Debian/cpio: medium 4.9
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provide
Action: Upgrade cpio to 2.14+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.14+dfsg-1 | - |
Fixed versions
| 2.14+dfsg-1 |
Sources
published · modified · JSON