USN-5064-2: GNU cpio vulnerability
USN-5064-1 fixed vulnerabilities in GNU cpio. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled certain pattern files. A remote attacker could use this issue to cause cpio to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this GNU cpio vulnerability?
The vulnerability ID for this GNU cpio vulnerability is USN-5064-2.
What is the severity level of USN-5064-2?
The severity level of USN-5064-2 is not provided in the information provided.
What software is affected by this vulnerability?
The software affected by this vulnerability is GNU cpio version 2.11+dfsg-5ubuntu1.1+esm1 on Ubuntu 16.04.
How can I fix the USN-5064-2 vulnerability?
To fix the USN-5064-2 vulnerability, update the GNU cpio package to version 2.11+dfsg-5ubuntu1.1+esm1.
Where can I find more information about the USN-5064-2 vulnerability?
You can find more information about the USN-5064-2 vulnerability at the following references: [USN-5064-1](https://ubuntu.com/security/notices/USN-5064-1) and [USN-5064-3](https://ubuntu.com/security/notices/USN-5064-3).