Re: cpio and CVE-2019-14866 for testing

2019-11-03 Thread Ola Lundqvist
Hi Thank you. I have concluded that the patch only works on amd64, not on i386. I'll contact the maintainer. // Ola On Sun, 3 Nov 2019 at 18:03, Sylvain Beucler wrote: > Hi, > > On 29/10/2019 23:12, Ola Lundqvist wrote: > > Hi LTS contributors > > > > I have built a cpio package with CVE-2019

Re: cpio and CVE-2019-14866 for testing

2019-11-03 Thread Sylvain Beucler
Hi, On 29/10/2019 23:12, Ola Lundqvist wrote: > Hi LTS contributors > > I have built a cpio package with CVE-2019-14866 corrected. > According to my testing it is no longer possible to reproduce the > problem reported in this CVE. > > You can find the packages I have produced here: > http://apt.in

cpio and CVE-2019-14866 for testing

2019-10-29 Thread Ola Lundqvist
Hi LTS contributors I have built a cpio package with CVE-2019-14866 corrected. According to my testing it is no longer possible to reproduce the problem reported in this CVE. You can find the packages I have produced here: http://apt.inguza.net/jessie-security/cpio The (so far rather limited) te