[ubuntu/mantic-security] cpio 2.13+dfsg-7.1ubuntu0.1 (Accepted)
Fabian Toepfer
fabian.toepfer at canonical.com
Mon Apr 29 10:21:19 UTC 2024
cpio (2.13+dfsg-7.1ubuntu0.1) mantic-security; urgency=medium
* SECURITY UPDATE: Path traversal vulnerability
- debian/patches/CVE-2023-7207.patch: Create symlink placeholder
if --no-absolute-filenames was given and replace placeholders
after extraction.
- debian/patches/revert-CVE-2015-1197-handling.patch: Removed.
- CVE-2023-7207
Date: 2024-04-28 12:50:14.692955+00:00
Changed-By: Fabian Toepfer <fabian.toepfer at canonical.com>
https://launchpad.net/ubuntu/+source/cpio/2.13+dfsg-7.1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the mantic-changes
mailing list