Vulnerabilities in cpio and libarchive
Four years after the last release, version 2.13 of the cpio file archiving utility has been published, which is used in RPM packages and initramfs. This new release addresses three vulnerabilities: CVE-2015-1197, which allows files to be overwritten outside the directory where the archive is unpacked. CVE-2016-2037, which leads to writing outside the allocated buffer when processing specially formatted files […]
