gpp_maybe Security update for busybox

SUSE-SLE-Module-Basesystem-15-SP7-2026-235

This update for busybox fixes the following issues: Security issues: - CVE-2025-46394: Fixed tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661) - CVE-2025-60876: Fixed HTTP request header injection in wget (CVE-2025-60876, bsc#1253245) Other issues: - Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670) - Fixed unshare -mrpf sh core dump on ppc64le (bsc#1249237)

• Release Date
  Jan 22 2026
• References
  Bugzilla: 1241661, 1249237, 1253245, 1236670
  CVEs: CVE-2025-46394, CVE-2025-60876
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  busybox
  Minimalist variant of UNIX utilities linked in a single executable

  1.37.0-150700.18.10.1 lock rpm lock src

  busybox-static
  Static linked version of Busybox, a compact UNIX utility collection

  1.37.0-150700.18.10.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  busybox
  Minimalist variant of UNIX utilities linked in a single executable

  1.37.0-150700.18.10.1 lock rpm lock src

  busybox-static
  Static linked version of Busybox, a compact UNIX utility collection

  1.37.0-150700.18.10.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  busybox
  Minimalist variant of UNIX utilities linked in a single executable

  1.37.0-150700.18.10.1 lock rpm lock src

  busybox-static
  Static linked version of Busybox, a compact UNIX utility collection

  1.37.0-150700.18.10.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  busybox
  Minimalist variant of UNIX utilities linked in a single executable

  1.37.0-150700.18.10.1 lock rpm lock src

  busybox-static
  Static linked version of Busybox, a compact UNIX utility collection

  1.37.0-150700.18.10.1 lock rpm