Red Hat Security Advisory: cpio security update
cpio: integer overflow in ds_fgetstr() in dstring.c can lead to an out-of-bounds write via a crafted pattern file
cpe:/o:redhat:enterprise_linux:8::baseos