-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2142-1                   security@debian.org
http://www.debian.org/security/                          Raphael Geissert
January 06, 2011                       http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : dpkg
Vulnerability  : directory traversal
Problem type   : local
Debian-specific: no
CVE ID         : CVE-2010-1679

Jakub Wilk discovered that the dpkg-source component of dpkg, the Debian
package management system, doesn't correctly handle paths in patches of
source packages, which could make it traverse directories.
Rapha