busybox (1:1.37.0-10.1) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/installer-team/busybox.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Repo size: 1425408
Browser: https://salsa.debian.org/installer-team/busybox
Last scan: 2026-05-10 23:39:03+00
Next scan: 2026-05-18 01:51:00+00
Merge requests: 3
CI pipeline status: success

Debian changelog in Git:

busybox (1:1.37.0-10.1) unstable; urgency=medium

  * Non-maintainer upload.
  * CVE-2026-26157: Incomplete path sanitization in archive
    extraction utilities
  * CVE-2026-26158: File modification outside of the intended
    extraction directory in tar
  * (Closes: #1127782)

 -- Adrian Bunk <bunk@debian.org>  Wed, 04 Mar 2026 19:42:01 +0200

This branch is even with tag debian/1%1.37.0-10.1