Reviewed-by: Michael Tremer michael.tremer@ipfire.org

On 30 Nov 2019, at 16:03, Matthias Fischer matthias.fischer@ipfire.org wrote:

For details see: https://www.gnu.org/software/cpio/

Fix CVE-2015-1197 Fix CVE-2016-2037 Fix CVE-2019-14866

Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org

config/rootfiles/common/cpio | 1 + lfs/cpio | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/cpio b/config/rootfiles/common/cpio index 26ca6f376..45bf9f79c 100644 --- a/config/rootfiles/common/cpio +++ b/config/rootfiles/common/cpio @@ -15,6 +15,7 @@ bin/cpio #usr/share/locale/ko/LC_MESSAGES/cpio.mo #usr/share/locale/nl/LC_MESSAGES/cpio.mo #usr/share/locale/pl/LC_MESSAGES/cpio.mo +#usr/share/locale/pt/LC_MESSAGES/cpio.mo #usr/share/locale/pt_BR/LC_MESSAGES/cpio.mo #usr/share/locale/ro/LC_MESSAGES/cpio.mo #usr/share/locale/ru/LC_MESSAGES/cpio.mo diff --git a/lfs/cpio b/lfs/cpio index f2e12952d..02d72d038 100644 --- a/lfs/cpio +++ b/lfs/cpio @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2019 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@

include Config

-VER = 2.12 +VER = 2.13

THISAPP = cpio-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)

$(DL_FILE) = $(DL_FROM)/$(DL_FILE)

-$(DL_FILE)_MD5 = fc207561a86b63862eea4b8300313e86 +$(DL_FILE)_MD5 = 389c5452d667c23b5eceb206f5000810

install : $(TARGET)

-- 2.18.0