Lucene search
SuseOPENSUSE-SU-2021:2689-1HistoryAug 16, 2021 - 12:00 a.m.
Security update for cpio (important)
2021-08-1600:00:00
lists.opensuse.org
37
0.003 Low
EPSS
Percentile
65.2%
An update that fixes one vulnerability is now available.
Description:
This update for cpio fixes the following issues:
It was possible to trigger Remote code execution due to a integer overflow
(CVE-2021-38185, bsc#1189206)
UPDATE: This update was buggy and could lead to hangs, so it has been
retracted. There will be a follow up update.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2021-2689=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 15.3 | aarch64 | < - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): | - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm | |
| openSUSE Leap | 15.3 | ppc64le | < - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): | - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm | |
| openSUSE Leap | 15.3 | s390x | < - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): | - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.s390x.rpm | |
| openSUSE Leap | 15.3 | x86_64 | < - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): | - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm | |
| openSUSE Leap | 15.3 | noarch | < - openSUSE Leap 15.3 (noarch): | - openSUSE Leap 15.3 (noarch):.noarch.rpm |
Related
ubuntucve
ubuntucve
CVE-2021-38185
2021-08-08 00:00:00
nessus
nessus
SUSE SLES12 Security Update : cpio (SUSE-SU-2021:2808-1)
2021-08-24 00:00:00
EulerOS Virtualization 2.9.1 : cpio (EulerOS-SA-2021-2749)
2021-11-17 00:00:00
Rocky Linux 8 : cpio (RLSA-2022:1991)
2023-11-06 00:00:00
osv
osv
cpio vulnerability
2021-09-08 11:14:41
cpio vulnerability
2023-08-03 13:30:12
Moderate: cpio security update
2022-05-10 06:43:49
openvas
openvas
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2681)
2021-11-12 00:00:00
Ubuntu: Security Advisory (USN-5064-1)
2021-09-09 00:00:00
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2654)
2021-11-12 00:00:00
ubuntu
ubuntu
GNU cpio vulnerability
2022-01-27 00:00:00
GNU cpio vulnerability
2021-09-08 00:00:00
GNU cpio vulnerability
2023-08-03 00:00:00
oraclelinux
oraclelinux
cpio security update
2022-05-17 00:00:00
cloudfoundry
cloudfoundry
USN-5064-1: GNU cpio vulnerability | Cloud Foundry
2021-10-04 00:00:00
rocky
rocky
cpio security update
2022-05-10 06:43:49
nvd
nvd
CVE-2021-38185
2021-08-08 00:15:07
amazon
amazon
Medium: cpio
2023-03-02 22:35:00
photon
photon
cvelist
cvelist
CVE-2021-38185
2021-08-07 00:00:00
redhat
redhat
ibm
ibm
Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by arbitrary code executiondue to GNU cpio (CVE-2021-38185)
2022-08-01 10:01:49
alpinelinux
alpinelinux
CVE-2021-38185
2021-08-08 00:15:07
cbl_mariner
cbl_mariner
CVE-2021-38185 affecting package cpio for versions less than 2.13-4
2022-06-03 17:54:03
CVE-2021-38185 affecting package cpio 2.13-3
2021-09-13 03:23:36
redhatcve
redhatcve
CVE-2021-38185
2021-08-09 20:19:57
cve
cve
CVE-2021-38185
2021-08-08 00:15:07
mageia
mageia
Updated cpio packages fix security vulnerability
2021-09-23 07:49:29
debiancve
debiancve
CVE-2021-38185
2021-08-08 00:15:07
githubexploit
githubexploit
Exploit for Integer Overflow or Wraparound in Gnu Cpio
2021-07-19 20:10:13
almalinux
almalinux
Moderate: cpio security update
2022-05-10 06:43:49
prion
prion
Integer overflow
2021-08-08 00:15:00
veracode
veracode
Remote Code Execution (RCE)
2021-08-12 14:00:18
debian
debian
[SECURITY] [DLA 3445-1] cpio security update
2023-06-04 20:12:22
gentoo
gentoo
cpio: Arbitrary Code Execution
2024-07-01 00:00:00
avleonov
avleonov