SUSE-SU-2016:1939-1: bsdtar&distro=SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2016:1939-1 is a vulnerability in bsdtar&distro=SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 02-08-2016
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for bsdtar bsdtar was updated to fix seven security issues. These security issues were fixed: - CVE-2015-8929: Memory leak in tar parser (bsc#985669). - CVE-2016-4809: Memory allocate error with symbolic links in cpio archives (bsc#984990). - CVE-2015-8920: Stack out of bounds read in ar parser (bsc#985675). - CVE-2015-8921: Global out of bounds read in mtree parser (bsc#985682). - CVE-2015-8924: Heap buffer read overflow in tar (bsc#985609). - CVE-2015-8918: Overlapping memcpy in CAB parser (bsc#985698). - CVE-2015-2304: Reject absolute paths in input mode of bsdcpio exactly when '..' is rejected (bsc#920870).

No weakness data has been published for this record.