Security update for busybox SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:4371-1 Final 1 1 2022-12-08T16:19:54Z current 2022-12-08T16:19:54Z 2022-12-08T16:19:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for busybox This update for busybox fixes the following issues: - CVE-2022-30065: Fixed use-after-free in the AWK applet (bsc#1199744). - CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660). - Update to 1.35.0 also introduced: - awk: fix printf %%, fix read beyond end of buffer - chrt: silence analyzer warning - libarchive: remove duplicate forward declaration - mount: 'mount -o rw ....' should not fall back to RO mount - ps: fix -o pid=PID,args interpreting entire 'PID,args' as header - tar: prevent malicious archives with long name sizes causing OOM - udhcpc6: fix udhcp_find_option to actually find DHCP6 options - xxd: fix -p -r - support for new optoins added to basename, cpio, date, find, mktemp, wget and others The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-busybox:15.4-2022-4371,SUSE-2022-4371,SUSE-SLE-Module-Basesystem-15-SP4-2022-4371,openSUSE-SLE-15.4-2022-4371 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20224371-1/ Link for SUSE-SU-2022:4371-1 https://lists.suse.com/pipermail/sle-security-updates/2022-December/013204.html E-Mail link for SUSE-SU-2022:4371-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1199744 SUSE Bug 1199744 https://bugzilla.suse.com/914660 SUSE Bug 914660 https://www.suse.com/security/cve/CVE-2014-9645/ SUSE CVE CVE-2014-9645 page https://www.suse.com/security/cve/CVE-2022-30065/ SUSE CVE CVE-2022-30065 page Container bci/bci-busybox:15.4 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.4 busybox-1.35.0-150400.3.8.1 busybox-adduser-1.35.0-150400.4.3.14 busybox-attr-1.35.0-150400.4.3.14 busybox-bc-1.35.0-150400.4.3.14 busybox-bind-utils-1.35.0-150400.4.3.14 busybox-bzip2-1.35.0-150400.4.3.14 busybox-coreutils-1.35.0-150400.4.3.14 busybox-cpio-1.35.0-150400.4.3.14 busybox-diffutils-1.35.0-150400.4.3.14 busybox-dos2unix-1.35.0-150400.4.3.14 busybox-ed-1.35.0-150400.4.3.14 busybox-findutils-1.35.0-150400.4.3.14 busybox-gawk-1.35.0-150400.4.3.14 busybox-grep-1.35.0-150400.4.3.14 busybox-gzip-1.35.0-150400.4.3.14 busybox-hostname-1.35.0-150400.4.3.14 busybox-iproute2-1.35.0-150400.4.3.14 busybox-iputils-1.35.0-150400.4.3.14 busybox-kbd-1.35.0-150400.4.3.14 busybox-less-1.35.0-150400.4.3.14 busybox-links-1.35.0-150400.4.3.14 busybox-man-1.35.0-150400.4.3.14 busybox-misc-1.35.0-150400.4.3.14 busybox-ncurses-utils-1.35.0-150400.4.3.14 busybox-net-tools-1.35.0-150400.4.3.14 busybox-netcat-1.35.0-150400.4.3.14 busybox-patch-1.35.0-150400.4.3.14 busybox-policycoreutils-1.35.0-150400.4.3.14 busybox-procps-1.35.0-150400.4.3.14 busybox-psmisc-1.35.0-150400.4.3.14 busybox-sed-1.35.0-150400.4.3.14 busybox-selinux-tools-1.35.0-150400.4.3.14 busybox-sendmail-1.35.0-150400.4.3.14 busybox-sh-1.35.0-150400.4.3.14 busybox-sharutils-1.35.0-150400.4.3.14 busybox-syslogd-1.35.0-150400.4.3.14 busybox-sysvinit-tools-1.35.0-150400.4.3.14 busybox-tar-1.35.0-150400.4.3.14 busybox-telnet-1.35.0-150400.4.3.14 busybox-tftp-1.35.0-150400.4.3.14 busybox-time-1.35.0-150400.4.3.14 busybox-traceroute-1.35.0-150400.4.3.14 busybox-tunctl-1.35.0-150400.4.3.14 busybox-unzip-1.35.0-150400.4.3.14 busybox-util-linux-1.35.0-150400.4.3.14 busybox-vi-1.35.0-150400.4.3.14 busybox-vlan-1.35.0-150400.4.3.14 busybox-wget-1.35.0-150400.4.3.14 busybox-which-1.35.0-150400.4.3.14 busybox-whois-1.35.0-150400.4.3.14 busybox-xz-1.35.0-150400.4.3.14 busybox-kmod-1.35.0-150400.4.3.14 busybox-static-1.35.0-150400.3.8.1 busybox-testsuite-1.35.0-150400.3.8.1 busybox-warewulf3-1.35.0-150400.3.8.1 busybox-1.35.0-150400.3.8.1 as a component of Container bci/bci-busybox:15.4 busybox-adduser-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-attr-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-bc-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-bind-utils-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-bzip2-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-coreutils-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-cpio-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-diffutils-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-dos2unix-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-ed-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-findutils-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-gawk-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-grep-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-gzip-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-hostname-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-iproute2-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-iputils-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-kbd-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-less-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-links-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-man-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-misc-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-ncurses-utils-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-net-tools-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-netcat-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-patch-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-policycoreutils-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-procps-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-psmisc-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-sed-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-selinux-tools-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-sendmail-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-sh-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-sharutils-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-syslogd-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-sysvinit-tools-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-tar-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-telnet-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-tftp-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-time-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-traceroute-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-tunctl-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-unzip-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-util-linux-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-vi-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-vlan-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-wget-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-which-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-whois-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-xz-1.35.0-150400.4.3.14 as a component of Container bci/bci-busybox:15.4 busybox-1.35.0-150400.3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 busybox-static-1.35.0-150400.3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 busybox-1.35.0-150400.3.8.1 as a component of openSUSE Leap 15.4 busybox-adduser-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-attr-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-bc-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-bind-utils-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-bzip2-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-coreutils-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-cpio-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-diffutils-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-dos2unix-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-ed-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-findutils-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-gawk-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-grep-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-gzip-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-hostname-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-iproute2-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-iputils-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-kbd-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-kmod-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-less-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-links-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-man-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-misc-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-ncurses-utils-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-net-tools-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-netcat-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-patch-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-policycoreutils-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-procps-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-psmisc-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-sed-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-selinux-tools-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-sendmail-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-sh-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-sharutils-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-static-1.35.0-150400.3.8.1 as a component of openSUSE Leap 15.4 busybox-syslogd-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-sysvinit-tools-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-tar-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-telnet-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-testsuite-1.35.0-150400.3.8.1 as a component of openSUSE Leap 15.4 busybox-tftp-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-time-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-traceroute-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-tunctl-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-unzip-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-util-linux-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-vi-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-vlan-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-warewulf3-1.35.0-150400.3.8.1 as a component of openSUSE Leap 15.4 busybox-wget-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-which-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-whois-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 busybox-xz-1.35.0-150400.4.3.14 as a component of openSUSE Leap 15.4 The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /snd_pcm none /" command. CVE-2014-9645 Container bci/bci-busybox:15.4:busybox-1.35.0-150400.3.8.1 Container bci/bci-busybox:15.4:busybox-adduser-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-attr-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-bc-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-bind-utils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-bzip2-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-coreutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-cpio-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-diffutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-dos2unix-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-ed-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-findutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-gawk-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-grep-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-gzip-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-hostname-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-iproute2-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-iputils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-kbd-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-less-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-links-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-man-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-misc-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-ncurses-utils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-net-tools-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-netcat-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-patch-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-policycoreutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-procps-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-psmisc-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sed-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-selinux-tools-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sendmail-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sh-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sharutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-syslogd-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sysvinit-tools-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-tar-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-telnet-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-tftp-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-time-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-traceroute-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-tunctl-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-unzip-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-util-linux-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-vi-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-vlan-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-wget-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-which-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-whois-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-xz-1.35.0-150400.4.3.14 SUSE Linux Enterprise Module for Basesystem 15 SP4:busybox-1.35.0-150400.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:busybox-static-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-adduser-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-attr-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-bc-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-bind-utils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-bzip2-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-coreutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-cpio-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-diffutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-dos2unix-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-ed-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-findutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-gawk-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-grep-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-gzip-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-hostname-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-iproute2-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-iputils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-kbd-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-kmod-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-less-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-links-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-man-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-misc-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-ncurses-utils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-net-tools-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-netcat-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-patch-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-policycoreutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-procps-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-psmisc-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sed-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-selinux-tools-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sendmail-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sh-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sharutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-static-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-syslogd-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sysvinit-tools-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-tar-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-telnet-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-testsuite-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-tftp-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-time-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-traceroute-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-tunctl-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-unzip-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-util-linux-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-vi-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-vlan-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-warewulf3-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-wget-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-which-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-whois-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-xz-1.35.0-150400.4.3.14 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20224371-1/ https://www.suse.com/security/cve/CVE-2014-9645.html CVE-2014-9645 https://bugzilla.suse.com/914423 SUSE Bug 914423 https://bugzilla.suse.com/914660 SUSE Bug 914660 A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function. CVE-2022-30065 Container bci/bci-busybox:15.4:busybox-1.35.0-150400.3.8.1 Container bci/bci-busybox:15.4:busybox-adduser-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-attr-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-bc-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-bind-utils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-bzip2-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-coreutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-cpio-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-diffutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-dos2unix-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-ed-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-findutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-gawk-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-grep-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-gzip-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-hostname-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-iproute2-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-iputils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-kbd-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-less-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-links-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-man-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-misc-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-ncurses-utils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-net-tools-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-netcat-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-patch-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-policycoreutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-procps-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-psmisc-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sed-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-selinux-tools-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sendmail-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sh-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sharutils-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-syslogd-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-sysvinit-tools-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-tar-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-telnet-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-tftp-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-time-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-traceroute-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-tunctl-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-unzip-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-util-linux-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-vi-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-vlan-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-wget-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-which-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-whois-1.35.0-150400.4.3.14 Container bci/bci-busybox:15.4:busybox-xz-1.35.0-150400.4.3.14 SUSE Linux Enterprise Module for Basesystem 15 SP4:busybox-1.35.0-150400.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:busybox-static-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-adduser-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-attr-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-bc-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-bind-utils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-bzip2-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-coreutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-cpio-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-diffutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-dos2unix-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-ed-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-findutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-gawk-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-grep-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-gzip-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-hostname-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-iproute2-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-iputils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-kbd-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-kmod-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-less-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-links-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-man-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-misc-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-ncurses-utils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-net-tools-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-netcat-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-patch-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-policycoreutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-procps-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-psmisc-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sed-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-selinux-tools-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sendmail-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sh-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sharutils-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-static-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-syslogd-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-sysvinit-tools-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-tar-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-telnet-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-testsuite-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-tftp-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-time-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-traceroute-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-tunctl-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-unzip-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-util-linux-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-vi-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-vlan-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-warewulf3-1.35.0-150400.3.8.1 openSUSE Leap 15.4:busybox-wget-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-which-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-whois-1.35.0-150400.4.3.14 openSUSE Leap 15.4:busybox-xz-1.35.0-150400.4.3.14 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20224371-1/ https://www.suse.com/security/cve/CVE-2022-30065.html CVE-2022-30065 https://bugzilla.suse.com/1199744 SUSE Bug 1199744