Ubuntu Security Notice USN-6755-1

Ubuntu Security Notice 6755-1 - Ingo Brückl discovered that cpio contained a path traversal vulnerability. If a user or automated system were tricked into extracting a specially crafted cpio archive, an attacker could possibly use this issue to write arbitrary files outside the target directory on the host, even if using the option --no-absolute-filenames.

absolute arbitrary files archive attacker automated cpio directory files host issue notice path path traversal path traversal vulnerability security security notice system target ubuntu usn vulnerability