Issued:

2013-09-30

Updated:

2013-09-30

RHBA-2013:1299 - cpio bug fix update

Synopsis

cpio bug fix update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated cpio packages that fix one bug are now available for Red Hat Enterprise Linux 5.

Description

The cpio packages provide the GNU cpio utility for creating and extracting archives, or copying files from one place to another.

This update fixes the following bug:

• Previously, the cpio command was unable to split file names longer than 155 bytes into two parts during the creation of archives of the "ustar" format. Consequently, cpio could store malformed file names or terminate unexpectedly with a segmentation fault. With this update, cpio now handles long file names without problems, and crashes no longer occur in the described scenario. (BZ#867834)

Users of cpio are advised to upgrade to these updated packages, which fix this bug.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

Affected Products

Updated Packages

• cpio-debuginfo-2.6-26.el5.ppc.rpm
• cpio-debuginfo-2.6-26.el5.i386.rpm
• cpio-2.6-26.el5.ia64.rpm
• cpio-debuginfo-2.6-26.el5.s390x.rpm
• cpio-debuginfo-2.6-26.el5.ia64.rpm
• cpio-2.6-26.el5.ppc.rpm
• cpio-2.6-26.el5.s390x.rpm
• cpio-debuginfo-2.6-26.el5.x86_64.rpm
• cpio-2.6-26.el5.x86_64.rpm
• cpio-2.6-26.el5.i386.rpm
• cpio-2.6-26.el5.src.rpm

Fixes

(none)

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.