Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: busybox (UTSA-2022-000279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000279 advisory. A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function...

Astra Linux – Vulnerability in busybox

A use-after-free vulnerability exists in BusyBox v.1.36.1. Attackers can cause a denial of service by using a crafted awk pattern in the awk.c evaluate function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

Astra Linux – Vulnerability in busybox

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 through a malicious awk pattern in the awk.c copyvar function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handlespecial function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox 1.35-x’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the copyvar function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hashinit function...

Astra Linux – Vulnerability in busybox

A use-after-free condition in Busybox’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the nextinputfile function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvars function...

Astra Linux – Vulnerability in busybox

A use-after-free condition in Busybox’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the getvari function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function...

SUSE-SU-2026:3933-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2023-42366: heap buffer overflow in the nexttoken function of editors/awk.c bsc1217586. - CVE-2026-38752: stack buffer overflow in the evaluate function of editors/awk.c bsc1271544. - CVE-2026-38753: use-after-free in the awksub function o...

SUSE-SU-2026:23446-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2023-42366: heap buffer overflow in the nexttoken function of editors/awk.c bsc1217586. - CVE-2026-38752: stack buffer overflow in the evaluate function of editors/awk.c bsc1271544. - CVE-2026-38753: use-after-free in the awksub function o...

Security update for busybox

This update for busybox fixes the following issues: CVE-2023-42366: heap buffer overflow in the nexttoken function of editors/awk.c bsc1217586. CVE-2026-38752: stack buffer overflow in the evaluate function of editors/awk.c bsc1271544. CVE-2026-38753: use-after-free in the awksub function of...

SUSE-SU-2026:3900-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2023-42366: heap buffer overflow in the nexttoken function of editors/awk.c bsc1217586. - CVE-2026-38752: stack buffer overflow in the evaluate function of editors/awk.c bsc1271544. - CVE-2026-38753: use-after-free in the awksub function o...

Security update for busybox

This update for busybox fixes the following issues: CVE-2023-42366: heap buffer overflow in the nexttoken function of editors/awk.c bsc1217586. CVE-2026-38752: stack buffer overflow in the evaluate function of editors/awk.c bsc1271544. CVE-2026-38753: use-after-free in the awksub function of...

CVE-2026-73036

Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary terminal control sequences by embedding escape sequences in the requires-python field of a pyproject.toml file. When a...

CVE-2026-73036

CVE-2026-73036 affects Bash-it 3.2.0 (barbuk theme, Python virtualenv prompt segment). A vulnerability arises when a directory contains a malicious pyproject.toml where a crafted requires-python field is read (via awk) and concatenated into PS1 through __prompt-command without stripping control c...

OESA-2026-3312 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script.CVE-2026-38752 A use-after-free in the awksub function editors/awk.c of...