[CLSA-2026:1792760111] Fix CVE(s): CVE-2021-42380
Type:
security
Severity:
Important
Release date:
2026-10-23 12:55:23 UTC
Description:
* SECURITY UPDATE: awk: use-after-realloc in evaluate() when a $N field reference reallocates Fields[] while another operand still points into it - debian/patches/CVE-2021-42380.patch: Read L values before evaluating R, cap fsrealloc size, and rebase L.v when Fields[] moved during evaluation of R - debian/patches/CVE-2021-42380-tests.patch: add regression test - CVE-2021-42380
CVEs fixed:
Updated packages:
  • busybox_1.27.2-2ubuntu3.4+tuxcare.els3_amd64.deb
    sha:ce1bf0e5f3e2afb14a2ccb435ecc3168262ae143
  • busybox-initramfs_1.27.2-2ubuntu3.4+tuxcare.els3_amd64.deb
    sha:cd89913fa5274f9d76b0974194d01366392a24a9
  • busybox-static_1.27.2-2ubuntu3.4+tuxcare.els3_amd64.deb
    sha:d7302feb9b492b9e7774cced766bebba62031990
  • busybox-syslogd_1.27.2-2ubuntu3.4+tuxcare.els3_all.deb
    sha:54d987fd97de186c92f19d01908f0a803251af02
  • udhcpc_1.27.2-2ubuntu3.4+tuxcare.els3_amd64.deb
    sha:63c896f276822234c6e867840f360dbe203b1caf
  • udhcpd_1.27.2-2ubuntu3.4+tuxcare.els3_amd64.deb
    sha:d21d9636d85b415ba73dddb7b8ab9b7b0dafc47e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.