USN-6755-1: GNU cpio vulnerabilities

Ingo Brückl discovered that cpio contained a path traversal vulnerability.
If a user or automated system were tricked into extracting a specially
crafted cpio archive, an attacker could possibly use this issue to write
arbitrary files outside the target directory on the host, even if using the
option --no-absolute-filenames.

absolute arbitrary files archive attacker automated cpio directory files gnu host issue path path traversal path traversal vulnerability system target usn vulnerabilities vulnerability