Advisories » MGASA-2018-0413

Updated busybox packages fix security vulnerability

Publication date: 26 Oct 2018
Modification date: 26 Oct 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2015-9261

Description

Unziping a specially crafted zip file results in a computation of an
invalid pointer and a crash reading an invalid address (CVE-2015-9261).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23367
• https://www.openwall.com/lists/oss-security/2018/07/26/5
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9261

SRPMS

6/core

• busybox-1.25.1-1.1.mga6