OESA-2026-3764 engrampa security update

Mate File Archiver is an application for creating and viewing archives files, such as zip, xv, bzip2, cab, rar and other compress formats. Security Fixes: Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be...

Astra Linux – Vulnerability in Cpio

The vulnerability of the parseopt function in the Cpio archiver utility is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Cpio

The vulnerability of the fromascii function in the copyin.c component of the Cpio compression utility is related to buffer overflows in the stack. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Astra Linux – Vulnerability in Cpio

In GNU Cpio from version 2.13 onwards, attackers can execute arbitrary code by using a crafted pattern file. This occurs due to a dstring.c dsfgetstr integer overflow, which triggers an out-of-bounds heap write. NOTE: It is unclear whether there are common cases where the pattern file, associated...

Astra Linux – Vulnerability in klibc

A issue was discovered in klibc before version 2.0.9. An integer overflow in the cpio command may lead to a NULL pointer dereferencing on 64-bit systems...

Astra Linux – Vulnerability in klibc

A issue was discovered in klibc before version 2.0.9. Multiple potential integer overflows in the cpio command on 32-bit systems could lead to a buffer overflow or other security issues...

Astra Linux – Vulnerability in Cpio

Debian’s cpio package contains a path traversal vulnerability. This issue was introduced by reverting the CVE-2015-1197 patches, which caused a regression in the --no-absolute-filenames option. Upstream has since provided a proper fix for this issue...

CVE-2026-66485 affecting package cpio for versions less than 2.14-2

CVE-2026-66485 affecting package cpio for versions less than 2.14-2. A patched version of the package is available...

CVE-2026-66484 affecting package cpio for versions less than 2.14-2

CVE-2026-66484 affecting package cpio for versions less than 2.14-2. A patched version of the package is available...

CVE-2026-66486 affecting package cpio for versions less than 2.14-2

CVE-2026-66486 affecting package cpio for versions less than 2.14-2. A patched version of the package is available...

openSUSE 16 Security Update : cpio (openSUSE-SU-2026:21747-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21747-1 advisory. - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended...

Security update for cpio

This update for cpio fixes the following issues: CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives bsc1274856. CVE-2026-66485: improper memory management in the makepath...

SUSE-SU-2026:4012-1 Security update for cpio

This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives bsc1274856. - CVE-2026-66485: improper memory management in the makepath...

SUSE-SU-2026:23464-1 Security update for cpio

This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives bsc1274856. - CVE-2026-66485: improper memory management in the makepath...

SUSE-SU-2026:23612-1 Security update for cpio

This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives bsc1274856. - CVE-2026-66485: improper memory management in the makepath...

OPENSUSE-SU-2026:21747-1 Security update for cpio

This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives bsc1274856. - CVE-2026-66485: improper memory management in the makepath...

Security update for cpio

This update for cpio fixes the following issues: CVE-2026-66484: path traversal allows creating hard links outside intended directory via malicious tar archives bsc1274856. CVE-2026-66485: denial of service via uncontrolled memory allocation from crafted archives bsc1274857. CVE-2026-66486:...

SUSE-SU-2026:3959-1 Security update for cpio

This update for cpio fixes the following issues: - CVE-2026-66484: path traversal allows creating hard links outside intended directory via malicious tar archives bsc1274856. - CVE-2026-66485: denial of service via uncontrolled memory allocation from crafted archives bsc1274857. - CVE-2026-66486:...

SUSE-SU-2026:23441-1 Security update for cpio

This update for cpio fixes the following issues: Security issues fixed: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives bsc1274856. - CVE-2026-66485: improper memory...

USN-8704-1: GNU cpio vulnerabilities

It was discovered that cpio incorrectly sanitized hard-link targets when extracting tar archives in copy-in mode. If a user or automated system were tricked into extracting a specially crafted tar archive, an attacker could possibly use this issue to create hard links to files outside the...