SUSE-SU-2026:0759-1
SUSE-SU-2026:0759-1 · Security update for busybox
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for busybox fixes the following issues: - CVE-2026-26157: Arbitrary file overwrite and potential code execution via incomplete path sanitization (bsc#1258163). - CVE-2026-26158: Arbitrary file modification and privilege escalation via unvalidated tar archive entries (bsc#1258167).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
busybox SUSE:Linux Enterprise Module for Basesystem 15 SP7
- Affected ranges
- ECOSYSTEM: < 1.37.0-150700.18.15.1
Update to 1.37.0-150700.18.15.1