Skip to content
OpenAdvisories
Medium ELSA-2015-2108 1 CVE

Moderate: cpio security and bug fix update (Oracle Linux 7)

Published Nov 23, 2015 · Updated Nov 23, 2015

Summary

[2.11-24]
- fix for CVE-2014-9112

[2.11-23]
- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 cpio 0:2.11-24.el7

Vulnerabilities 1

  • Unscored —

    Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial o…