Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 528
Alerts This Week
Warning Icon 1 528

Fedora 24: FEDORA-2016-5608472a90 Critical: Dpkg Stack Overflow Issue

fedora
Calendar Grey December 6, 2016
Scroller Fedora Esm H88
Keep yourself updated regarding the latest Fedora 24 dpkg security patch tackling a severe stack overflow vulnerability in the application.
New upstream vesion, 1.17.27

Summary

This package contains the tools (including dpkg-source) required

to unpack, build and upload Debian source packages.

This package also contains the programs dpkg which used to handle the

installation and removal of packages on a Debian system.

This package also contains dselect, an interface for managing the

installation and removal of packages on the system.

dpkg and dselect will certainly be non-functional on a rpm-based system

because packages dependencies will likely be unmet.

Update Information:

New upstream vesion, 1.17.27 . Security fix for CVE-2015-0860

Topics%20covered

Topics Covered

security advisory critical software update Fedora stack overflow dpkg

Change Log

References


[ 1 ] Bug #1286011 - CVE-2015-0860 dpkg: stack overflows and out of bounds read https://bugzilla.redhat.com/show_bug.cgi?id=1286011

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade dpkg' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: dpkg
Product: Fedora 24
Version: 1.17.27
Release: 1.fc24
URL: https://tracker.debian.org/pkg/dpkg
Summary: Package maintenance system for Debian Linux

Topics%20covered

Topics Covered

security advisory critical software update Fedora stack overflow dpkg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.