Most recent entries from all

bdu:2022-05892

EUVD-2026-181576

fkie_cve-2022-1664

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.

GHSA-q7pv-fjh6-6xq6

gsd-2022-1664

msrc_CVE-2022-1664 — directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar

msrc_CVE-2022-1664

OESA-2022-1703 — dpkg security update

Affected: openEuler:20.03-LTS-SP1: dpkg, openEuler:20.03-LTS-SP3: dpkg, openEuler:22.03-LTS: dpkg

Dpkg is a tool to install, build, remove and manageDebian packages. The primary and more user-friendly front-end for dpkg is aptitude. Security Fix(es): Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.(CVE-2022-1664)

openSUSE-SU-2024:12110-1 — dpkg-1.21.8-1.1 on GA media

dpkg-1.21.8-1.1 on GA media

SUSE-SU-2022:2689-1 — Security update for dpkg

Security update for dpkg

UBUNTU-CVE-2022-1664

Affected: Ubuntu:Pro:14.04:LTS: dpkg, Ubuntu:Pro:16.04:LTS: dpkg, Ubuntu:18.04:LTS: dpkg, Ubuntu:20.04:LTS: dpkg, Ubuntu:22.04:LTS: dpkg

VDE-2023-001 — PHOENIX CONTACT: Multiple Vulnerabilities in PLCnext Firmware

A new LTS Firmware release fixes known vulnerabilities in used open-source libraries. In addition, the following improvements have been implemented: HMI - Hardening against DoS attacks. - Hardening against memory leak problems in case of network attacks. WBM - Umlauts in the password of the 'User Manager' were not handled correctly. The password rule for upper and lower case was not followed. This could lead to unintentionally weaker passwords.- Hardening of WBM against Cross-Site-Scripting. User Manager - In security notifications 'SecurityToken' was always displayed as '0000000' when creating or modifying users.- Hardening of Trust and Identity Stores.

WID-SEC-W-2022-0932 — dpkg: Schwachstelle ermöglicht Manipulation von Dateien

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in dpkg ausnutzen, um Dateien zu manipulieren.