-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Mar 2026 07:59:41 +0100 Source: busybox Binary: busybox busybox-dbgsym busybox-static busybox-static-dbgsym busybox-udeb udhcpc udhcpd Architecture: amd64 Version: 1:1.35.0-4+deb12u1 Distribution: bookworm Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Tobias Frost Description: busybox - Tiny utilities for small and embedded systems busybox-static - Standalone rescue shell with tons of builtin utilities busybox-udeb - Tiny utilities for the debian-installer (udeb) udhcpc - Provides the busybox DHCP client implementation udhcpd - Provides the busybox DHCP server implementation Closes: 1059049 1059050 1059051 1059052 Changes: busybox (1:1.35.0-4+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Team. * Import/Backport patches for: - CVE-2022-48174 - stack overflow (Closes: #1059049) - CVE-2023-42363 - use-after-free (Closes: #1059050) - CVE-2023-42364 - use-after-free (Closes: #1059051) This patch also covers CVE-2023-42365 (Closes: #1059052) Checksums-Sha1: 7b451fa5d71f736ba8c0f7802fcb5c6a612940ab 1388572 busybox-dbgsym_1.35.0-4+deb12u1_amd64.deb 1920c84ee846b8a915952d5018a2ef70b42211a8 1504724 busybox-static-dbgsym_1.35.0-4+deb12u1_amd64.deb bbd8431c8faa869dd2a75a01b52c6908a0e222cf 927884 busybox-static_1.35.0-4+deb12u1_amd64.deb 76a81609617523953fe5b77050496198f13f5114 189544 busybox-udeb_1.35.0-4+deb12u1_amd64.udeb a5c56cc157e0315ea8827820fbf24538369e8b10 7742 busybox_1.35.0-4+deb12u1_amd64-buildd.buildinfo 5ed6e151d83cf92a51905f5f364f43b428e5cf65 451864 busybox_1.35.0-4+deb12u1_amd64.deb 5889090b0324570149b61209203145c8bca69c13 6188 udhcpc_1.35.0-4+deb12u1_amd64.deb 8a0665b75761dff464bdf4ff10f6d4abe8f2f39d 9012 udhcpd_1.35.0-4+deb12u1_amd64.deb Checksums-Sha256: 5f7c409284ed6d30b0d14841ca531413a03b1c529297061462fbc09cd9b92895 1388572 busybox-dbgsym_1.35.0-4+deb12u1_amd64.deb 8fbcc5787eca2bc786d8987e766598826af3d1101299232da2a6f2076f9bf98a 1504724 busybox-static-dbgsym_1.35.0-4+deb12u1_amd64.deb 1fcadf0c567d1b30149b0f81af588208b53c2197c2e9958f2360d086c443656a 927884 busybox-static_1.35.0-4+deb12u1_amd64.deb 4909d14322d409706ec7252a04df9ab01ee847fbc6766f07bd5902b203036875 189544 busybox-udeb_1.35.0-4+deb12u1_amd64.udeb e7530de9e2034a8e1ccb317fbad733d8db934ac3ad3010181d4a0cdd5d22005f 7742 busybox_1.35.0-4+deb12u1_amd64-buildd.buildinfo 0e13d32908238a0aba7ea2602ea170e8659a52f58e57967cda95d6839bbe6644 451864 busybox_1.35.0-4+deb12u1_amd64.deb dcb586114424e170584880693bbc0a4ad49fd23948a7ed1904df2d4e0cc75ba9 6188 udhcpc_1.35.0-4+deb12u1_amd64.deb 3a4f45776e0dd764e0eb0a0ef9913415eaa119e69036a8c6e41abaf2060f9e14 9012 udhcpd_1.35.0-4+deb12u1_amd64.deb Files: 3542b5d0057e30d8165ff52b024d7783 1388572 debug optional busybox-dbgsym_1.35.0-4+deb12u1_amd64.deb 903315bf967b238a05a73a062aa972cf 1504724 debug optional busybox-static-dbgsym_1.35.0-4+deb12u1_amd64.deb 7ee07117b9eed96646c6623b6c8b0bc3 927884 shells optional busybox-static_1.35.0-4+deb12u1_amd64.deb 82ede3756cb785108053e4c8f4646eff 189544 debian-installer optional busybox-udeb_1.35.0-4+deb12u1_amd64.udeb 25b7280e28f60b94c7ac90983514bdbc 7742 utils optional busybox_1.35.0-4+deb12u1_amd64-buildd.buildinfo fabd6c4cf4966e0b2f160ad28bbd3e88 451864 utils optional busybox_1.35.0-4+deb12u1_amd64.deb 80c16c49016da82333396e1a1c9228fd 6188 net optional udhcpc_1.35.0-4+deb12u1_amd64.deb 550405b34895af8dc26305eb1b366b77 9012 net optional udhcpd_1.35.0-4+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmnH/wAACgkQYg9P9sm2 dfGqIw//acM/A+kR4rDYDNwBrXl+i60ZgzLxXNuEwKjrzGcz2uBuQqB/R7fD6mQO 0nqFNrIPJ10789FScvYq4yA1C2XO0OyR8g6BzPo7LmV/LtpHf9lhHgkFRqGFaLY5 0y21+RGhb1ePINGZVZNhwrgXGbNxoNPdqvLhd/ydOcYfaLMduHQcxVbCq5KktJjf CY/8isodH6wF29S3xeE6QVG6JJ8FShB9S2Am2nkL8m9tqUl+xFueo3wAz+RkdgKU 0X2cIFrwXEG+tSMvKulngiE7Ivel8OlJZo3tHPCqk0Lzu5Ue7a+tnG2ark2LbWEK DWIaBNt3Cc/GUpVzXDfR/HmZyI30nbvK8zdURIyoaEWehpo/jq9//I/t6t+ELcOC fn9v14Zp4E7zuGUnWIw6V6Z42G/xej/ZeN+/LM5a+6YcA9ZAxxL90IQlf3h3VnjO 0vzZr/5wrv17rGZKWMaUUfRb8U+nAmxL1GwuW0xmwrzFJk10CoCm+ULFN9YiyGh3 fMIyGjlD0jqSsrO0OSpYH4pWc03zhmwXZkt0pHLBj1Or9e/usnWZYysqQCd4f88q ZqXEffJBpYesNhsVfseD8Pd5EhvAxhd4C+mYWWo7pMeB8DrGOdLAPWlbN3HlKzMD ewUswZwkpufI39wlMjPGmqhOCaiHJkZNNN/pPtob5c4EdFVRR1U= =3sUn -----END PGP SIGNATURE-----