busybox vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

* Ubuntu 20.04 LTS
* Ubuntu 18.04 LTS

Summary

Fraudulent security certificates could allow sensitive information
to be exposed when accessing the Internet.

Software Description

* busybox - Tiny utilities for small and embedded systems

Details

It was discovered that the BusyBox wget applet incorrectly
validated SSL certificates. A remote attacker could possibly use
this issue to intercept secure communications.

Update instructions

The problem can be corrected by updating your system to the
following package versions:

Ubuntu 20.04 LTS
busybox - 1:1.30.1-4ubuntu6.2
busybox-initramfs - 1:1.30.1-4ubuntu6.2
busybox-static - 1:1.30.1-4ubuntu6.2

Ubuntu 18.04 LTS
busybox - 1:1.27.2-2ubuntu3.3
busybox-initramfs - 1:1.27.2-2ubuntu3.3
busybox-static - 1:1.27.2-2ubuntu3.3

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary
changes.

References

* CVE-2018-1000500

--- Mystic BBS v1.12 A46 (Linux/64)
* Origin: BZ&BZ BBS (21:4/110)