Ubuntu Security Notice 2566-1 - Jann Horn discovered that dpkg incorrectly validated signatures when extracting local source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could bypass signature verification checks.
6cf9f3e41298a6212ac8a4bcd8c602d537ac9410e0524b541502765d10e1b336