dpkg-deb 安全漏洞

dpkg-deb is a package manager in Linux developed by the Debian community. dpkg-deb has a security vulnerability that stems from improper validation of the end of the data stream when decompressing.deb archives compressed with zstd, which could lead to a denial-of-service attack...

Astra Linux – Vulnerability in dpkg

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory. This behavior is documented as being a safe operation even on untrusted data. This may result in temporary files being left behind during cleanup. Given...

TencentOS Server 4: dpkg (TSSA-2025:0522)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0522 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CLSA-2025-1760024944 Fix CVE(s): CVE-2025-6297

SECURITY UPDATE: Fix directory cleanup vulnerability - dpkg-deb/info.c: Fix cleanup for control member with restricted directories - Add treewalk to set proper permissions before removal for non-root users - CVE-2025-6297...

EUVD-2014-3243

Malware in sbrugna...

EUVD-2010-0427

Malware in sbrugna...

EUVD-2014-0509

Malware in sbrugna...

EUVD-2014-3802

Malware in sbrugna...

EUVD-2008-4963

Malware in sbrugna...

EUVD-2014-8462

Malware in sbrugna...

EUVD-2015-0871

Malware in sbrugna...

EUVD-2010-1699

Malware in sbrugna...

EUVD-2021-19401

Malware in sbrugna...

EUVD-2011-0428

Malware in sbrugna...

EUVD-2014-3801

Malware in sbrugna...

EUVD-2004-2758

Malware in sbrugna...

EUVD-2025-19670

Malicious code in bioql PyPI...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : dpkg vulnerability (USN-7768-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7768-1 advisory. It was discovered that dpkg incorrectly handled removing certain temporary directories. An attacker could possibly use this issue to consume...

Ubuntu: Security Advisory (USN-7768-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for dpkg

This update for dpkg fixes the following issues: CVE-2025-6297: Fixed cleanup for control member with restricted directories bsc1245573. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can ru...