{"id":"CLSA-2025-1762269073","summary":"Fix CVE(s): CVE-2018-1000500, CVE-2022-28391, CVE-2023-39810","details":"   * SECURITY UPDATE: missing SSL certificate validation vulnerability in wget\n     - debian/patches/CVE-2018-1000500-1.patch: implement TLS verification with\n       CENABLE_FEATURE_WGET_OPENSSL\n     - debian/patches/CVE 2018-1000500-2.patch: fix openssl options for cert verification\n     - CVE-2018-1000500\n   * SECURITY UPDATE: escape sequence injection attack\n     - debian/patches/CVE-2022-28391-1.patch: sockaddr2str: ensure only printable\n       characters are returned for the hostname part\n     - debian/patches/CVE-2022-28391-2.patch: nslookup: sanitize all printed strings\n     - CVE-2022-28391\n   * SECURITY UPDATE: directory traversal vulnerability in CPIO command\n     - debian/patches/CVE-2023-39810.patch: archival: disallow path traversals\n     - debian/config/pkg/*: regenerate to add the new FEATURE_PATH_TRAVERSAL_PROTECTION\n       option\n     - CVE-2023-39810","modified":"2026-06-04T09:45:04.533641534Z","published":"2025-11-04T15:11:26Z","upstream":["CVE-2018-1000500","CVE-2022-28391","CVE-2023-39810"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1762269073.html"}],"affected":[{"package":{"name":"busybox","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/busybox?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762269073.json"}},{"package":{"name":"busybox-static","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/busybox-static?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762269073.json"}},{"package":{"name":"busybox-syslogd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/busybox-syslogd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762269073.json"}},{"package":{"name":"udhcpc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/udhcpc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762269073.json"}},{"package":{"name":"udhcpd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/udhcpd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762269073.json"}}],"schema_version":"1.7.5"}