openSUSE-SU-2026:20090-1

Security update for busybox

view advisory published 2026-01-22

Security update for busybox

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-60876US	—	0.31% (23rd)	Exploit	2025-11-10
BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-cont…
CVE-2025-46394US	low3.3	0.18% (7th)	—	2025-04-23
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

references

External citations — patches, advisories, analysis.

remediations (20)

Fixedbusybox-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-0:1.37.0-160000.4.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-0:1.37.0-160000.4.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-0:1.37.0-160000.4.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-0:1.37.0-160000.4.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-static-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-static-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-static-0:1.37.0-160000.4.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-static-0:1.37.0-160000.4.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-static-0:1.37.0-160000.4.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-static-0:1.37.0-160000.4.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-static-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-static-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-warewulf3-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-warewulf3-0:1.37.0-160000.4.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-warewulf3-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedbusybox-warewulf3-0:1.37.0-160000.4.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan