Summary
[2.12-10]
- Fixed improper input validation when writing tar header fields (#1766223)
[2.12-9]
- Extract: retain times for symlinks (#1487673)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cpio | 0:2.12-10.el8 |
Vulnerabilities 1
-
Medium 6.7
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is u…