Support WITHOUT_NLSbf26c28e8c
dpkg -- stack-based buffer overflowentered 2015-12-25
Port details
archivers/dpkg1.19.8_1
Debian package maintenance system
- Maintainer
- ndowens04@gmail.com
- Packages
- dpkg 1.19.8_1
- Upstream
- Higher version available: 1.23.11
- CPE
debian:dpkgfrom the port- WWW
- https://packages.debian.org/dpkg
- Links
- cgit · VuXML
Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE
| CVE-2025-6297 | 8.2 | 2025-07-01 | It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as bein… |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (1)
Show 1 fixed
VuXML entries whose affected range this version has left.
Commits (110)
- Use USE_ICONV knob Approved by: portmgr4efa9ce4ab
Add SIZE data. Submitted by: trevor4fada1630a
Whoa there, boy, that's a mighty big commit y'all have there...
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.3f651573adRename a file with % in its name for perforce users. Requested by: Mark Santcroos <marks@ripe.net>56dcad903f
Add USE_GETTEXT and bump PORTREVISION. Submitted by: trevor Tested by: bento186b8ba82f
Now gettext 0.12.1 is gettext-old.78da40aa98
Bump the PORTREVISION for the ports directly affected by the gettext upgrade. Prodded by: krisa3108b1e51
Chase the libintl.so shared lib version.adccc29aad
Add dpkg 1.9.21, the debian package manager.3eb2493314