rpm package
suse/update-alternatives&distro=SUSE Linux Enterprise Server 16.0
pkg:rpm/suse/update-alternatives&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-2219 | Hig | 7.5 | < 1.22.21-160000.3.1 | 1.22.21-160000.3.1 | Mar 7, 2026 | It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU). |
- affected < 1.22.21-160000.3.1fixed 1.22.21-160000.3.1
It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU).