https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T01:29:23.319992+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-88842 fkie_cve-2026-88842 2026-10-16T01:29:23.376017+00:00

A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited data corruption.

 https://db.gcve.eu/vuln/ghsa-9p9q-94fg-r728 GHSA-9p9q-94fg-r728 2026-10-16T01:29:23.376629+00:00

A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited data corruption.

 https://db.gcve.eu/vuln/rhsa-2026:81391 RHSA-2026:81391 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-16T01:29:23.376670+00:00

busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses CVE-2026-26158 fix