Summary
This update for cpio fixes the following issues:
- A regression in the previous update could lead to crashes (bsc#1189465)
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| SUSE · HPE Helion OpenStack 8 | cpio | 2.11-36.12.1 |
| SUSE · SLES 12 SP2 Linux Enterprise Server 12 SP2-BCL | cpio | 2.11-36.12.1 |
| SUSE · SLES 12 SP3 Linux Enterprise Server 12 SP3-BCL | cpio | 2.11-36.12.1 |
| SUSE · SLES 12 SP3 Linux Enterprise Server 12 SP3-LTSS | cpio | 2.11-36.12.1 |
| SUSE · SLES 12 SP4 Linux Enterprise Server 12 SP4-LTSS | cpio | 2.11-36.12.1 |
| SUSE · SLES 12 SP5 Linux Enterprise Server 12 SP5 | cpio | 2.11-36.12.1 |
| SUSE · SLES for SAP 12 SP3 Linux Enterprise Server for SAP Applications 12 SP3 | cpio | 2.11-36.12.1 |
| SUSE · SLES for SAP 12 SP4 Linux Enterprise Server for SAP Applications 12 SP4 | cpio | 2.11-36.12.1 |
| SUSE · SLES for SAP 12 SP5 Linux Enterprise Server for SAP Applications 12 SP5 | cpio | 2.11-36.12.1 |
| SUSE · OpenStack Cloud 8 | cpio | 2.11-36.12.1 |
| SUSE · OpenStack Cloud 9 | cpio | 2.11-36.12.1 |
| SUSE · OpenStack Cloud Crowbar 8 | cpio | 2.11-36.12.1 |
| SUSE · OpenStack Cloud Crowbar 9 | cpio | 2.11-36.12.1 |
Vulnerabilities 1
-
High 7.8CVE-2021-38185 Public exploit
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_…