[ubuntu/questing-updates] dpkg 1.22.21ubuntu3.2 (Accepted)
Ubuntu Archive Robot
ubuntu-archive-robot at lists.canonical.com
Thu May 7 13:58:51 UTC 2026
dpkg (1.22.21ubuntu3.2) questing-security; urgency=medium
* SECURITY UPDATE: infinite loop uncompressing a zstd-compressed .deb archive
- lib/dpkg/compress.c: terminate zstd decompression when we have no
more data.
- 6610297a62c0780dd0e80b0e302ef64fdcc9d313
- CVE-2026-2219
Date: 2026-05-06 18:38:12.835653+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/dpkg/1.22.21ubuntu3.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the Questing-changes
mailing list