Oval Definition:oval:org.opensuse.security:def:111105
Revision Date:2021-10-31Version:1
Title:Security update for busybox (Important)
Description:

This update for busybox fixes the following issues:

- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522). - CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426). - CVE-2018-1000517: Fixed buffer overflow in the retrieve_file_data() (bsc#1099260). - CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562). - CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263).

This update was imported from the SUSE:SLE-15:Update update project.
Family:unixClass:patch
Status:Reference(s):1099260
1099263
1121426
1184522
951562
CVE-2011-5325
CVE-2018-1000500
CVE-2018-1000517
CVE-2018-20679
CVE-2021-28831
openSUSE-SU-2021:1408-1
Platform(s):openSUSE Leap 15.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • busybox-1.26.2-lp152.5.3.1 is installed
  • OR busybox-static-1.26.2-lp152.5.3.1 is installed
  • BACK