CVE-2010-1679

Publication date 6 January 2011

Last updated 24 July 2024

Ubuntu priority

Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
dpkg	10.10 maverick	Fixed 1.15.8.4ubuntu3.1
	10.04 LTS lucid	Fixed 1.15.5.6ubuntu4.5
	9.10 karmic	Fixed 1.15.4ubuntu2.3
	8.04 LTS hardy	Not affected
	6.06 LTS dapper	Not affected

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-1038-1
dpkg vulnerability
6 January 2011

Other references

https://www.cve.org/CVERecord?id=CVE-2010-1679