< back to search

gpp_maybe Security update for busybox

SUSE-SLE-Module-Basesystem-15-SP7-2026-759

This update for busybox fixes the following issues: - CVE-2026-26157: Arbitrary file overwrite and potential code execution via incomplete path sanitization (bsc#1258163). - CVE-2026-26158: Arbitrary file modification and privilege escalation via unvalidated tar archive entries (bsc#1258167).

Release Date

Mar 3 2026
References

Bugzilla: 1258163, 1258167
CVEs: CVE-2026-26157, CVE-2026-26158
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.7 aarch64

Packages

busybox
Minimalist variant of UNIX utilities linked in a single executable

1.37.0-150700.18.15.1 lock rpm lock src

busybox-static
Static linked version of Busybox, a compact UNIX utility collection

1.37.0-150700.18.15.1 lock rpm

Basesystem Module 15.7 ppc64le

Packages

busybox
Minimalist variant of UNIX utilities linked in a single executable

1.37.0-150700.18.15.1 lock rpm lock src

busybox-static
Static linked version of Busybox, a compact UNIX utility collection

1.37.0-150700.18.15.1 lock rpm

Basesystem Module 15.7 s390x

Packages

busybox
Minimalist variant of UNIX utilities linked in a single executable

1.37.0-150700.18.15.1 lock rpm lock src

busybox-static
Static linked version of Busybox, a compact UNIX utility collection

1.37.0-150700.18.15.1 lock rpm

Basesystem Module 15.7 x86_64

Packages

busybox
Minimalist variant of UNIX utilities linked in a single executable

1.37.0-150700.18.15.1 lock rpm lock src

busybox-static
Static linked version of Busybox, a compact UNIX utility collection

1.37.0-150700.18.15.1 lock rpm