Moderate: libmspack security update (Amazon Linux 2)

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-18585: chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\\0' as its first or second character (such as the "/\\0" name). 99999: CVE-2018-18585 libmspack: chmd_read_headers() fails to reject filenames containing NULL bytes CVE-2018-18584: In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write. 99999: CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h