Debian-LTS alert DLA-415-1 (cpio)

From:
    	     
 
santiagorr@riseup.net 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 415-1] cpio security update 
Date:
    	     
 
Mon, 15 Feb 2016 11:35:55 +0100
Message-ID:
    	     
 
<20160215103555.GA5501@riseup.net>
Package        : cpio
Version        : 2.11-4+deb6u2
CVE ID         : CVE-2016-2037
Debian Bug     : 812401

An out-of-bounds write was discovered in the parsing of cpio files. For
Debian 6 "Squeeze", this issue has been fixed in cpio version
2.11-4+deb6u2.

We recommend you to upgrade your cpio package.

Learn more about the Debian Long Term Support (LTS) Project and how to
apply these updates at: https://wiki.debian.org/LTS/