CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Ups…
Published: 2024-01-05 · CVSS: 4.9 · CVSS 3.1
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7