https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:03:12 +0000 https://vulnerability.circl.lu/vuln/cve-2023-7207 <p><strong>Affected:</strong> Debian cpio</p> <p>Debian&#39;s cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.</p> <p><strong>Affected:</strong> Debian cpio</p> <p>Debian&#39;s cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.</p> https://vulnerability.circl.lu/vuln/cve-2023-7207 https://vulnerability.circl.lu/vuln/usn-6755-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: cpio, Ubuntu:22.04:LTS: cpio</p> <p>Ingo Brückl discovered that cpio contained a path traversal vulnerability. If a user or automated system were tricked into extracting a specially crafted cpio archive, an attacker could possibly use this issue to write arbitrary files outside the target directory on the host, even if using the option --no-absolute-filenames.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: cpio, Ubuntu:22.04:LTS: cpio</p> <p>Ingo Brückl discovered that cpio contained a path traversal vulnerability. If a user or automated system were tricked into extracting a specially crafted cpio archive, an attacker could possibly use this issue to write arbitrary files outside the target directory on the host, even if using the option --no-absolute-filenames.</p> https://vulnerability.circl.lu/vuln/usn-6755-1