GCVE-110-MAGEIA-2026-144

Advisory Published

Vulnetix · Advisory published May 16, 2026

It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	dpkg	0 (affected), 1.22.22-1.mga9 (unaffected)	—

References

Updated dpkg packages fix security vulnerabilities

advisory

Updated dpkg packages fix security vulnerabilities

issue

Updated dpkg packages fix security vulnerabilities

url

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON