Debian/cpio: unknown
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
Action: Upgrade cpio to 2.11+dfsg-4.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.11+dfsg-4.1 | - |
Fixed versions
| 2.11+dfsg-4.1 |
Sources
published · modified · JSON