Advisories » MGASA-2016-0063

Updated cpio packages fix CVE-2016-2037

Publication date: 17 Feb 2016
Modification date: 17 Feb 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-2037

Description

Updated cpio package fixes security vulnerability:

An out-of-bounds write in cpio was found in the parsing of cpio files, in the
process_copy_in() function in src/copyin.c (CVE-2016-2037).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17538
• http://openwall.com/lists/oss-security/2016/01/22/4
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2037

SRPMS

5/core

• cpio-2.11-11.1.mga5