AZL-54087 CVE-2024-53142 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as: 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 + data ... 55...

UBUNTU-CVE-2024-53142

In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as: 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 + data ... 55...

CVE-2024-53142 initramfs: avoid filename buffer overrun

In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as: 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 + data ... 55...

CVE-2024-53142

CVE-2024-53142: Linux kernel initramfs fix for filename buffer overrun. Root cause: during initramfs cpio extraction, the do_name() path passed a non-zero-terminated filename to kernel file operations, allowing trailing bytes from uninitialized memory to be incorporated into a created path. Impac...

RHSA-2005:378 Red Hat Security Advisory: cpio security update

Bulletin has no description...

[SECURITY] Fedora 39 Update: libarchive-3.7.1-3.fc39

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

[SECURITY] Fedora 40 Update: libarchive-3.7.2-7.fc40

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

OESA-2024-2170 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

RHSA-2022:1991 Red Hat Security Advisory: cpio security update

Bulletin has no description...

RHSA-2022:0073 Red Hat Security Advisory: cpio security update

Bulletin has no description...

RHSA-2021:1582 Red Hat Security Advisory: cpio security update

Bulletin has no description...

RHSA-2020:3908 Red Hat Security Advisory: cpio security update

Bulletin has no description...

RHSA-2015:2108 Red Hat Security Advisory: cpio security and bug fix update

Bulletin has no description...

RHSA-2010:0145 Red Hat Security Advisory: cpio security update

Bulletin has no description...

RHSA-2010:0144 Red Hat Security Advisory: cpio security update

Bulletin has no description...

RHSA-2010:0143 Red Hat Security Advisory: cpio security update

Bulletin has no description...

RHSA-2007:0245 Red Hat Security Advisory: cpio security and bug fix update

Bulletin has no description...

RHSA-2005:080 Red Hat Security Advisory: cpio security update

Bulletin has no description...

RHSA-2005:073 Red Hat Security Advisory: cpio security update

Bulletin has no description...

The vulnerability of the binary archiver cpio lies in the improper limitation of the path name for the limited directory, allowing a hacker to trigger a service failure.

The vulnerability of the binary archiver cpio is related to a regression issue when the --no-absolute-filenames parameter is used. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...