SUSE-SU-2026:0235-1

csafDEsuse_csaf

Security update for busybox

view advisory published 2026-01-22

Security update for busybox

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-60876US—Exploit
BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-cont…
CVE-2025-46394USlow3.3—
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
02

references

External citations — patches, advisories, analysis.

03

remediations (16)

  • Fixedbusybox-0:1.37.0-150700.18.10.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-150700.18.10.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-150700.18.10.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-150700.18.10.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-150700.18.10.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-150700.18.10.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-150700.18.10.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-150700.18.10.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-150700.18.10.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-150700.18.10.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-150700.18.10.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-150700.18.10.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-150700.18.10.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-150700.18.10.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-150700.18.10.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-150700.18.10.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan