[Git][security-tracker-team/security-tracker][master] Track followup cpio fix for regression fix

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
db833dc3 by Salvatore Bonaccorso at 2023-12-23T08:57:11+01:00
Track followup cpio fix for regression fix

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -515315,6 +515315,7 @@ CVE-2023-XXXX [Path traversal vulnerability due to partial revert of fix for CVE
 	[bullseye] - cpio <no-dsa> (Minor issue)
 	[buster] - cpio <not-affected> (Partial CVE-2015-1197 patch revert not applied)
 	NOTE: https://www.openwall.com/lists/oss-security/2023/12/21/8
+	NOTE: Fixed by: https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=376d663340a9dc91c91a5849e5713f07571c1628 (v2.14)
 CVE-2015-1197 (cpio 2.11, when using the --no-absolute-filenames option, allows local ...)
 	- cpio 2.11+dfsg-4.1 (low; bug #774669)
 	[wheezy] - cpio <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/db833dc3587f2c7d49c7ff9aee7df8b71042a742

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/db833dc3587f2c7d49c7ff9aee7df8b71042a742
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231223/1202931b/attachment.htm>