[CLSA-2026:1776959688] busybox: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-04-23 15:54:53 UTC
Description:
- CVE-2018-1000517: fix heap buffer overflow in wget chunked decoding - CVE-2017-16544: reject terminal control sequences in shell tab completion - CVE-2018-20679: reject zero-length DHCP options and validate 4-byte option lengths - CVE-2019-5747: validate DHCP_SUBNET option length before decoding
Updated packages:
  • busybox-1.15.1-21.el6_6.tuxcare.els3.x86_64.rpm
    sha:54beb2386e062d2f25f712da2e926dcc01d51086cf77f2e66e5b4a3aedfb64c2
  • busybox-petitboot-1.15.1-21.el6_6.tuxcare.els3.x86_64.rpm
    sha:6424b61c9f2757895f124264e32df45c6d3ebc3811410a606c11377731b9049e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.