CLSA-2025-1760024944

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1760024944.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2025-1760024944
Upstream
Published
2025-10-09T15:49:08Z
Modified
2026-06-04T09:46:45Z
Summary
Fix CVE(s): CVE-2025-6297
Details
  • SECURITY UPDATE: Fix directory cleanup vulnerability
    • dpkg-deb/info.c: Fix cleanup for control member with restricted directories
    • Add treewalk to set proper permissions before removal for non-root users
    • CVE-2025-6297
References

Affected packages

TuxCare:Ubuntu:18.04 / dpkg

Package

Name
dpkg
Purl
pkg:deb/tuxcare/dpkg?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.19.0.5ubuntu2.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1760024944.json"

TuxCare:Ubuntu:18.04 / dpkg-dev

Package

Name
dpkg-dev
Purl
pkg:deb/tuxcare/dpkg-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.19.0.5ubuntu2.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1760024944.json"

TuxCare:Ubuntu:18.04 / dselect

Package

Name
dselect
Purl
pkg:deb/tuxcare/dselect?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.19.0.5ubuntu2.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1760024944.json"

TuxCare:Ubuntu:18.04 / libdpkg-dev

Package

Name
libdpkg-dev
Purl
pkg:deb/tuxcare/libdpkg-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.19.0.5ubuntu2.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1760024944.json"

TuxCare:Ubuntu:18.04 / libdpkg-perl

Package

Name
libdpkg-perl
Purl
pkg:deb/tuxcare/libdpkg-perl?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.19.0.5ubuntu2.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1760024944.json"