Name busybox
Version 1.37.0
Summary Tiny versions of many common UNIX utilities in a single small executable
Description BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides minimalist replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. The utilities in BusyBox generally have fewer options than their full-featured GNU cousins; however, the options that are included provide the expected functionality and behave very much like their GNU counterparts. BusyBox provides a fairly complete POSIX environment for any small or embedded system.
Section base
License GPL-2.0-only & bzip2-1.0.6
Homepage https://www.busybox.net
Bug tracker https://bugs.busybox.net/
Recipe file recipes-core/busybox/busybox_1.37.0.bb
recipes-core/busybox/busybox.inc
Layer openembedded-core (rel-v2026.2 branch)
Inherits
  • cml1
  • gcc
  • gcc-native
  • ptest
  • systemd
  • update-alternatives
  • update-rc.d
Dependencies
  • gcc-cross-i686
  • kern-tools-native
  • systemd-systemctl-native
  • virtual/compilerlibs
  • virtual/crypt
  • virtual/libc
  • virtual/update-alternatives
PACKAGECONFIG options
  • vardepvalue

Sources

https://busybox.net/downloads/busybox-1.37.0.tar.bz2

Patches

Patch Status
busybox/0001-depmod-Ignore-.debug-directories.patch Pending
busybox/fail_on_no_media.patch Denied
busybox/recognize_connmand.patch Inappropriate [OE-Core]
busybox/busybox-cross-menuconfig.patch Submitted
busybox/makefile-libbb-race.patch Submitted
busybox/0001-testsuite-check-uudecode-before-using-it.patch Submitted [http://lists.busybox.net/pipermail/busybox/2018-November/086833.html]
busybox/0001-testsuite-use-www.example.org-for-wget-test-cases.patch Submitted [http://lists.busybox.net/pipermail/busybox/2018-November/086835.html]
busybox/0001-du-l-works-fix-to-use-145-instead-of-144.patch Submitted [http://lists.busybox.net/pipermail/busybox/2018-November/086836.html]
busybox/0001-sysctl-ignore-EIO-of-stable_secret-below-proc-sys-ne.patch Submitted [busybox@busybox.net mailing list]
busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch Submitted [https://bugs.busybox.net/show_bug.cgi?id=15001]
busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch Submitted [https://bugs.busybox.net/show_bug.cgi?id=15001]
busybox/busybox-1.36.1-no-cbq.patch Submitted [https://bugs.busybox.net/show_bug.cgi?id=15931]
busybox/0001-cut-Fix-s-flag-to-omit-blank-lines.patch Submitted [http://lists.busybox.net/pipermail/busybox/2024-July/090834.html]
busybox/0001-syslogd-fix-wrong-OPT_locallog-flag-detection.patch Submitted [https://lists.busybox.net/pipermail/busybox/2024-October/090969.html]
busybox/0002-start-stop-daemon-fix-tests.patch Submitted [https://lists.busybox.net/pipermail/busybox/2024-October/090968.html]
busybox/0003-start-stop-false.patch Submitted [http://lists.busybox.net/pipermail/busybox/2023-August/090416.html]
busybox/0001-archival-disallow-path-traversals-CVE-2023-39810.patch Backport [https://git.busybox.net/busybox/commit/?id=9a8796436b9b0641e13480811902ea2ac57881d3]
busybox/0001-hwclock-Check-for-SYS_settimeofday-before-calling-sy.patch Submitted [http://lists.busybox.net/pipermail/busybox/2021-March/088583.html]]
busybox/0001-busybox-Add-awk-gsub-erroneous-word-start-match-test.patch Submitted [https://lists.busybox.net/pipermail/busybox/2025-July/091623.html]
busybox/CVE-2025-46394-01.patch Backport [https://git.busybox.net/busybox/commit/?id=f5e1bf966b19ea1821f00a8c9ecd7774598689b4]
busybox/CVE-2025-46394-02.patch Submitted [https://lists.busybox.net/pipermail/busybox/2025-October/091743.html]
busybox/CVE-2025-60876.patch Submitted [https://lists.busybox.net/pipermail/busybox/2025-November/091840.html]
busybox/0001-busybox-fix-printf-ptest-failure-with-glibc-2.43.patch Submitted [https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=1128825;filename=busybox_glibc-2.43_thp.patch;msg=10]
busybox/0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch Backport [https://git.busybox.net/busybox/commit/?id=3fb6b31c716669e12f75a2accd31bb7685b1a1cb]
busybox/0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch Backport [https://git.busybox.net/busybox/commit/?id=599f5dd8fac390c18b79cba4c14c334957605dae]
busybox/CVE-2024-58251.patch Pending
busybox/CVE-2026-29004-01.patch Backport [https://github.com/vda-linux/busybox_mirror/commit/42202bfb1e6ac51fa995beda8be4d7b654aeee2a]
busybox/CVE-2026-29004-02.patch Backport [https://github.com/vda-linux/busybox_mirror/commit/d368f3f7836d1c2484c8f839316e5c93e76d4409]
busybox/CVE-2026-38754.patch Backport [https://github.com/vda-linux/busybox_mirror/commit/a448b6d5b21e5b21249391389b6f0551d9bea136]

bbappends

This recipe is appended by:

meta-virtualization busybox_%.bbappend
meta-xilinx-imgrcvry busybox_%.bbappend

Other branches

This recipe in other branches of openembedded-core:

Branch Recipe
rel-v2026.1 (AMD EDF 26.06 Release) busybox 1.36.1
rel-v2026.2 (AMD EDF 26.11 Release) busybox 1.37.0 (this recipe)