HCE2-SA-2025-0294 Low HCE 2.0 Security Fix(es): In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. (CVE-2024-58251) In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. (CVE-2025-46394) HCE 2.0 busybox-1.34.1-13.r17.hce2.x86_64.rpm busybox-help-1.34.1-13.r17.hce2.x86_64.rpm busybox-1.34.1-13.r17.hce2.aarch64.rpm busybox-help-1.34.1-13.r17.hce2.aarch64.rpm