https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:09:33.887236+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-11256 bdu:2025-11256 2026-10-04T18:09:34.014183+00:00 bdu:2025-11256 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-04T18:09:34.014223+00:00 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/euvd-2026-333791 EUVD-2026-333791 2026-10-04T18:09:34.014242+00:00 EUVD-2026-333791 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6297 fkie_cve-2025-6297 2026-10-04T18:09:34.014254+00:00

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.

 https://cve.radiocsirt.org/vuln/ghsa-w56q-6jw5-h5xf GHSA-w56q-6jw5-h5xf 2026-10-04T18:09:34.014284+00:00

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15314-1 openSUSE-SU-2025:15314-1 — dpkg-1.22.21-1.1 on GA media 2026-10-04T18:09:34.014302+00:00

dpkg-1.22.21-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:20562-1 SUSE-SU-2025:20562-1 — Security update for dpkg 2026-10-04T18:09:34.014319+00:00

Security update for dpkg

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6297 UBUNTU-CVE-2025-6297 2026-10-04T18:09:34.014334+00:00

Affected: Ubuntu:Pro:14.04:LTS: dpkg, Ubuntu:Pro:16.04:LTS: dpkg, Ubuntu:18.04:LTS: dpkg, Ubuntu:20.04:LTS: dpkg, Ubuntu:22.04:LTS: dpkg, Ubuntu:24.04:LTS: dpkg, Ubuntu:25.10: dpkg

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1445 WID-SEC-W-2025-1445 — dpkg: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T18:09:34.014365+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in dpkg ausnutzen, um Informationen offenzulegen.