Advisories » MGAA-2019-0213

Updated cpio packages fix system crash on shutdown or reboot.

Publication date: 19 Nov 2019
Modification date: 17 Feb 2022
Type: bugfix
Affected Mageia releases : 7

Description

The cpio update to 2.13 in MGASA-2019-0326 contained an upstream fix for
CVE-2015-1197 symlink attack. Unfortunately that fix caused a regression
on at least some systems using lvm or mdadm, causing them to crash on 
shutdown or reboot.

This update solves this by reverting the upstream fix, and restoring
the older well tested variant of the fix that is known to not cause
crashes.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=25698

SRPMS

7/core

• cpio-2.13-1.1.mga7