[ubuntu/questing-updates] dpkg 1.22.21ubuntu3.2 (Accepted)

Ubuntu Archive Robot ubuntu-archive-robot at lists.canonical.com
Thu May 7 13:58:51 UTC 2026


dpkg (1.22.21ubuntu3.2) questing-security; urgency=medium

  * SECURITY UPDATE: infinite loop uncompressing a zstd-compressed .deb archive
    - lib/dpkg/compress.c: terminate zstd decompression when we have no
      more data.
    - 6610297a62c0780dd0e80b0e302ef64fdcc9d313
    - CVE-2026-2219

Date: 2026-05-06 18:38:12.835653+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/dpkg/1.22.21ubuntu3.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Questing-changes mailing list