CVE-2025-46394
Publication date 24 April 2025
Last updated 24 April 2025
Ubuntu priority
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| busybox | 25.04 plucky |
Vulnerable, fix deferred
|
| 24.10 oracular |
Vulnerable, fix deferred
|
|
| 24.04 LTS noble |
Vulnerable, fix deferred
|
|
| 22.04 LTS jammy |
Vulnerable, fix deferred
|
|
| 20.04 LTS focal |
Vulnerable, fix deferred
|
|
| 18.04 LTS bionic |
Vulnerable, fix deferred
|
|
| 16.04 LTS xenial |
Vulnerable, fix deferred
|
|
| 14.04 LTS trusty |
Vulnerable, fix deferred
|