{"id":"CLSA-2021-1635459154","summary":"Fix CVE(s): CVE-2021-28831","details":"\n   * SECURITY UPDATE: operation on invalid pointer\n     - debian/patches/CVE-2021-28831.patch: decompress_gunzip.c mishandles the error bit\n       on the huft_build result pointer, with a resultant invalid free\n       or segmentation fault, via malformed gzip data.\n     - CVE-2021-28831","modified":"2026-06-04T09:45:22.530162617Z","published":"2021-10-28T22:12:34Z","upstream":["CVE-2021-28831"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1635459154"}],"affected":[{"package":{"name":"busybox","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/busybox?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15ubuntu1.5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459154.json"}},{"package":{"name":"busybox-initramfs","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/busybox-initramfs?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15ubuntu1.5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459154.json"}},{"package":{"name":"busybox-static","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/busybox-static?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15ubuntu1.5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459154.json"}},{"package":{"name":"busybox-syslogd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/busybox-syslogd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15ubuntu1.5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459154.json"}},{"package":{"name":"udhcpc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/udhcpc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15ubuntu1.5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459154.json"}},{"package":{"name":"udhcpd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/udhcpd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15ubuntu1.5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1635459154.json"}}],"schema_version":"1.7.5"}