moderate: bzip2/util-linux security update
moderate
An update for bzip2/util-linux is now available for NewStart CGSL MAIN 6.06.
NewStart Security has rated this update as having a security impact of moderate. A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.
bzip2:
util-linux:
Security Fix(es):
bzip2: A use-after-free flaw was found in bzip2recover, leading to a null pointer dereference, or a write to a closed file descriptor. An attacker could use this flaw by sending a specially crafted bzip2 file to recover and force the program to crash.(CVE-2016-3189)
bzip2: bugfix
util-linux: Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.(CVE-2014-9114)
util-linux: bugfix
Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
http://security.gd-linux.com/how_to_apply_patch.html
Remember the build tag is 6.06.01B6.