| Package | Affected versions | Patched versions |
|---|---|---|
| cpio | = 2.13 |
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free