https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:02:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349563 EUVD-2026-349563 https://cve.radiocsirt.org/vuln/euvd-2026-349563 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66484 <p>GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absolute path outside the extraction directory, can cause cpio to create a hard link to an existing file outside the intended extraction directory, breaking the expected guarantee of --no-absolute-filenames and allowing archive-controlled linkage to external files.</p> <p>This issue has been fixed in commit e2b9cbdd3354d2b1569b7390d1bc15c1930559ad</p> <p>GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absolute path outside the extraction directory, can cause cpio to create a hard link to an existing file outside the intended extraction directory, breaking the expected guarantee of --no-absolute-filenames and allowing archive-controlled linkage to external files.</p> <p>This issue has been fixed in commit e2b9cbdd3354d2b1569b7390d1bc15c1930559ad</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-66484 https://cve.radiocsirt.org/vuln/ghsa-rc3p-p5w3-fm9j <p>GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absolute path outside the extraction directory, can cause cpio to create a hard link to an existing file outside the intended extraction directory, breaking the expected guarantee of --no-absolute-filenames and allowing archive-controlled linkage to external files.</p> <p>This issue has been fixed in commit e2b9cbdd3354d2b1569b7390d1bc15c1930559ad</p> <p>GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absolute path outside the extraction directory, can cause cpio to create a hard link to an existing file outside the intended extraction directory, breaking the expected guarantee of --no-absolute-filenames and allowing archive-controlled linkage to external files.</p> <p>This issue has been fixed in commit e2b9cbdd3354d2b1569b7390d1bc15c1930559ad</p> https://cve.radiocsirt.org/vuln/ghsa-rc3p-p5w3-fm9j https://cve.radiocsirt.org/vuln/msrc_cve-2026-66484 msrc_CVE-2026-66484 https://cve.radiocsirt.org/vuln/msrc_cve-2026-66484 https://cve.radiocsirt.org/vuln/oesa-2026-3456 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: cpio, openEuler:22.03-LTS-SP4: cpio, openEuler:24.03-LTS-SP1: cpio, openEuler:24.03-LTS-SP3: cpio, openEuler:24.03-LTS-SP4: cpio</p> <p>GNU cpio copies files into or out of a cpio or tar archive. The archive can be another file on the disk, a magnetic tape, or a pipe. Security Fix(es):</p> <p>GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absolute path outside the extraction directory, can cause cpio to create a hard link to an existing file outside the intended extraction directory, breaking the expected guarantee of --no-absolute-filenames and allowing archive-controlled linkage to external files.</p> <p>This issue has been fixed in commit e2b9cbdd3354d2b1569b7390d1bc15c1930559ad(CVE-2026-66484)</p> <p>GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a sufficiently long nested pathname causes an unbounded stack allocation, resulting in a stack overflow and crash of the cpio process. An attacker who can supply a crafted cpio archive to a victim who extracts it can cause a denial of service.…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: cpio, openEuler:22.03-LTS-SP4: cpio, openEuler:24.03-LTS-SP1: cpio, openEuler:24.03-LTS-SP3: cpio, openEuler:24.03-LTS-SP4: cpio</p> <p>GNU cpio copies files into or out of a cpio or tar archive. The archive can be another file on the disk, a magnetic tape, or a pipe. Security Fix(es):</p> <p>GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absolute path outside the extraction directory, can cause cpio to create a hard link to an existing file outside the intended extraction directory, breaking the expected guarantee of --no-absolute-filenames and allowing archive-controlled linkage to external files.</p> <p>This issue has been fixed in commit e2b9cbdd3354d2b1569b7390d1bc15c1930559ad(CVE-2026-66484)</p> <p>GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a sufficiently long nested pathname causes an unbounded stack allocation, resulting in a stack overflow and crash of the cpio process. An attacker who can supply a crafted cpio archive to a victim who extracts it can cause a denial of service.…</p> https://cve.radiocsirt.org/vuln/oesa-2026-3456 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11618-1 <p>cpio-2.15-8.1 on GA media</p> <p>cpio-2.15-8.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11618-1 https://cve.radiocsirt.org/vuln/rhsa-2026:54508 <p>cpio: GNU cpio: Path Traversal allows creating hard links outside intended directory via malicious tar archives.</p> <p>cpio: GNU cpio: Path Traversal allows creating hard links outside intended directory via malicious tar archives.</p> https://cve.radiocsirt.org/vuln/rhsa-2026:54508 https://cve.radiocsirt.org/vuln/suse-su-2026:23355-1 <p>Security update for cpio</p> <p>Security update for cpio</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23355-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-66484 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cpio, Ubuntu:Pro:16.04:LTS: cpio, Ubuntu:Pro:18.04:LTS: cpio, Ubuntu:Pro:20.04:LTS: cpio, Ubuntu:22.04:LTS: cpio, Ubuntu:24.04:LTS: cpio, Ubuntu:26.04:LTS: cpio</p> <p>GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absolute path outside the extraction directory, can cause cpio to create a hard link to an existing file outside the intended extraction directory, breaking the expected guarantee of --no-absolute-filenames and allowing archive-controlled linkage to external files. This issue has been fixed in commit e2b9cbdd3354d2b1569b7390d1bc15c1930559ad</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cpio, Ubuntu:Pro:16.04:LTS: cpio, Ubuntu:Pro:18.04:LTS: cpio, Ubuntu:Pro:20.04:LTS: cpio, Ubuntu:22.04:LTS: cpio, Ubuntu:24.04:LTS: cpio, Ubuntu:26.04:LTS: cpio</p> <p>GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absolute path outside the extraction directory, can cause cpio to create a hard link to an existing file outside the intended extraction directory, breaking the expected guarantee of --no-absolute-filenames and allowing archive-controlled linkage to external files. This issue has been fixed in commit e2b9cbdd3354d2b1569b7390d1bc15c1930559ad</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-66484 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2722 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cpio ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service zu verursachen oder Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cpio ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service zu verursachen oder Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2722