Описание
Security update for dpkg
This update for dpkg fixes the following issue:
- CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
Список пакетов
openSUSE Leap 16.0
dpkg-1.22.21-160000.3.1
dpkg-devel-1.22.21-160000.3.1
dpkg-lang-1.22.21-160000.3.1
update-alternatives-1.22.21-160000.3.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1259385
- SUSE CVE CVE-2026-2219 page
Описание
It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU).
Затронутые продукты
openSUSE Leap 16.0:dpkg-1.22.21-160000.3.1
openSUSE Leap 16.0:dpkg-devel-1.22.21-160000.3.1
openSUSE Leap 16.0:dpkg-lang-1.22.21-160000.3.1
openSUSE Leap 16.0:update-alternatives-1.22.21-160000.3.1
Ссылки
- CVE-2026-2219
- SUSE Bug 1259385