> USN-8249-1: dpkg vulnerability
[DATE: 07/05/2026 13:16]
[LANGUAGE: EN]
Yashashree Gund discovered that the dpkg dpkg-deb tool incorrectly handled
certain zstd-compressed .deb archives. If a user or automated system were
tricked into manipulating a specially crafted .deb archive, a remote
attacker could possibly use this issue to cause dpkg-deb to stop
responding, resulting in a denial of service.