Vulnerability Bulletins

DSA-3407 dpkg - security update

   
Affected software Debian
 
Hanno Boeck discovered a stack-based buffer overflow in the dpkg-debcomponent of dpkg, the Debian package management system. This flaw couldpotentially lead to arbitrary code execution if a user or an automatedsystem were tricked into processing a specially crafted Debian binarypackage (.deb) in the old style Debian binary package format.

More info:

https://www.debian.org/security/2015/dsa-3407