StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · cpio

`cpio` CVE matrix across Linux distros

54 CVEs tracked across 8 distro releases. Showing the 54 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-1999-1572→ fixed in2.5-1.2
CVE-2005-1111→ fixed in2.6-6
CVE-2005-1229→ fixed in2.6-6
CVE-2005-4268→ fixed in2.6-10
CVE-2007-4476→ fixed in2.9-5
CVE-2010-0624→ fixed in2.11-1
CVE-2014-9112→ fixed in2.11+dfsg-4
CVE-2015-1197→ fixed in2.11+dfsg-4.1
+3 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y cpio

Debian bookworm

Source: Debian

CVE-1999-1572→ fixed in2.5-1.2
CVE-2005-1111→ fixed in2.6-6
CVE-2005-1229→ fixed in2.6-6
CVE-2005-4268→ fixed in2.6-10
CVE-2007-4476→ fixed in2.9-5
CVE-2010-0624→ fixed in2.11-1
CVE-2014-9112→ fixed in2.11+dfsg-4
CVE-2015-1197→ fixed in2.11+dfsg-4.1
+3 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y cpio

Debian trixie

Source: Debian

CVE-1999-1572→ fixed in2.5-1.2
CVE-2005-1111→ fixed in2.6-6
CVE-2005-1229→ fixed in2.6-6
CVE-2005-4268→ fixed in2.6-10
CVE-2007-4476→ fixed in2.9-5
CVE-2010-0624→ fixed in2.11-1
CVE-2014-9112→ fixed in2.11+dfsg-4
CVE-2015-1197→ fixed in2.11+dfsg-4.1
+4 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y cpio

Alpine v3.20

Source: Alpine secdb

CVE-2015-1197→ fixed in2.13-r0
CVE-2016-2037→ fixed in2.12-r3
CVE-2019-14866→ fixed in2.13-r0
CVE-2021-38185→ fixed in2.13-r2

Single command to patch all of these:

apk add --upgrade cpio

Alpine v3.21

Source: Alpine secdb

CVE-2015-1197→ fixed in2.13-r0
CVE-2016-2037→ fixed in2.12-r3
CVE-2019-14866→ fixed in2.13-r0
CVE-2021-38185→ fixed in2.13-r2

Single command to patch all of these:

apk add --upgrade cpio

Alpine edge

Source: Alpine secdb

CVE-2015-1197→ fixed in2.13-r0
CVE-2016-2037→ fixed in2.12-r3
CVE-2019-14866→ fixed in2.13-r0
CVE-2021-38185→ fixed in2.13-r2

Single command to patch all of these:

apk add --upgrade cpio

Alpine v3.18

Source: Alpine secdb

CVE-2015-1197→ fixed in2.13-r0
CVE-2016-2037→ fixed in2.12-r3
CVE-2019-14866→ fixed in2.13-r0
CVE-2021-38185→ fixed in2.13-r2

Single command to patch all of these:

apk add --upgrade cpio

Alpine v3.19

Source: Alpine secdb

CVE-2015-1197→ fixed in2.13-r0
CVE-2016-2037→ fixed in2.12-r3
CVE-2019-14866→ fixed in2.13-r0
CVE-2021-38185→ fixed in2.13-r2

Single command to patch all of these:

apk add --upgrade cpio

Is YOUR cpio patched?

5-second check on your actual server. The quickscan reads your installed cpio version and matches against the same 54-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)