Re: Information related to fix for CVE-2026-38753 , CVE-2026-38754 , CVE-2026-38755

Am 23.07.26 um 16:24 schrieb Neeru Gupta via busybox:
> Dear Team ,
> 
> We are recently seeing below 3 High CVEs being reported in Busybox 1.38 in
> our security scans.

This sounds like you are using busybox in a commercial environment.

> Can anyone please help in sharing information on how do
> I get to know once fix for below CVEs are delivered to source code. ?

I might have missed it, but I did not see any patches adressing those CVEs.

> Below CVEs are being reported in Busybox 1.38 version.
> 
> 1. CVE-2026-38753
> 2. CVE-2026-38754
> 3. CVE-2026-38755

Now is your opportunity to help: fix the issues and send patches!

Best regards,
-- 
Stefan Seyfried

"For a successful technology, reality must take precedence over
  public relations, for nature cannot be fooled." -- Richard Feynman