openSUSE-SU-2026:20090-1

csafDEsuse_csaf

Security update for busybox

view advisory published 2026-01-22

Security update for busybox

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-60876US—Exploit
BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-cont…
CVE-2025-46394USlow3.3—
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
02

references

External citations — patches, advisories, analysis.

03

remediations (20)

  • Fixedbusybox-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-160000.4.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-160000.4.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-160000.4.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-160000.4.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-160000.4.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-160000.4.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-160000.4.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-160000.4.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-static-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-warewulf3-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-warewulf3-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-warewulf3-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-warewulf3-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan