Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2024:392-2 important: suse/pcp directory traversal vulnerability

suse
Calendar Grey January 28, 2024
Dist Suse Esm H88
SUSE Container Security Notice regarding suse/pcp underscores vulnerabilities of moderate severity, particularly concerning directory traversal exploits.
The container suse/pcp was updated

Summary

Advisory ID: SUSE-SU-2024:238-1 Released: Fri Jan 26 10:56:41 2024 Summary: Security update for cpio Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory security issue moderate severity suse path traversal container update

References

References : 1218571 CVE-2023-7207

1218571,CVE-2023-7207

This update for cpio fixes the following issues:

- CVE-2023-7207: Fixed a path traversal issue that could lead to an

arbitrary file write during archive extraction (bsc#1218571).

The following package changes have been done:

- libuuid1-2.37.4-150500.9.3.1 updated

- libsmartcols1-2.37.4-150500.9.3.1 updated

- libblkid1-2.37.4-150500.9.3.1 updated

- libfdisk1-2.37.4-150500.9.3.1 updated

- cpio-2.13-150400.3.3.1 updated

- libmount1-2.37.4-150500.9.3.1 updated

- util-linux-2.37.4-150500.9.3.1 updated

- util-linux-systemd-2.37.4-150500.9.3.1 updated

- container:bci-bci-init-15.5-15.5-13.10 updated

Container Advisory ID : SUSE-CU-2024:391-1
Container Tags : suse/pcp:5 , suse/pcp:5-21.16 , suse/pcp:5.2 , suse/pcp:5.2-21.16 , suse/pcp:5.2.5 , suse/pcp:5.2.5-21.16 , suse/pcp:latest
Container Release : 21.16
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory security issue moderate severity suse path traversal container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here