shield
Security update for busybox
SUSE-SLE-Module-Basesystem-15-SP4-2022-4371
This update for busybox fixes the following issues: - CVE-2022-30065: Fixed use-after-free in the AWK applet (bsc#1199744). - CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660). - Update to 1.35.0 also introduced: - awk: fix printf %%, fix read beyond end of buffer - chrt: silence analyzer warning - libarchive: remove duplicate forward declaration - mount: "mount -o rw ...." should not fall back to RO mount - ps: fix -o pid=PID,args interpreting entire "PID,args" as header - tar: prevent malicious archives with long name sizes causing OOM - udhcpc6: fix udhcp_find_option to actually find DHCP6 options - xxd: fix -p -r - support for new optoins added to basename, cpio, date, find, mktemp, wget and others
-
Release DateDec 8 2022
-
References
-
Typesecurity
-
Severitymoderate
cloud_download Downloads
Basesystem Module 15.4 ppc64le
-
Packagesbusybox
Minimalist variant of UNIX utilities linked in a single executablebusybox-static1.35.0-150400.3.8.1 lock rpm lock src
Static linked version of Busybox, a compact UNIX utility collection1.35.0-150400.3.8.1 lock rpm
Basesystem Module 15.4 aarch64
-
Packagesbusybox
Minimalist variant of UNIX utilities linked in a single executablebusybox-static1.35.0-150400.3.8.1 lock rpm lock src
Static linked version of Busybox, a compact UNIX utility collection1.35.0-150400.3.8.1 lock rpm
Basesystem Module 15.4 s390x
-
Packagesbusybox
Minimalist variant of UNIX utilities linked in a single executablebusybox-static1.35.0-150400.3.8.1 lock rpm lock src
Static linked version of Busybox, a compact UNIX utility collection1.35.0-150400.3.8.1 lock rpm
Basesystem Module 15.4 x86_64
-
Packagesbusybox
Minimalist variant of UNIX utilities linked in a single executablebusybox-static1.35.0-150400.3.8.1 lock rpm lock src
Static linked version of Busybox, a compact UNIX utility collection1.35.0-150400.3.8.1 lock rpm