[CLSA-2026:1789202428] Fix CVE(s): CVE-2018-1000500, CVE-2021-42383, CVE-2022-28391, CVE-2023-39810
Type:
security
Severity:
Important
Release date:
2026-09-12 08:40:44 UTC
Description:
* SECURITY UPDATE - CVE-2018-1000500: missing TLS certificate verification in spawn_https_helper_openssl() - CVE-2021-42383: use-after-free in evaluate() on field concatenation - CVE-2022-28391: terminal escape injection in sockaddr2str() and nslookup parse_reply() - CVE-2023-39810: directory traversal in data_extract_all() * debian/config/pkg/{deb,static,udeb}: FEATURE_PATH_TRAVERSAL_PROTECTION=y, the CVE-2023-39810 guard is compiled out without it * debian/testsuite-linux.diff: disable the cpio uid/gid test, it is environment dependent and fails the same way on an unpatched tree
CVEs fixed:
Updated packages:
  • busybox_1.30.1-6+deb11u1+tuxcare.els1_amd64.deb
    sha:fcd1d70fea1f9bab078ecaee2536ae6365a0bfde
  • busybox-static_1.30.1-6+deb11u1+tuxcare.els1_amd64.deb
    sha:abea1b5a17a15e66b4268a66f623dc1068d38850
  • busybox-syslogd_1.30.1-6+deb11u1+tuxcare.els1_all.deb
    sha:58be69e203716eb41fee133ce85b57b2ed451ab1
  • udhcpc_1.30.1-6+deb11u1+tuxcare.els1_amd64.deb
    sha:b763a78543d55ae5fc76747500921c61b6db40b7
  • udhcpd_1.30.1-6+deb11u1+tuxcare.els1_amd64.deb
    sha:3806e168eb8b71e2fcdc8946407afd069cad1e15
  • busybox_1.30.1-6+deb11u1+tuxcare.els1_arm64.deb
    sha:c6ea458c3b3f718565f01fc6420d2050efffe4d8
  • busybox-static_1.30.1-6+deb11u1+tuxcare.els1_arm64.deb
    sha:4a44df8b9f4fd2b13b347d0186653595ebb135dc
  • udhcpc_1.30.1-6+deb11u1+tuxcare.els1_arm64.deb
    sha:50ddf068f7cab42b8b4e2f4fb788aa1862385e51
  • udhcpd_1.30.1-6+deb11u1+tuxcare.els1_arm64.deb
    sha:13bd82029c2586e16cf4799da3ee68db2083435b
  • busybox_1.30.1-6+deb11u1+tuxcare.els1_armel.deb
    sha:93621a725dc7a860e908970aa04351722716b80f
  • busybox-static_1.30.1-6+deb11u1+tuxcare.els1_armel.deb
    sha:c49a699b47ff5f1b9a0fd37f3aa484dc716ac1f0
  • udhcpc_1.30.1-6+deb11u1+tuxcare.els1_armel.deb
    sha:747ae6ce6aff4e481e307719fa289dd81f9998c3
  • udhcpd_1.30.1-6+deb11u1+tuxcare.els1_armel.deb
    sha:ed73947072e965bb5537bff8faf23440cddc43e7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.