Stay Secure with the Latest Linux Advisories

security advisorybusybox updatemageia

Mageia: 2018-0413 Moderate: Busybox Invalid Pointer Crash and Address Fault

Unziping a specially crafted zip file results in a computation of an invalid pointer and a crash reading an invalid address (CVE-2015-9261). References: - https://bugs.mageia.org/show_bug.cgi?id=23367 . MGASA-2018-0413 - Updated busybox packages fix security vulnerability Publication date: 26 Oct 2018 URL: https://advisories.mageia.org/MGASA-2018-0413.html Type: security Affected Mageia releases: 6 CVE: CVE-2015-9261 Unziping a specially crafted zip file results in a computation of an invalid pointer and a crash reading an invalid address (CVE-2015-9261). References: - https://bugs.mageia.org/show_bug.cgi?id=23367 - https://www.openwall.com/lists/oss-security/2018/07/26/5 - https://www.cve.org/CVERecord?id=CVE-2015-9261 SRPMS: - 6/core/busybox-1.25.1-1.1.mga6 . New busybox updates tackle vulnerabilities linked to specially crafted zip files that could lead to crashes in Mageia.. busybox security, mageia update, crafted zip issues, pointer crash, security patches. . LinuxSecurity.com Team

Oct 26, 2018 Mageia