The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dpkg | Jul 30, 2024 | Apr 13, 2015 |
| Suse | — | Upgrade update-alternativesUpgrade dpkg-develUpgrade dpkg | Dec 18, 2015 | Apr 13, 2015 |
| Ubuntu | — | Upgrade libdpkg-perlUpgrade dpkg-dev | Nov 8, 2024 | Apr 13, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub