MGASA-2015-0106
Updated libarchive packages fix security vulnerability
Updated libarchive packages fix security vulnerability:
Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths.
What each source reports
OSV No score
Updated libarchive packages fix security vulnerability
Updated libarchive packages fix security vulnerability:
Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths.
- Record
MGASA-2015-0106- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libarchiveMageia:4 |
before 3.1.2-2.1.mga4 | 3.1.2-2.1.mga4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0106 is a vulnerability with no CVSS score yet in libarchive, published March 12, 2015. No source lists public exploit code. Fixed in libarchive 3.1.2-2.1.mga4.