information busybox-1.26.2-4.5.1 is installed OR busybox-static-1.26.2-4.5.1 is installed
BACK