rpm package
suse/update-alternatives&distro=SUSE Linux Enterprise Micro 5.2
pkg:rpm/suse/update-alternatives&distro=SUSE%20Linux%20Enterprise%20Micro%205.2
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-6297 | — | < 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 | Jul 1, 2025 | It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given | ||
| CVE-2022-1664 | — | < 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 | May 26, 2022 | Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-pl |
- CVE-2025-6297Jul 1, 2025affected < 1.19.0.4-150000.4.7.1fixed 1.19.0.4-150000.4.7.1
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given
- CVE-2022-1664May 26, 2022affected < 1.19.0.4-150000.4.4.1fixed 1.19.0.4-150000.4.4.1
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-pl