Is considering marking CVE-2023-7216 as rejected on NVD?

Mon, 04 Mar 2024 02:44:55 -0800 

CVE-2023-7216  has been rejected by the cpio's upstream community , cpio 
maintainer don't think it's a bug. 
Is the Red Hat community considering marking CVE-2023-7216 as rejected on 
NVD:https://nvd.nist.gov/vuln/detail/CVE-2023-7216 ? 
 
If the Red Hat community insists that CVE-2023-7216 is a bug, does the Red Hat 
community have a fix? 

Regards,
Peng




------------------ ???????? ------------------
??????:                                                                         
                                               "Sergey Poznyakoff"              
                                                                      
<[email protected]&gt;;
????????:&nbsp;2024??3??2??(??????) ????9:53
??????:&nbsp;"Peng"<[email protected]&gt;;
????:&nbsp;"bug-cpio"<[email protected]&gt;;"ntait"<[email protected]&gt;;"mrehak"<[email protected]&gt;;
????:&nbsp;Re: Re:Is there a fix for this CVE-2023-7216?



Peng <[email protected]&gt; ha escrit:

&gt;    First of all, I would like to confirm with you, do you accept
&gt;    CVE-2023-7216? Is CVE-2023-7216 a bug or is it the default
&gt;    behavior of cpio software?

It is a normal behavior.&nbsp; Please use the --no-absolute-filenames option
to avoid it, if it is not desired.

Regards,
Sergey

Reply via email to