CVE-2015-0840
Publication date 9 April 2015
Last updated 24 July 2024
Ubuntu priority
Description
The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| dpkg | ||
| 14.04 LTS trusty |
Fixed in 1.17.5ubuntu5.4
|
|
References
Related Ubuntu Security Notices (USN)
- USN-2566-1
- dpkg vulnerability
- 9 April 2015