Mageia 2022-0327: dpkg security update
Summary
A malicious source package could write files outside the unpack directory.
(CVE-2022-1664)
References
- https://bugs.mageia.org/show_bug.cgi?id=30481
- https://www.debian.org/security/2022/dsa-5147
- https://ubuntu.com/security/notices/USN-5446-1
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1664
Resolution
MGASA-2022-0327 - Updated dpkg packages fix security vulnerability
SRPMS
- 8/core/dpkg-1.20.10-3.mga8