{"id":"CLSA-2021-1638804058","summary":"Fix CVE(s): CVE-2021-42379, CVE-2021-42378, CVE-2021-42380, CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384, CVE-2021-42385, CVE-2021-42386","details":"\n   * SECURITY UPDATE: use-after-free in concat op\n     - debian/patches/CVE-awk-use-after-free.patch: second reference to\n       a field reallocs/moves Fields[] array, but first ref still tries\n       to use the element where it was before move.\n     - CVE-2021-42378\n     - CVE-2021-42379\n     - CVE-2021-42380\n     - CVE-2021-42381\n     - CVE-2021-42382\n     - CVE-2021-42383\n     - CVE-2021-42384\n     - CVE-2021-42385\n     - CVE-2021-42386\n     - debian/patches/CVE-awk-printf-buffer-overflow.patch: printf buffer\n       overflow.\n     - No CVE assigned (but mentioned by upstream maintainer as important at\n       http://lists.busybox.net/pipermail/busybox/2021-November/089328.html).","modified":"2026-06-04T10:03:42.473103564Z","published":"2021-12-06T15:20:58Z","upstream":["CVE-2021-42378","CVE-2021-42379","CVE-2021-42380","CVE-2021-42381","CVE-2021-42382","CVE-2021-42383","CVE-2021-42384","CVE-2021-42385","CVE-2021-42386"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1638804058"}],"affected":[{"package":{"name":"busybox","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/busybox?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1638804058.json"}},{"package":{"name":"busybox-initramfs","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/busybox-initramfs?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1638804058.json"}},{"package":{"name":"busybox-static","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/busybox-static?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1638804058.json"}},{"package":{"name":"busybox-syslogd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/busybox-syslogd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1638804058.json"}},{"package":{"name":"udhcpc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/udhcpc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1638804058.json"}},{"package":{"name":"udhcpd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/udhcpd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2021-1638804058.json"}}],"schema_version":"1.7.5"}