gpp_maybe Security update for busybox

SUSE-SLE-Micro-6.0-619

This update for busybox fixes the following issues: - CVE-2023-42363: use-after-free vulnerability in xasprintf function in xfuncs_printf.c (bsc#1217580). - CVE-2023-42364: use-after-free in the awk.c evaluate function (bsc#1217584). - CVE-2023-42365: use-after-free in the awk.c copyvar function (bsc#1217585). - CVE-2025-46394: files in a TAR archive can have their filenames hidden from a listing if terminal escape sequences are used when naming other files included in the archive (bsc#1241661). - CVE-2025-60876: request line incorrectly neutralized mat lead to header injection (bsc#1253245). - CVE-2026-26157: Arbitrary file overwrite and potential code execution via incomplete path sanitization (bsc#1258163). - CVE-2026-26158: Arbitrary file modification and privilege escalation via unvalidated tar archive entries (bsc#1258167). - CVE-2021-42380: Additional fix for use-after-realloc in awk (bsc#1192869).

• Release Date
  Mar 12 2026
• References
  Bugzilla: 1192869, 1217580, 1217584, 1217585, 1241661, 1253245, 1258163, 1258167
  CVEs: CVE-2021-42380, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2025-46394, CVE-2025-60876, CVE-2026-26157, CVE-2026-26158
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.0 s390x

• Packages
  busybox
  Minimalist variant of UNIX utilities linked in a single executable

  1.36.1-3.1 lock rpm

SUSE Linux Micro 6.0 aarch64

• Packages
  busybox
  Minimalist variant of UNIX utilities linked in a single executable

  1.36.1-3.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  busybox
  Minimalist variant of UNIX utilities linked in a single executable

  1.36.1-3.1 lock rpm