Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Debian: 2014-12-22 Critical: Cpio Out Of Bounds And Null Pointer Issues

debian
Calendar Grey December 23, 2014
Scroller Debian
Urgent security patch implemented for Debian's cpio utility, tackling various vulnerabilities and associated risks.
Michal Zalewski discovered an out of bounds write issue in cpio, a tool for creating and extracting cpio archive files
Topics%20covered

Topics Covered

security advisory critical software update debian cpio null pointer out of bounds

Summary

For the stable distribution (wheezy), this problem has been fixed in
version 2.11+dfsg-0.1+deb7u1.

For the upcoming stable distribution (jessie), this problem will be
fixed soon.

For the unstable distribution (sid), this problem has been fixed in
version 2.11+dfsg-4.

We recommend that you upgrade your cpio packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: cpio
CVE ID: CVE-2014-9112

Topics%20covered

Topics Covered

security advisory critical software update debian cpio null pointer out of bounds

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.