oss-sec mailing list archives

Re: vulnerabilities in busybox tar and cpio tools


From: Albert Veli <albert.veli () gmail com>
Date: Thu, 24 Apr 2025 09:09:45 +0200

Hi,

On Wed, Apr 23, 2025 at 10:51 PM Salvatore Bonaccorso <carnil () debian org>
wrote:


FTR, this one has assigned CVE-2025-46394
...
FTR, this one has CVE-2024-58251 assigned.

From what I can tell the latest release is busybox-1.37.0. Are these fixed
in this release? If not, do you have any link to patches I can apply to fix
these issues?

Regards,
Albert

Current thread: