SUSE: 2021:286-1 suse/sles12sp4 Security Update
Summary
Advisory ID: SUSE-SU-2021:2686-1 Released: Sat Aug 14 03:58:36 2021 Summary: Security update for cpio Type: security Severity: important Advisory ID: SUSE-RU-2021:2767-1 Released: Tue Aug 17 17:29:14 2021 Summary: Recommended update for cpio Type: recommended Severity: critical Advisory ID: SUSE-RU-2021:2779-1 Released: Thu Aug 19 16:08:35 2021 Summary: Recommended update for cpio Type: recommended Severity: critical Advisory ID: SUSE-SU-2021:2808-1 Released: Mon Aug 23 12:09:10 2021 Summary: Security update for cpio Type: security Severity: important
References
References : 1189206 1189465 1189465 1189465 CVE-2021-38185 CVE-2021-38185
CVE-2021-38185
1189206,CVE-2021-38185
This update for cpio fixes the following issues:
It was possible to trigger Remote code execution due to a integer overflow (CVE-2021-38185, bsc#1189206)
1189465
This update for cpio fixes the following issues:
- A regression in last update would cause builds to hang on various architectures(bsc#1189465)
1189465,CVE-2021-38185
This update for cpio fixes the following issues:
- A regression in the previous update could lead to crashes (bsc#1189465)
1189465,CVE-2021-38185
This update for cpio fixes the following issues:
- A patch previously applied to remedy CVE-2021-38185 introduced a regression
that had the potential to cause a segmentation fault in cpio. [bsc#1189465]