CVE-2022-1664
directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- Record
CVE-2022-1664- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- Record
CVE-2022-1664- Updated
- 2026-11-02
EUVDEUVD-2022-24950 No score
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- Record
EUVD-2022-24950- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q7pv-fjh6-6xq6
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20...
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- Record
GHSA-q7pv-fjh6-6xq6- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-1664
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- Record
ALPINE-CVE-2022-1664- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-9853
CVE-2022-1664 affecting package dpkg for versions less than 1.20.10-1
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- Record
AZL-9853- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSVDEBIAN-CVE-2022-1664
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- Record
DEBIAN-CVE-2022-1664- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVOESA-2022-1703
dpkg security update
Dpkg is a tool to install, build, remove and manageDebian packages. The primary and more user-friendly front-end for dpkg is aptitude.
Security Fix(es):
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.(CVE-2022-1664)
- Record
OESA-2022-1703- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-1664
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- Record
UBUNTU-CVE-2022-1664- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2022-1654717100 No score
Fix CVE(s): CVE-2022-1664
- SECURITY UPDATE: Directory traversal issue in dpkg-source
- scripts/Dpkg/Source/Archive.pm: Prevent directory traversal for in-place extracts.
- CVE-2022-1664
- Record
CLSA-2022-1654717100- Updated
- 2026-11-02
OSV No score
directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- Record
CVE-2022-1664- Updated
- 2026-11-02
OSVMGASA-2022-0327 No score
Updated dpkg packages fix security vulnerability
A malicious source package could write files outside the unpack directory. (CVE-2022-1664)
- Record
MGASA-2022-0327- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12110-1 No score
dpkg-1.21.8-1.1 on GA media
These are all security issues fixed in the dpkg-1.21.8-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12110-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2689-1 No score
Security update for dpkg
This update for dpkg fixes the following issues:
- CVE-2022-1664: Fixed directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944).
- Record
SUSE-SU-2022:2689-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:4081-1 No score
Security update for dpkg
This update for dpkg fixes the following issues:
- CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944).
- Record
SUSE-SU-2022:4081-1- Updated
- 2026-11-02
OSVUSN-5446-1 No score
dpkg vulnerability
Max Justicz discovered that dpkg incorrectly handled unpacking certain source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system.
- Record
USN-5446-1- Updated
- 2026-11-02
OSVUSN-5446-2 No score
dpkg vulnerability
USN-5446-1 fixed a vulnerability in dpkg. This update provides the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Max Justicz discovered that dpkg incorrectly handled unpacking certain source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system.
- Record
USN-5446-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dpkgAlpine:v3.13 |
1.14.17 up to 1.20.10-r0 | 1.20.10-r0 |
dpkgAlpine:v3.14 |
1.14.17 up to 1.20.10-r0 | 1.20.10-r0 |
dpkgAlpine:v3.15 |
1.14.17 up to 1.20.10-r0 | 1.20.10-r0 |
dpkgAlpine:v3.16 |
1.14.17 up to 1.21.8-r0 | 1.21.8-r0 |
dpkgAlpine:v3.17 |
1.14.17 up to 1.21.8-r0 | 1.21.8-r0 |
dpkgAlpine:v3.18 |
1.14.17 up to 1.21.8-r0 | 1.21.8-r0 |
dpkgAlpine:v3.19 |
1.14.17 up to 1.21.8-r0 | 1.21.8-r0 |
dpkgAlpine:v3.20 |
1.14.17 up to 1.21.8-r0 | 1.21.8-r0 |
dpkgAlpine:v3.21 |
1.14.17 up to 1.21.8-r0 | 1.21.8-r0 |
dpkgAlpine:v3.22 |
1.14.17 up to 1.21.8-r0 | 1.21.8-r0 |
Show 76 moreShow less
| Package | Affected | Fixed |
|---|---|---|
dpkgAlpine:v3.23 |
1.14.17 up to 1.21.8-r0 | 1.21.8-r0 |
dpkgAlpine:v3.24 |
1.14.17 up to 1.21.8-r0 | 1.21.8-r0 |
dpkgAzure Linux:2 |
before 1.20.10-1 | 1.20.10-1 |
dpkgTuxCare:Ubuntu:16.04 |
before 1.18.4ubuntu1.7+tuxcare.els1 | 1.18.4ubuntu1.7+tuxcare.els1 |
dpkg-devTuxCare:Ubuntu:16.04 |
before 1.18.4ubuntu1.7+tuxcare.els1 | 1.18.4ubuntu1.7+tuxcare.els1 |
dselectTuxCare:Ubuntu:16.04 |
before 1.18.4ubuntu1.7+tuxcare.els1 | 1.18.4ubuntu1.7+tuxcare.els1 |
libdpkg-devTuxCare:Ubuntu:16.04 |
before 1.18.4ubuntu1.7+tuxcare.els1 | 1.18.4ubuntu1.7+tuxcare.els1 |
libdpkg-perlTuxCare:Ubuntu:16.04 |
before 1.18.4ubuntu1.7+tuxcare.els1 | 1.18.4ubuntu1.7+tuxcare.els1 |
dpkgDebian:12 |
before 1.21.8 | 1.21.8 |
dpkgDebian:13 |
before 1.21.8 | 1.21.8 |
dpkgDebian:14 |
before 1.21.8 | 1.21.8 |
dpkgDebian:9 |
before 1.18.26, plus listed versions 1.18.241.18.25 |
1.18.26 |
dpkgDebian:10 |
before 1.19.8, plus listed versions 1.19.7 |
1.19.8 |
dpkgDebian:11 |
before 1.20.10, plus listed versions 1.20.9 |
1.20.10 |
dpkgMageia:8 |
before 1.20.10-3.mga8 | 1.20.10-3.mga8 |
dpkgopenEuler:20.03-LTS-SP1 |
before 1.18.25-11.oe1 | 1.18.25-11.oe1 |
dpkgopenEuler:20.03-LTS-SP3 |
before 1.18.25-11.oe1 | 1.18.25-11.oe1 |
dpkgopenEuler:22.03-LTS |
before 1.18.25-11.oe2203 | 1.18.25-11.oe2203 |
update-alternativesSUSE:Linux Enterprise Server 12 SP5 |
before 1.18.4-16.3.5 | 1.18.4-16.3.5 |
update-alternativesSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.18.4-16.3.5 | 1.18.4-16.3.5 |
update-alternativesSUSE:Linux Enterprise Micro 5.3 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Module for Development Tools 15 SP3 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Module for Development Tools 15 SP4 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Server 15-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Server 15-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Server 15 SP1-BCL |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Server 15 SP1-BCL |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Server 15 SP2-BCL |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Server 15 SP2-BCL |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Server for SAP Applications 15 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Server for SAP Applications 15 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Manager Proxy 4.1 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Manager Proxy 4.1 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Manager Retail Branch Server 4.1 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Manager Retail Branch Server 4.1 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Manager Server 4.1 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Manager Server 4.1 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Micro 5.1 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Linux Enterprise Micro 5.2 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Enterprise Storage 6 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Enterprise Storage 6 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgSUSE:Enterprise Storage 7 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesSUSE:Enterprise Storage 7 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesopenSUSE:Leap Micro 5.2 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesopenSUSE:Leap Micro 5.3 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgopenSUSE:Leap 15.3 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesopenSUSE:Leap 15.3 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgopenSUSE:Leap 15.4 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
update-alternativesopenSUSE:Leap 15.4 |
before 1.19.0.4-150000.4.4.1 | 1.19.0.4-150000.4.4.1 |
dpkgUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.16.12ubuntu11.17.1ubuntu11.17.5ubuntu11.17.5ubuntu21.17.5ubuntu3 Show 11 moreShow less1.17.5ubuntu41.17.5ubuntu51.17.5ubuntu5.11.17.5ubuntu5.21.17.5ubuntu5.31.17.5ubuntu5.41.17.5ubuntu5.51.17.5ubuntu5.61.17.5ubuntu5.71.17.5ubuntu5.81.17.5ubuntu5.8+esm1 |
None known |
dpkgUbuntu:Pro:16.04:LTS |
before 1.18.4ubuntu1.7+esm1, plus listed versions 1.18.2ubuntu51.18.3ubuntu11.18.4ubuntu11.18.4ubuntu1.11.18.4ubuntu1.2 Show 5 moreShow less1.18.4ubuntu1.31.18.4ubuntu1.41.18.4ubuntu1.51.18.4ubuntu1.61.18.4ubuntu1.7 |
1.18.4ubuntu1.7+esm1 |
dpkgUbuntu:18.04:LTS |
before 1.19.0.5ubuntu2.4, plus listed versions 1.18.24ubuntu11.19.0.4ubuntu11.19.0.5ubuntu11.19.0.5ubuntu21.19.0.5ubuntu2.11.19.0.5ubuntu2.21.19.0.5ubuntu2.3 |
1.19.0.5ubuntu2.4 |
dpkgUbuntu:20.04:LTS |
before 1.19.7ubuntu3.2, plus listed versions 1.19.7ubuntu21.19.7ubuntu3 |
1.19.7ubuntu3.2 |
dpkgUbuntu:22.04:LTS |
before 1.21.1ubuntu2.1, plus listed versions 1.20.9ubuntu21.20.9ubuntu31.21.1ubuntu11.21.1ubuntu2 |
1.21.1ubuntu2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-1664 is a critical vulnerability (CVSS 9.8) in Debian Dpkg, published May 25, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.24%, the 88th percentile. Fixed in dpkg 1.20.10-r0.
References
git.dpkg.org/cgit/dpkg/dpkg.git/commit?id=7a6c03cb34d4a09f35df2f10779cbf1b70a5200b
lists.debian.org/debian-security-announce/2022/msg00115.html
Show 19 moreShow less
security.netapp.com/advisory/ntap-20221007-0002
nvd.nist.gov/vuln/detail/CVE-2022-1664
github.com/advisories/GHSA-q7pv-fjh6-6xq6
security.alpinelinux.org/vuln/CVE-2022-1664
errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1654717100
security-tracker.debian.org/tracker/CVE-2022-1664
advisories.mageia.org/MGASA-2022-0327.html
bugs.mageia.org/show_bug.cgi?id=30481
debian.org/security/2022/dsa-5147
ubuntu.com/security/notices/USN-5446-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1703
suse.com/support/update/announcement/2022/suse-su-20222689-1
bugzilla.suse.com/1199944
cve.org/CVERecord?id=CVE-2022-1664