shield Security update for cpio

SUSE-SLE-SERVER-12-SP1-2017-185

This update for cpio fixes two issues. This security issue was fixed: - CVE-2016-2037: The cpio_safer_name_suffix function in util.c in cpio allowed remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file (bsc#963448). This non-security issue was fixed: - bsc#1020108: Always use 32 bit CRC to prevent checksum errors for files greater than 32MB

• Release Date
  Feb 2 2017
• References
  Bugzilla: 963448, 1020108
  CVEs: CVE-2016-2037
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.1 ppc64le

• Packages
  cpio
  A Backup and Archiving Utility

  2.11-32.1 lock rpm lock src

  cpio-lang
  Languages for package cpio

  2.11-32.1 lock rpm

SUSE Linux Enterprise Server 12.1 s390x

• Packages
  cpio
  A Backup and Archiving Utility

  2.11-32.1 lock rpm lock src

  cpio-lang
  Languages for package cpio

  2.11-32.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64

• Packages
  cpio
  A Backup and Archiving Utility

  2.11-32.1 lock rpm lock src

  cpio-lang
  Languages for package cpio

  2.11-32.1 lock rpm