Format: 1.8
Date: Wed, 25 Aug 2021 06:52:28 -0400
Source: cpio
Binary: cpio
Architecture: ppc64el ppc64el_translations
Version: 2.13+dfsg-2ubuntu0.3
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-ppc64el-015.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 cpio       - GNU cpio -- a program to manage archives of files
Changes:
 cpio (2.13+dfsg-2ubuntu0.3) focal-security; urgency=medium
 .
   * SECURITY UPDATE: arbitrary code execution via crafted pattern file
     - debian/patches/CVE-2021-38185.patch: rewrite dynamic string support
       in src/copyin.c, src/copyout.c, src/copypass.c, src/dstring.c,
       src/dstring.h, src/util.c.
     - debian/patches/CVE-2021-38185.2.patch: don't call ds_resize in a loop
       in src/dstring.c.
     - debian/patches/CVE-2021-38185.3.patch: fix dynamic string
       reallocations in src/dstring.c.
     - CVE-2021-38185
Checksums-Sha1:
 0cad349ef27046e39db5cc646e2c73fca990b76a 4998 cpio_2.13+dfsg-2ubuntu0.3_ppc64el.buildinfo
 d0551d7e72a516b3f77a2f3ddf933ee7e1b8b74e 102484 cpio_2.13+dfsg-2ubuntu0.3_ppc64el.deb
 fbf74a4a469e9a1e2607225758ca85a8fcf88612 607725 cpio_2.13+dfsg-2ubuntu0.3_ppc64el_translations.tar.gz
Checksums-Sha256:
 126f0a0da7c635a2b836aa7843223473042fff3426232b5e6216c8031eaf7cbf 4998 cpio_2.13+dfsg-2ubuntu0.3_ppc64el.buildinfo
 4699c12cb8baddeb4ee9270055c3dcea6d53f6fe319679b44018d2699bec2f25 102484 cpio_2.13+dfsg-2ubuntu0.3_ppc64el.deb
 dfbf6035ee7b7884b5084d8ff5afd4a0b3c99a53037dd4967f097a20cf7ba9ed 607725 cpio_2.13+dfsg-2ubuntu0.3_ppc64el_translations.tar.gz
Files:
 6101a00bc5fe3f0e559238cb9bfe87bc 4998 utils important cpio_2.13+dfsg-2ubuntu0.3_ppc64el.buildinfo
 d03165f55cc751390b55bea3e729fdca 102484 utils important cpio_2.13+dfsg-2ubuntu0.3_ppc64el.deb
 83e787b5c91cd04f09e8507e9970b43f 607725 raw-translations - cpio_2.13+dfsg-2ubuntu0.3_ppc64el_translations.tar.gz
Original-Maintainer: Anibal Monsalve Salazar <anibal@debian.org>