Fedora Legacy Test Update Notification: cpio

[Marc Deslauriers]

---------------------------------------------------------------------
Fedora Legacy Test Update Notification
FEDORALEGACY-2005-152891
Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152891
2005-06-20
---------------------------------------------------------------------

Name        : cpio
Versions    : rh9: cpio-2.5-3.2.legacy
Versions    : fc1: cpio-2.5-5.2.legacy
Summary     : A GNU archiving program.
Description :
GNU cpio copies files into or out of a cpio or tar archive. Archives
are files which contain a collection of other files plus information
about them, such as their file name, owner, timestamps, and access
permissions. The archive can be another file on the disk, a magnetic
tape, or a pipe. GNU cpio supports the following archive formats:
binary, old ASCII, new ASCII, crc, HPUX binary, HPUX old ASCII, old
tar, and POSIX.1 tar.

---------------------------------------------------------------------
Update Information:

An updated cpio package that fixes a umask bug and supports large files
(>2GB) is now available.

GNU cpio copies files into or out of a cpio or tar archive.

It was discovered that cpio uses a 0 umask when creating files using the
-O (archive) option. This creates output files with mode 0666 (all can
read and write) regardless of the user's umask setting. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name CAN-1999-1572 to this issue.

All users of cpio should upgrade to this updated package, which resolves
this issue, and adds support for large files (> 2GB).

---------------------------------------------------------------------
Changelogs

rh9:
* Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
2.5-3.2.legacy
- Added missing texinfo BuildRequires

* Fri Feb 18 2005 Pekka Savola <pekkas at netcore.fi> 2.5-3.1.legacy
- fix CAN-1999-1572 and add >2GB file support, from RHEL (#2408)

fc1:
* Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
2.5-5.2.legacy
- Added missing texinfo BuildRequires

* Fri Feb 18 2005 Pekka Savola <pekkas at netcore.fi> 2.5-5.1.legacy
- fix CAN-1999-1572 and add >2GB file support, from RHEL (#2408)

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedoralegacy.org/
(sha1sums)

rh9:
9f7b398cf0b0259eb983fa3f77aaae4558aa3f81
redhat/9/updates-testing/i386/cpio-2.5-3.2.legacy.i386.rpm
afb4f3892398e6a08bb9f8f3016ffe4a33302fdc
redhat/9/updates-testing/SRPMS/cpio-2.5-3.2.legacy.src.rpm

fc1:
757cee489c9ceb9aa0d8c775a035cfbe5f1f93fe
fedora/1/updates-testing/i386/cpio-2.5-5.2.legacy.i386.rpm
d78fe3e156c510479e55b52ec284b0ba04704909
fedora/1/updates-testing/SRPMS/cpio-2.5-5.2.legacy.src.rpm

---------------------------------------------------------------------

Please test and comment in bugzilla.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20050620/c497a81b/attachment.sig>