Vulnerability Database
Blog
FAQ
Docs
SUSE-SU-2024:0305-3
See a problem?
Please try reporting it
to the source
first.
Source
https://www.suse.com/support/update/announcement/2024/suse-su-20240305-3/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0305-3.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2024:0305-3
Related
CVE-2023-7207
Published
2024-03-11T13:15:50Z
Modified
2024-03-11T13:15:50Z
Summary
Security update for cpio
Details
This update for cpio fixes the following issues:
Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238)
References
https://www.suse.com/support/update/announcement/2024/suse-su-20240305-3/
https://bugzilla.suse.com/1218571
https://bugzilla.suse.com/1219238
https://www.suse.com/security/cve/CVE-2023-7207
Affected packages
SUSE:Linux Enterprise Micro 5.5
/
cpio
Package
Name
cpio
Purl
pkg:rpm/suse/cpio&distro=SUSE%20Linux%20Enterprise%20Micro%205.5
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.13-150400.3.6.1
Ecosystem specific
{ "binaries": [ { "cpio": "2.13-150400.3.6.1" } ] }
SUSE-SU-2024:0305-3 - OSV