Advisories MDVSA-2010:065: cpio

[paul]

A vulnerability has been found and corrected in cpio and tar:

 

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c

in the rmt client functionality in GNU tar before 1.23 and GNU cpio

before 2.11 allows remote rmt servers to cause a denial of service

(memory corruption) or possibly execute arbitrary code by sending more

data than was requested, related to archive filenames that contain a :

(colon) character (CVE-2010-0624).

 

The Tar package as shipped with Mandriva Linux is not affected

by this vulnerability, but it was patched nonetheless in order to

provide additional security to customers who recompile the package

while having the rsh package installed.

 

Packages for 2008.0 are provided for Corporate Desktop 2008.0

customers.

 

The updated packages have been patched to correct this issue.