Scientific Linux Security Update : cpio on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2005-4268 cpio large filesize buffer overflow CVE-2007-4476 tar/cpio stack crashing in safernamesuffix CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive A heap-based buffer overflow flaw was found in the way cpio expanded archive files. If a user wer...

SuSE 10 Security Update : build (ZYPP Patch Number 7395)

The build script uses cpio to extract untrusted rpm packages for bootstrapping virtual machines. cpio is not safe to use for this task, therefore the build script now uses bsdtar instead. CVE-2010-4226 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

CentOS Update for cpio CESA-2010:0144 centos5 i386

Check for the Version of cpio OpenVAS Vulnerability Test CentOS Update for cpio CESA-2010:0144 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for cpio CESA-2010:0144 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE Security Update : build (openSUSE-SU-2011:0174-1)

The build script uses cpio to extract untrusted rpm packages for bootstrapping virtual machines. cpio is not safe to use for this task, therefore the build script now uses bsdtar instead CVE-2010-4226. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

SuSE 10 Security Update : build (ZYPP Patch Number 7372)

The build script uses cpio to extract untrusted rpm packages for bootstrapping virtual machines. cpio is not safe to use for this task, therefore the build script now uses bsdtar instead. CVE-2010-4226 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 11 Security Update : cpio (SAT Patch Number 2198)

This update fixes a heap-based buffer overflow flaw that can happen while expanding specially crafted archive files. CVE-2010-0624 - This updates Dat160 Tape Drive density information bnc415166 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11 / 11.1 Security Update : popt (SAT Patch Numbers 2647 / 2648)

This update fixes a security problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also the following bugs were fixed : - make 'rpmconfigcheck status' exit with 4 bnc592269 - do not use glibc for passwd/group lookups when --root is used bnc536256 -...

SuSE 10 Security Update : cpio (ZYPP Patch Number 6948)

This update fixes a heap-based buffer overflow flaw that can happen while expanding specially crafted archive files. CVE-2010-0624 It also contains changes for : fixed Dat160 Tape Drive density information bnc415166 fixed cpio issues with file sizes = 2^32 fixed handling eof and eod marks...

openSUSE Security Update : popt (openSUSE-SU-2010:0629-1)

This update fixes the problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also following bugfixes were merged from SLE11 : - make 'rpmconfigcheck status' exit with 4 bnc592269 - do not use glibc for passwd/group lookups when --root is used...

VMSA-2010-0013 : VMware ESX third-party updates for Service Console

a. Service Console update for cpio The service console package cpio is updated to version 2.5-6.RHEL3 for ESX 3.x versions and updated to version 2.6-23.el54.1 for ESX 4.x versions. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-4268 and CVE-2010-06...

VMware Releases Updates for ESX Service Console Packages

VMware has released security updates for multiple third party packages for the ESX Service Console. These updates address vulnerabilities in the perl, krb5, samba, tar, and cpio packages. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, cause a...

VMware ESX third party updates for Service Console

a. Service Console update for cpioThe service console package cpio is updated to version 2.5-6.RHEL3 for ESX 3.x versions and updated to version 2.6-23.el54.1 for ESX 4.x versions. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-4268 and CVE-2010-062...

VMSA-2010-0013:VMware ESX third party updates for Service Console

VMSA-2010-0013.3 VMware ESX third party updates for Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0013.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console VMware Security Advisory Issue date: 2010-08-31 VMware Security...

Fedora 12 : cpio-2.10-5.fc12 (2010-4321)

CVE-2010-0624 fix heap-based buffer overflow by expanding a specially- crafted archive572150 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : cpio-2.9.90-8.fc11 (2010-4302)

CVE-2010-0624 fix heap-based buffer overflow by expanding a specially- crafted archive572150 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 13 : cpio-2.10-6.fc13 (2010-4267)

CVE-2010-0624 fix heap-based buffer overflow by expanding a specially- crafted archive572150 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 13 : tar-1.22-16.fc13 (2010-4274)

CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 Note that...

RHEL 3 : cpio (RHSA-2010:0145)

An updated cpio package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A heap-based buffer overflow fla...

RHEL 4 : cpio (RHSA-2010:0143)

An updated cpio package that fixes one security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A heap-based buffer overflow flaw...