Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2024:400-2 Moderate: BCI Driver Patch For CPIO Issue

suse
Calendar Grey January 29, 2024
Dist Suse Esm H88
This release resolves a vulnerability related to directory traversal in cpio that could permit unauthorized file writing. Please examine the attached modifications.
The container bci/bci-sle15-kernel-module-devel was updated

Summary

Advisory ID: SUSE-SU-2024:238-1 Released: Fri Jan 26 10:56:41 2024 Summary: Security update for cpio Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate SUSE path traversal patch notification bci container cpio issue

References

References : 1218571 CVE-2023-7207

1218571,CVE-2023-7207

This update for cpio fixes the following issues:

- CVE-2023-7207: Fixed a path traversal issue that could lead to an

arbitrary file write during archive extraction (bsc#1218571).

The following package changes have been done:

- libuuid1-2.37.4-150500.9.3.1 updated

- libsmartcols1-2.37.4-150500.9.3.1 updated

- libblkid1-2.37.4-150500.9.3.1 updated

- libfdisk1-2.37.4-150500.9.3.1 updated

- cpio-2.13-150400.3.3.1 updated

- libmount1-2.37.4-150500.9.3.1 updated

- util-linux-2.37.4-150500.9.3.1 updated

- container:sles15-image-15.0.0-36.5.76 updated

Container Advisory ID : SUSE-CU-2024:400-1
Container Tags : bci/bci-sle15-kernel-module-devel:15.5 , bci/bci-sle15-kernel-module-devel:15.5.5.10 , bci/bci-sle15-kernel-module-devel:latest
Container Release : 5.10
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate SUSE path traversal patch notification bci container cpio issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here