Advisories » MGAA-2015-0199

Updated rpm packages fixes possible crash

Publication date: 05 Dec 2015
Modification date: 05 Dec 2015
Type: bugfix
Affected Mageia releases : 5

Description

It was discovered that rpm did not properly parse certain corrupt RPM
files. This can be exploited to cause a crash by tricking an unsuspecting
user into processing a specially crafted RPM file (rhbz#1273360).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17268
• https://lists.fedoraproject.org/pipermail/package-announce/2015-November/172944.html

SRPMS

5/core

• rpm-4.12.0.1-20.4.mga5