SUSE-SU-2026:0892-1

csafDEsuse_csaf

Security update for busybox

view advisory published 2026-03-13

Security update for busybox

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2026-26158US——
A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by crafting a malicious tar archive containing unval…
CVE-2026-26157US—Exploit
A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific…
CVE-2025-60876US—Exploit
BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-cont…
CVE-2025-46394USlow3.3—
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
CVE-2023-42365USmedium5.5—
A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.
CVE-2023-42364USmedium5.5—
A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.
CVE-2023-42363USmedium5.5—
A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.
CVE-2021-42380UShigh7.2—
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function
02

references

External citations — patches, advisories, analysis.

03

remediations (40)

  • Fixedbusybox-0:1.35.0-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedbusybox-0:1.35.0-10.3.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan