Medium ELSA-2020-3908 1 CVE

Moderate: cpio security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[2.11-28]
- Improper input validation when writing tar header fields (#1766222)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	cpio	0:2.11-28.el7

Vulnerabilities 1

Medium 6.7

CVE-2019-14866

In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is u…

Red Hat cpio cpio cpio Debian Ubuntu Alpine

Jan 7, 2020