CVE-2023-7207 (published 2024-01-05T00:39:49.690Z)
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
Affected products: Vendor: Debian
Product: Debian cpio
Versions: 0