Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

openSUSE Leap 15.3: 2022:0135-1 Important Security Advisory for Busybox

opensuse
Calendar Grey January 20, 2022
Dist Opensuse Esm H88
openSUSE reveals a vital upgrade for busybox, tackling 27 significant security vulnerabilities. Update without delay!
An update that fixes 27 vulnerabilities is now available

Description

This update for busybox fixes the following issues:

- CVE-2011-5325: Fixed tar directory traversal (bsc#951562).

- CVE-2015-9261: Fixed segfalts and application crashes in huft_build

(bsc#1102912).

- CVE-2016-2147: Fixed out of bounds write (heap) due to integer underflow

in udhcpc (bsc#970663).

- CVE-2016-2148: Fixed heap-based buffer overflow in OPTION_6RD parsing

(bsc#970662).

- CVE-2016-6301: Fixed NTP server denial of service flaw (bsc#991940).

- CVE-2017-15873: Fixed integer overflow in get_next_block function in

archival/libarchive/decompress_bunzip2.c (bsc#1064976).

- CVE-2017-15874: Fixed integer underflow in

archival/libarchive/decompress_unlzma.c (bsc#1064978).

- CVE-2017-16544: Fixed Insufficient sanitization of filenames when

autocompleting (bsc#1069412).

- CVE-2018-1000500 : Fixed missing SSL certificate validation in wget

(bsc#1099263).

- CVE-2018-1000517: Fixed heap-based buffer overflow in the

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service code execution important heap overflow busybox openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.3:

zypper in -t patch openSUSE-SLE-15.3-2022-135=1

Package List

- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):

busybox-1.34.1-4.9.1

busybox-static-1.34.1-4.9.1

References

https://www.suse.com/security/cve/CVE-2011-5325.html

https://www.suse.com/security/cve/CVE-2015-9261.html

https://www.suse.com/security/cve/CVE-2016-2147.html

https://www.suse.com/security/cve/CVE-2016-2148.html

https://www.suse.com/security/cve/CVE-2016-6301.html

https://www.suse.com/security/cve/CVE-2017-15873.html

https://www.suse.com/security/cve/CVE-2017-15874.html

https://www.suse.com/security/cve/CVE-2017-16544.html

https://www.suse.com/security/cve/CVE-2018-1000500.html

https://www.suse.com/security/cve/CVE-2018-1000517.html

https://www.suse.com/security/cve/CVE-2018-20679.html

https://www.suse.com/security/cve/CVE-2019-5747.html

https://www.suse.com/security/cve/CVE-2021-28831.html

https://www.suse.com/security/cve/CVE-2021-42373.html

https://www.suse.com/security/cve/CVE-2021-42374.html

https://www.suse.com/security/cve/CVE-2021-42375.html

https://www.suse.com/security/cve/CVE-2021-42376.html

https://www.suse.com/security/cve/CVE-2021-42377.html

https://www.suse.com/security/cve/CVE-2021-42378...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2022:0135-1
Rating: important
Affected Products: openSUSE Leap 15.3 .

Topics%20covered

Topics Covered

security advisory denial of service code execution important heap overflow busybox openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here