SUSE-SU-2026:0236-1: busybox-links&distro=openSUSE Leap 15.6
Vulnerability summary
SUSE-SU-2026:0236-1 is a vulnerability in busybox-links&distro=openSUSE Leap 15.6 with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 22-01-2026PublishedVulnerability first disclosed.
- 23-03-2026Last modifiedVulnerability information updated.
Description
Security update for busybox This update for busybox fixes the following issues: This update for busybox fixes the following issues: Security issues: - CVE-2025-46394: Fixed tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661) - CVE-2025-60876: Fixed HTTP request header injection in wget (CVE-2025-60876, bsc#1253245) Other issues: - Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670) - Fixed unshare -mrpf sh core dump on ppc64le (bsc#1249237) - Fixed adduser inside containers on an SELinux host (bsc#1247779)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse6 products
- busybox&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 1.37.0-150500.10.14.1
- busybox&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 1.37.0-150500.10.14.1
- busybox&distro=SUSE Linux Enterprise Server 15 SP5-LTSS< 1.37.0-150500.10.14.1
- busybox&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 1.37.0-150500.10.14.1
- busybox&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5< 1.37.0-150500.10.14.1
Opensuse2 products
- busybox-links&distro=openSUSE Leap 15.6< 1.37.0-150500.7.9.1
- busybox&distro=openSUSE Leap 15.6< 1.37.0-150500.10.14.1
2 vendors · 8 products