Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-4226

Fixed in a distro release EPSS 3%CVSS 7.2

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.

Published 2014-02-06 · CVE record · OSV

Products: gnu cpio, opensuse

Distro releases

ReleasePackageFixed in
SUSE Linux Enterprise Software Development Kit 12 SP2build20171128-9.3.2
SUSE Linux Enterprise Software Development Kit 12 SP2obs-service-source_validator0.7-9.3.1
SUSE Linux Enterprise Software Development Kit 12 SP2osc0.162.0-15.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3build20171128-9.3.2
SUSE Linux Enterprise Software Development Kit 12 SP3obs-service-source_validator0.7-9.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3osc0.162.0-15.3.1