https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:07:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11256 bdu:2025-11256 https://cve.radiocsirt.org/vuln/bdu:2025-11256 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/euvd-2026-333791 EUVD-2026-333791 https://cve.radiocsirt.org/vuln/euvd-2026-333791 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6297 <p>It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.</p> <p>It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6297 https://cve.radiocsirt.org/vuln/ghsa-w56q-6jw5-h5xf <p>It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.</p> <p>It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.</p> https://cve.radiocsirt.org/vuln/ghsa-w56q-6jw5-h5xf https://cve.radiocsirt.org/vuln/opensuse-su-2025:15314-1 <p>dpkg-1.22.21-1.1 on GA media</p> <p>dpkg-1.22.21-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15314-1 https://cve.radiocsirt.org/vuln/suse-su-2025:20562-1 <p>Security update for dpkg</p> <p>Security update for dpkg</p> https://cve.radiocsirt.org/vuln/suse-su-2025:20562-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6297 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: dpkg, Ubuntu:Pro:16.04:LTS: dpkg, Ubuntu:18.04:LTS: dpkg, Ubuntu:20.04:LTS: dpkg, Ubuntu:22.04:LTS: dpkg, Ubuntu:24.04:LTS: dpkg, Ubuntu:25.10: dpkg</p> <p>It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: dpkg, Ubuntu:Pro:16.04:LTS: dpkg, Ubuntu:18.04:LTS: dpkg, Ubuntu:20.04:LTS: dpkg, Ubuntu:22.04:LTS: dpkg, Ubuntu:24.04:LTS: dpkg, Ubuntu:25.10: dpkg</p> <p>It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6297 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1445 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in dpkg ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in dpkg ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1445