https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:08:17.144470+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05892 bdu:2022-05892 2026-10-02T19:08:17.295891+00:00 bdu:2022-05892 https://cve.radiocsirt.org/vuln/euvd-2026-181576 EUVD-2026-181576 2026-10-02T19:08:17.295926+00:00 EUVD-2026-181576 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1664 fkie_cve-2022-1664 2026-10-02T19:08:17.295942+00:00

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.

 https://cve.radiocsirt.org/vuln/ghsa-q7pv-fjh6-6xq6 GHSA-q7pv-fjh6-6xq6 2026-10-02T19:08:17.295971+00:00

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.

 https://cve.radiocsirt.org/vuln/gsd-2022-1664 gsd-2022-1664 2026-10-02T19:08:17.295988+00:00 gsd-2022-1664 https://cve.radiocsirt.org/vuln/msrc_cve-2022-1664 msrc_CVE-2022-1664 — directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar 2026-10-02T19:08:17.295999+00:00 msrc_CVE-2022-1664 https://cve.radiocsirt.org/vuln/oesa-2022-1703 OESA-2022-1703 — dpkg security update 2026-10-02T19:08:17.296014+00:00

Affected: openEuler:20.03-LTS-SP1: dpkg, openEuler:20.03-LTS-SP3: dpkg, openEuler:22.03-LTS: dpkg

Dpkg is a tool to install, build, remove and manageDebian packages. The primary and more user-friendly front-end for dpkg is aptitude. Security Fix(es): Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.(CVE-2022-1664)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12110-1 openSUSE-SU-2024:12110-1 — dpkg-1.21.8-1.1 on GA media 2026-10-02T19:08:17.296041+00:00

dpkg-1.21.8-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:2689-1 SUSE-SU-2022:2689-1 — Security update for dpkg 2026-10-02T19:08:17.296056+00:00

Security update for dpkg

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1664 UBUNTU-CVE-2022-1664 2026-10-02T19:08:17.296070+00:00

Affected: Ubuntu:Pro:14.04:LTS: dpkg, Ubuntu:Pro:16.04:LTS: dpkg, Ubuntu:18.04:LTS: dpkg, Ubuntu:20.04:LTS: dpkg, Ubuntu:22.04:LTS: dpkg

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.

 https://cve.radiocsirt.org/vuln/vde-2023-001 VDE-2023-001 — PHOENIX CONTACT: Multiple Vulnerabilities in PLCnext Firmware 2026-10-02T19:08:17.296094+00:00

A new LTS Firmware release fixes known vulnerabilities in used open-source libraries. In addition, the following improvements have been implemented: HMI - Hardening against DoS attacks. - Hardening against memory leak problems in case of network attacks. WBM - Umlauts in the password of the 'User Manager' were not handled correctly. The password rule for upper and lower case was not followed. This could lead to unintentionally weaker passwords.- Hardening of WBM against Cross-Site-Scripting. User Manager - In security notifications 'SecurityToken' was always displayed as '0000000' when creating or modifying users.- Hardening of Trust and Identity Stores.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0932 WID-SEC-W-2022-0932 — dpkg: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-02T19:08:17.296130+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in dpkg ausnutzen, um Dateien zu manipulieren.