-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Feb 2026 19:29:24 +0300 Source: busybox Architecture: source Version: 1:1.37.0-8 Distribution: unstable Urgency: medium Maintainer: Debian Install System Team <debian-boot@lists.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 1059053 1104008 1120795 Changes: busybox (1:1.37.0-8) unstable; urgency=medium . * awk.c-fix-CVE-2023-42366-bug-15874.patch (Closes: #1059053) * wget-disallow-control-chars-in-URLs-CVE-2025-60876.patch (Closes: #1120795) * two patches (one from upstream and missing hunk) to fix CVE-2025-46394: archival-libarchive-sanitize-filenames-on-output-CVE-2025-46394.patch archival-libarchive-sanitize-filenames-on-output-CVE-2025-46394-2.patch (Closes: #1104008) * config: deb,static: enable resize applet * initramfs-tools/conf-hooks.d/busybox: remove, initramfs-tools don't use $BUSYBOXDIR anymore * initramfs-tools/hooks/zz-busybox: print applets added to initramfs in verbose mode Checksums-Sha1: ac9d147fb13f9ac40fc1d0f0263900321f8c11c5 2377 busybox_1.37.0-8.dsc b74b47cdc1f0dbefee61637e8d2a92c5d1b003f8 68496 busybox_1.37.0-8.debian.tar.xz 5f37b4ca3efbaa8383746edb177a7785508ad619 6058 busybox_1.37.0-8_source.buildinfo Checksums-Sha256: 196bf4916aaf38495f4db2424278a6ba0b22231b67bc87cdc65524058c804367 2377 busybox_1.37.0-8.dsc cc38cddf57e659b1c22263e6b0420060562c33174a94b4ff5d3ea83fc332b0df 68496 busybox_1.37.0-8.debian.tar.xz 1b5dc99cfaa2a8572557498ce38d73a9e007d824226d5483584057faa5bdcbed 6058 busybox_1.37.0-8_source.buildinfo Files: 40b09cc850e7426230190501d8881c7f 2377 utils optional busybox_1.37.0-8.dsc 3d4b79f071db2e44b64565ee9cdcce0b 68496 utils optional busybox_1.37.0-8.debian.tar.xz c0eac692005ebc0faa6c665c3402ae41 6058 utils optional busybox_1.37.0-8_source.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJpf4AOCRCCqkokOx6UeEcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmfyTkliWbyCBZtgi6LoxVBGYZS2CJ6Nzpmq2nk0Jqht VhYhBGSqKrUx1WkDNmv++YKqSiQ7HpR4AAAkcRAApjKwbk32ABYz15V5eKCzXe7Q i0eomjiW/f1ZbkwlPaxLZfLEtya18Tt7RfNQ9zsbGAu4Elh0APLzSBlyvVOetUmu CWknpkCgb3ngcy1Zl6oPbjPuBYuhGc8BQavShQjCz9O9Zo/6gIYysdhPl9lizZPf H5Jr6jvSANG7Qfthy3CPjL5FPAcmPtOMs8hAtDS75rcm8TJOQ4okYQL72UoPRUHx YPdD3O5sTxSreuC5Ac9YPcYMjyn5ML8MLg9S9ULdqp1vXakLKMDJ+bBAweV9gcvt djrI7nb4FF3iNxUCw5hXP0cz71FcU/QhioDV/HLYe5WlfXavFCgxild+bfMzrwXc 8ErSnFYqGlJBje6pClvq5t5NeF0v9/Y7gJMAhwXf9YwQ6KzmCoHCVPWvSMM1wyci NxUvHWioch1Ut9nFkTcrdIDIJM2M2/0yuSWmekRjgkTpTkf+h6sBHt2+So/YKQbd odUbx6v8Sr9WCKLi/tJ6VkonITqOZnzpV38PfUon6iSwZ6qbiUibUO+olrvITBiF vnHwdFSqA9gpBklwlDfy/OSJKAXQYy8vHDg7Ig6HDfyENGpqQ6GOnvgakGJWI4E3 uBAxJdpuHiGPdVmpCbm2EaZs4gWOXEqiZ8CMJ2VLQNDxEp8fo7RPgDao4AEJExl4 9hfoASR+0iOaUzvbA0M= =ye/B -----END PGP SIGNATURE-----
