Perhaps I'm totally misunderstanding the busybox.net mailing list?? Please help.

On 17 Apr 2026 at 14:40, Roberto A. Foglietta via busy wrote:

Date sent:      	Fri, 17 Apr 2026 14:40:45 +0200
Subject:        	Re: Arbitrary file truncation in busybox patch 
binary
To:             	David Leonard 
<[email protected]>
Copies to:      	Busybox <[email protected]>
From:           	"Roberto A. Foglietta via busybox" 
<[email protected]>
Send reply to:  	"Roberto A. Foglietta" 
<[email protected]>

> On Fri, 17 Apr 2026 at 13:47, David Leonard
> <[email protected]> wrote:
> >
> > On Wed, 15 Apr 2026, Roberto A. Foglietta via busybox wrote:
> 
> >
> > I for one appreciate fewer off-topic messages in mailing lists.
> >
> 
> I like your answer, then try cgit instead of crying for webgit, it
> will cut off half of the OT here and it would have prevented almost
> all of mine in the recent times.
> 

The main page says the latest release is:
https://busybox.net/
27 September 2024 -- BusyBox 1.37.0 (unstable)
clicking on the git 
https://git.busybox.net/busybox/log/?h=1_37_stable
gives NOT FOUND
clicking on the patches
https://busybox.net/downloads/fixes-1.37.0/
gives NOT FOUND
https://busybox.net/downloads/
Does have.
busybox-1.37.0.tar.bz2  2024-09-26 21:31  2.4M 
https://busybox.net/downloads/busybox-1.37.0.tar.bz2
and 1.38 items.
busybox-snapshot.tar..> 2026-04-17 00:20  2.5M 
https://busybox.net/downloads/busybox-snapshot.tar.bz2

As a test I built using my projects busybox config.
Results
468376 Apr 18 00:00 busybox-1.37
501128 Apr 18 00:01 busybox-1.38

Should I use the build with 2024-09-26 source 
or  the 2026-04-17 source?

I've been a very happy using of busybox going back to 2004.
Generally updates averaged about every 1/2 year till the 1.37?

So, Web page seems to have stopped a 1.37 about 1 1/2 years ago, 
but the git has had over 12,000 lines added to base?

Looking at the snapshot directory find 30+ files, but only 2 are 
different at moment.

Getting index of snapshot Files
busybox-20260318.tar.bz2    2669360 2026-03-18
busybox-20260319.tar.bz2    2669360 2026-03-19
busybox-20260320.tar.bz2    2669360 2026-03-20
busybox-20260321.tar.bz2    2669360 2026-03-21
busybox-20260322.tar.bz2    2669360 2026-03-22
busybox-20260323.tar.bz2    2669360 2026-03-23
busybox-20260324.tar.bz2    2669360 2026-03-24
busybox-20260325.tar.bz2    2669360 2026-03-25
busybox-20260326.tar.bz2    2669360 2026-03-26
busybox-20260327.tar.bz2    2669360 2026-03-27
busybox-20260328.tar.bz2    2669360 2026-03-28
busybox-20260329.tar.bz2    2669360 2026-03-29
busybox-20260330.tar.bz2    2669360 2026-03-30
busybox-20260331.tar.bz2    2669360 2026-03-31
busybox-20260401.tar.bz2    2669360 2026-04-01
busybox-20260402.tar.bz2    2669360 2026-04-02
busybox-20260403.tar.bz2    2669360 2026-04-03
busybox-20260404.tar.bz2    2669360 2026-04-04
busybox-20260405.tar.bz2    2669360 2026-04-05
busybox-20260406.tar.bz2    2669360 2026-04-06
busybox-20260407.tar.bz2    2669360 2026-04-07
busybox-20260408.tar.bz2    2669360 2026-04-08
busybox-20260409.tar.bz2    2669360 2026-04-09
busybox-20260410.tar.bz2    2669360 2026-04-10
busybox-20260411.tar.bz2    2669360 2026-04-11
busybox-20260412.tar.bz2    2669360 2026-04-12
busybox-20260413.tar.bz2    2669851 2026-04-13
busybox-20260414.tar.bz2    2669851 2026-04-14
busybox-20260415.tar.bz2    2669851 2026-04-15
busybox-20260416.tar.bz2    2669851 2026-04-16
busybox-20260417.tar.bz2    2669851 2026-04-17
busybox-snapshot.tar.bz2    2669851 2026-04-17
Filter out the dup Files
List of non-dup Files
busybox-20260318.tar.bz2    2669360 2026-03-18
busybox-20260413.tar.bz2    2669851 2026-04-13

So, seeing two things. Main page says project is basically dorment 
for 1 1/2 years with 45 - 404 dead links.
Comparison on 1.37 and latest 1.38 shows 12,000 lines of changes, 
which would seem active?

Fedora shows version it has in repo as 
The Fedora 43 version of BusyBox is 1.37.0-3.fc43
 Not sure what the -3 means?

I'm not looking at working on changing the code base, but want to 
get updates that are important.

Seems something is out of sync.

Perhaps someone can clear up the differences between the main 
page and its errors and the git / snapshot activity. 

Thanks for the time, and hopefully not to off topic.
Seems main Page with 45 - 404 issues would be On Topic.
Perhaps a direct link to the snap show directory or some mention 
of 1.38 git?
 


> Best regards, R-
> _______________________________________________
> busybox mailing list
> [email protected]
> https://lists.busybox.net/mailman/listinfo/busybox



+------------------------------------------------------------+
 Michael D. Setzer II - Computer Science Instructor (Retired)     
 mailto:[email protected]                            
 mailto:[email protected]
 mailto:[email protected]
 Guam - Where America's Day Begins                        
 G4L Disk Imaging Project maintainer 
 http://sourceforge.net/projects/g4l/
+------------------------------------------------------------+

_______________________________________________
busybox mailing list
[email protected]
https://lists.busybox.net/mailman/listinfo/busybox