-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Mar 2026 07:59:41 +0100 Source: busybox Binary: busybox busybox-dbgsym busybox-static busybox-static-dbgsym busybox-udeb udhcpc udhcpd Architecture: i386 Version: 1:1.35.0-4+deb12u1 Distribution: bookworm Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Tobias Frost Description: busybox - Tiny utilities for small and embedded systems busybox-static - Standalone rescue shell with tons of builtin utilities busybox-udeb - Tiny utilities for the debian-installer (udeb) udhcpc - Provides the busybox DHCP client implementation udhcpd - Provides the busybox DHCP server implementation Closes: 1059049 1059050 1059051 1059052 Changes: busybox (1:1.35.0-4+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Team. * Import/Backport patches for: - CVE-2022-48174 - stack overflow (Closes: #1059049) - CVE-2023-42363 - use-after-free (Closes: #1059050) - CVE-2023-42364 - use-after-free (Closes: #1059051) This patch also covers CVE-2023-42365 (Closes: #1059052) Checksums-Sha1: 3b3e73812f690528aef288f839f8f560f2487e16 1326076 busybox-dbgsym_1.35.0-4+deb12u1_i386.deb 5ff6ece08dfe7ac65f4407e2cafb3951ddf95258 1438488 busybox-static-dbgsym_1.35.0-4+deb12u1_i386.deb 5a0e62b5272edada5170ac7eaa17ed88f8f6047d 957388 busybox-static_1.35.0-4+deb12u1_i386.deb f011faa1152e878f4e29ebbbca145daa273e4f9f 188840 busybox-udeb_1.35.0-4+deb12u1_i386.udeb d4fc1990a39d958559dddc9d7e85db73e8884759 7651 busybox_1.35.0-4+deb12u1_i386-buildd.buildinfo d193158fa9eba9fa545c8d876bb0b967d281624f 446860 busybox_1.35.0-4+deb12u1_i386.deb 508b4d8ecf06618b00ec96150c99e1df883f256e 6184 udhcpc_1.35.0-4+deb12u1_i386.deb 1df6e7afd926d74353533cc4fe1988684909b384 9008 udhcpd_1.35.0-4+deb12u1_i386.deb Checksums-Sha256: 5bc1f952b8956aac650cabafc31012f2bd134cdaf199a4b09f3d2d015f64a0f2 1326076 busybox-dbgsym_1.35.0-4+deb12u1_i386.deb 28e6a38a41d94e1606c8bbd6b73f141dc2949cd8bdba877bfea9aad83e08ccfb 1438488 busybox-static-dbgsym_1.35.0-4+deb12u1_i386.deb d404ff3064a7ba86307d7c251b2a82e78ad64f3eae4ab946087d24133227d3d7 957388 busybox-static_1.35.0-4+deb12u1_i386.deb ba4dd66d1b4220a1434910ad7e6e6fd65c03c2af48a0be1567dab84db8738474 188840 busybox-udeb_1.35.0-4+deb12u1_i386.udeb b0ce3aa4d20a6ff8ed105d248e27d9efd930c89922f97f564f4261207d35f6e1 7651 busybox_1.35.0-4+deb12u1_i386-buildd.buildinfo 0b61d72f2e8e13bb27928eaad8f68de4c38cf628f7ea128906485317f8461992 446860 busybox_1.35.0-4+deb12u1_i386.deb e272868818c0d48b7ec21e281d23d216f687fbd90dd75775bd1bbb8cfca0d883 6184 udhcpc_1.35.0-4+deb12u1_i386.deb 6bd1f486e4dcb43168ae0b7d322d9a517230957e9a6ab9a09eb9a5a056a1c40d 9008 udhcpd_1.35.0-4+deb12u1_i386.deb Files: fb2ef4b6c15a0baa4e219d4d173ec0aa 1326076 debug optional busybox-dbgsym_1.35.0-4+deb12u1_i386.deb 3cafa11cee724b32640b148eb72aef01 1438488 debug optional busybox-static-dbgsym_1.35.0-4+deb12u1_i386.deb 99fff09fcf262b16f694b77c33b43c01 957388 shells optional busybox-static_1.35.0-4+deb12u1_i386.deb abee299de5c94094306e6a7139917bf6 188840 debian-installer optional busybox-udeb_1.35.0-4+deb12u1_i386.udeb 16c34f24351a44ec9889e72a5f6ae3e8 7651 utils optional busybox_1.35.0-4+deb12u1_i386-buildd.buildinfo 74889acba5b343f0ef1a0fdc08d2b541 446860 utils optional busybox_1.35.0-4+deb12u1_i386.deb 8594a4e007ea871af2e0e9a3ae882f95 6184 net optional udhcpc_1.35.0-4+deb12u1_i386.deb 37bfe07f6f13755d2caf42282e580e8a 9008 net optional udhcpd_1.35.0-4+deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmnH9V4ACgkQGNGWmfrq ILED6A//YBQOaTNcpIO7j9VuyM1NrrcHDMKztnffdn0FE6tVx2EeDD6H7Qs2Sjbj +m9f9JvX8kJ+F5R9/2BSBtbvrRS1RWFoc01sbb/GyNg9vwEmJc+t6ZsNixGuasXh 3maoNQ3h4PTI8//K2SYYLDPd0vc1eQK78qPkpahYPfscVQNWMjtv1kXX21/u/WKM KxkbClWdyPM6/qc3oE+C/j75433kZ1kCy1q2u6nPBkviVlk86qMCZhdgoOEw/Y+t GaeuAwSqo9o/WVp7xMxdkxnnumO1fxkaOkgdrI95TgXd/6avntnuuQeFeJWH/TIM Ig0JNB+WqDAUz0g3jTw/cbrXU7p0NRSncNbgy/3eLdB+CndRXDGZdE0vxHjrRoyJ ylBqIYLP5lnAOk3dMNXRJ2MkaU5MeDvCkx4us0ETl35r7rPbs5x6noIAdWqGAKvF PJH9p2+W2k2IIzHBE+FTNXP4y5JbsqCtQUWjjLAYaiK/FFENS3b+epOFs6JKZLDN +4TO7rx9k4QhG7/Pr1JFLdHzqW3wsYl/f5mBQryCZdiBmGp7XQBSeHE4sssd4OYe tHIso4mh++WJtc8CXN9jvgDZgw7ToriHIWRCCKEQgjTNxC2SThkkedBZt2leChYD 9BoneDP2HfIouA/kHM1WRjLIUrR6QpDbrWlwYddM6zRibk4/ZRU= =yCP1 -----END PGP SIGNATURE-----