Advisories » MGASA-2018-0352

Updated dpkg packages fix security vulnerability

Publication date: 23 Aug 2018
Modification date: 23 Aug 2018
Type: security
Affected Mageia releases : 6

Description

Updated dpkg packages fix security vulnerability:

A flaw was found dpkg which allows an attacker to perform a directory
traversal by extracting with "dpkg-deb --raw-extract" a crafted .deb file
with a /DEBIAN symlink (bdo#879982).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23411
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879982
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/64MG54Q347INMLYDW47XBYZQ3BQCXEXC/

SRPMS

6/core

• dpkg-1.18.25-1.mga6