[CLSA-2026:1793167113] cpio: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-28 05:58:44 UTC
Description:
- CVE-2019-14866: check for overflow of tar header fields when creating archives - CVE-2021-38185: fix integer overflow in dynamic string handling
CVEs fixed:
Updated packages:
  • cpio-2.10-13.el6.tuxcare.els1.i686.rpm
    sha:fdb401684d8112adbb2231ae92d8266f883c4a1c819afbf196b3a066c8a80147
  • cpio-2.10-13.el6.tuxcare.els1.x86_64.rpm
    sha:33c57c7df4d47fb60acb8212efd00e32338d1090e22bab2766f00144ef56266f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.