[CLSA-2026:1794267889] Fix CVE(s): CVE-2026-38753, CVE-2026-38754
Type:
security
Severity:
Important
Release date:
2026-11-09 23:45:01 UTC
Description:
* SECURITY UPDATE: use-after-free in awk_sub() (editors/awk.c) - debian/patches/CVE-2026-38753.patch: use-after-free in awk_sub() (editors/awk.c) - CVE-2026-38753 * SECURITY UPDATE: heap overflow in ifsbreakup() (shell/ash.c) - debian/patches/CVE-2026-38754-prereq.patch: clear IFS regions before raising expansion errors (upstream 1c5455284) - debian/patches/CVE-2026-38754.patch: heap overflow in ifsbreakup() (shell/ash.c) - CVE-2026-38754
CVEs fixed:
Updated packages:
  • busybox_1.30.1-6+deb11u1+tuxcare.els2_amd64.deb
    sha:863ca4421cc452b05bc76daa434042ab21ac6625
  • busybox-static_1.30.1-6+deb11u1+tuxcare.els2_amd64.deb
    sha:019b89728292fd026ecc9bae682a643151eb78ca
  • busybox-syslogd_1.30.1-6+deb11u1+tuxcare.els2_all.deb
    sha:d5ce0dded591572e6e9ac6eeaaee1f94d70514aa
  • udhcpc_1.30.1-6+deb11u1+tuxcare.els2_amd64.deb
    sha:61dc5f10ae819e35ed3a3ce985bf660069aefd6f
  • udhcpd_1.30.1-6+deb11u1+tuxcare.els2_amd64.deb
    sha:7d00141f515a9b2da13deaf8ef35ba331424e28e
  • busybox_1.30.1-6+deb11u1+tuxcare.els2_arm64.deb
    sha:87e893fa1a08b15f86b7315cccf2598b2bac7737
  • busybox-static_1.30.1-6+deb11u1+tuxcare.els2_arm64.deb
    sha:04bde88dbad18598424f9fda168ca788bb2a4b29
  • udhcpc_1.30.1-6+deb11u1+tuxcare.els2_arm64.deb
    sha:9e4a2b69a7306294427532e191a7390b20d016ef
  • udhcpd_1.30.1-6+deb11u1+tuxcare.els2_arm64.deb
    sha:56da8cc022cb1916f4b9ef3f9a1fff42d55435f2
  • busybox_1.30.1-6+deb11u1+tuxcare.els2_armel.deb
    sha:4f399d3c895f7d202b2625a719f49f783c6d794c
  • busybox-static_1.30.1-6+deb11u1+tuxcare.els2_armel.deb
    sha:4bfcf7a96b9e801be2b899f05b40d0bccc38cd95
  • udhcpc_1.30.1-6+deb11u1+tuxcare.els2_armel.deb
    sha:72c069b28ef47fc0fa4fc255c9d50406a751c1b3
  • udhcpd_1.30.1-6+deb11u1+tuxcare.els2_armel.deb
    sha:d9305a7fee88f3822d64cf9367bd0924d48a5b93
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.