CVE:CVE-2015-0840
CNNVD:CNNVD-201504-194
Debian dpkg是美国软件开发者伊恩-默多克（Ian Murdock）所研发的一款Debian软件包管理器。
Debian dpkg 1.16.16之前版本和1.17.25之前1.17.x版本的dpkg-source命令中存在安全漏洞。远程攻击者可借助特制的Debian源控制文件（.dsc）利用该漏洞绕过签名验证。
solution:Upgrade debian dpkg to a higher version than 1.16.15,1.17.0,1.17.1,1.17.2,1.17.3,1.17.4,1.17.5,1.17.6,1.17.7,1.17.8,1.17.9,1.17.10,1.17.11,1.17.12,1.17.13,1.17.14,1.17.15,1.17.16,1.17.17,1.17.18,1.17.19,1.17.20,1.17.21,1.17.22,1.17.23,1.17.24,and avoid the version (,1.16.15],1.17.0,1.17.1,1.17.2,1.17.3,1.17.4,1.17.5,1.17.6,1.17.7,1.17.8,1.17.9,1.17.10,1.17.11,1.17.12,1.17.13,1.17.14,1.17.15,1.17.16,1.17.17,1.17.18,1.17.19,1.17.20,1.17.21,1.17.22,1.17.23,1.17.24; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,and avoid the version 10.04,12.04,14.04,14.10