File _patchinfo of Package patchinfo.3828

<patchinfo incident="3828">
  <issue id="926749" tracker="bnc">VUL-1: CVE-2015-0840: dpkg: source package integrity verification bypass</issue>
  <issue id="CVE-2015-0840" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>scarabeus_iv</packager>
  <description>dpkg and update-alternatives were updated to 1.16.16 to fix one security issue and severan non-security bugs.

The following vulnerabilities were fixed:

* CVE-2015-0840: Specially crafted deb packages could have been used to bypass source package integrity verification in local installs (boo#926749)

Also contains a number of upstream bugs and improvements.
</description>
  <summary>Security update for dpkg, update-alternatives</summary>
</patchinfo>