-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Mar 2026 07:59:41 +0100 Source: busybox Binary: busybox busybox-dbgsym busybox-static busybox-static-dbgsym busybox-udeb udhcpc udhcpd Architecture: arm64 Version: 1:1.35.0-4+deb12u1 Distribution: bookworm Urgency: high Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Tobias Frost Description: busybox - Tiny utilities for small and embedded systems busybox-static - Standalone rescue shell with tons of builtin utilities busybox-udeb - Tiny utilities for the debian-installer (udeb) udhcpc - Provides the busybox DHCP client implementation udhcpd - Provides the busybox DHCP server implementation Closes: 1059049 1059050 1059051 1059052 Changes: busybox (1:1.35.0-4+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Team. * Import/Backport patches for: - CVE-2022-48174 - stack overflow (Closes: #1059049) - CVE-2023-42363 - use-after-free (Closes: #1059050) - CVE-2023-42364 - use-after-free (Closes: #1059051) This patch also covers CVE-2023-42365 (Closes: #1059052) Checksums-Sha1: 629ac9b18f7f99dbc4cebdf3bded2e03ab5aad71 1371924 busybox-dbgsym_1.35.0-4+deb12u1_arm64.deb 2b3b87a01b746cd0107ede1b9ab219a2049faf9e 1489364 busybox-static-dbgsym_1.35.0-4+deb12u1_arm64.deb 7123fb6c7e6e17c514b332291905f6447a4dca3b 821668 busybox-static_1.35.0-4+deb12u1_arm64.deb c6ad37f93103b97aca1897559ce664ab85709d74 176104 busybox-udeb_1.35.0-4+deb12u1_arm64.udeb 74c17d8181e2e9d3ee756b691abf611837fa508e 7741 busybox_1.35.0-4+deb12u1_arm64-buildd.buildinfo d7dcab0df560e32aa7141b4aca2a8a60b6a15f8f 422116 busybox_1.35.0-4+deb12u1_arm64.deb 18042da90647e440a0a45ad9ecbc2bb970d2cc30 6188 udhcpc_1.35.0-4+deb12u1_arm64.deb 15067c650d99424752b7cf25f264b7ca97a15ddc 9012 udhcpd_1.35.0-4+deb12u1_arm64.deb Checksums-Sha256: 20082891b52c5cdb22fd97af2d8259360fb844fb4a8172a273feb43f86076040 1371924 busybox-dbgsym_1.35.0-4+deb12u1_arm64.deb 449833d1261e7bdffafeeab87bb4ae8d84fb27d43a8f73485a9a03db65a1c981 1489364 busybox-static-dbgsym_1.35.0-4+deb12u1_arm64.deb 6fcdb8cc04625d6de01a20b2cf7af8d39838cf12e2f58b88d213b62068f6966f 821668 busybox-static_1.35.0-4+deb12u1_arm64.deb 6c3f755aaecf3e8274931c1332731dbd87a4d9ebf00aca19a09b22241d65554c 176104 busybox-udeb_1.35.0-4+deb12u1_arm64.udeb 59850206955449acf115b143a96499e7520b8758c6a48339a2020a43ebdb1a5c 7741 busybox_1.35.0-4+deb12u1_arm64-buildd.buildinfo 130cfb3f028aeb2e81e73ae588e23779fb9c0fc1c2e73e04aae870cc8fb0961d 422116 busybox_1.35.0-4+deb12u1_arm64.deb 8ddd691c8f4524300e7a24aaba0d82c4f7fc8769a18ab1ed299d7dad43244f56 6188 udhcpc_1.35.0-4+deb12u1_arm64.deb 2f11ee46718ce8f53ae9e58bd67887f8ecb341f405e6ff7845b965266575c0cd 9012 udhcpd_1.35.0-4+deb12u1_arm64.deb Files: 758ad0bc4cb734351cababb29fca4f99 1371924 debug optional busybox-dbgsym_1.35.0-4+deb12u1_arm64.deb cd45d2c5b5d102121422d54f1b306d6f 1489364 debug optional busybox-static-dbgsym_1.35.0-4+deb12u1_arm64.deb f655b4ff851f0df269a14badf8d03701 821668 shells optional busybox-static_1.35.0-4+deb12u1_arm64.deb e27fbf238a9391962381292475569e07 176104 debian-installer optional busybox-udeb_1.35.0-4+deb12u1_arm64.udeb 705410f7ea95e2414179fd1c370ea6bb 7741 utils optional busybox_1.35.0-4+deb12u1_arm64-buildd.buildinfo 0e7bebca5401152f13073e5596f3113e 422116 utils optional busybox_1.35.0-4+deb12u1_arm64.deb bb54c711d8a2677c9ab2eceadbdf4daa 6188 net optional udhcpc_1.35.0-4+deb12u1_arm64.deb 4f409ac9b1d45ed6df303506a26140b6 9012 net optional udhcpd_1.35.0-4+deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbIns2iWsAAdAqh2MS/ZIXkV8oLAFAmnH9QUACgkQS/ZIXkV8 oLBdSQ//cTigUp17K+E4QQ7SjP9VBzrT6mhpAG0q6AJX81608fSB57CsbS1O8kWS uCugqyCIWAw88R/RyeQh1e+BvdDTEIERnLV0eC6RYoYFcJg4UHY53XDKARgwbs39 4AJSgH+scwvGd7/PAKdVxsq1EsYDUTmOAA6DH4IwWRFIJqq/fWcpsPguN7nST+Yc GEtzJckWRwyoCi7adKW+CE87aLqniHVL2DZnChJax8XqRT6ay4cMQu40nkiJshff TTscSDD8ppfLmI+Ptr/41bWBLps50wdmqM54ghF6PoIRXYoqkxvDwhEy0NjLTbqr ZtfvSEuMfx1mI/yIc6bvpKS/Fd20b5q6EvUx9QHDqV9Pm5rbDYPkB4ubZTSAi1r8 O37mogMHD2AeJZl+BxDfwRhhlonJj9mXqWTy6Cxz7fq8RS+/YHWvavQ2z8ZdH3xF DHUXgdCjxcOo+DxCdIhOpHr/XT1WL/yb6sA2uv6fYXbETXQtiIYQR9twCqkpEUVq bVYCgJuQqFr9sdI2y09e05XpjiuGOVbVzFURpMmN88Bbc/Ew/glmyyJuLbe2UHuw It2+zxlT14i1ylz1Tcbzc6XzuW8xBVkFMZfyOacHr+XJOf89WozJVTjMyDEK8eFA NRO/w1DI9taUXFIKeQmNpKKvvyUL8kSWQFljSgWEZp7ge3f0GL0= =Etv7 -----END PGP SIGNATURE-----