Accepted libslirp 4.4.0-1+deb11u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 30 Sep 2021 21:08:51 +0300
Source: libslirp
Architecture: source
Version: 4.4.0-1+deb11u1
Distribution: bullseye
Urgency: medium
Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Closes: 989993 989994 989995 989996
Changes:
libslirp (4.4.0-1+deb11u1) bullseye; urgency=medium
.
* import a few patches from upstream to fix 4 security issues:
- add-mtod_check.patch (preparational)
- bootp-limit-vendor-area-to-input-packet-CVE-2021-3592.patch,
bootp-check-bootp_input-buffer-size-CVE-2021-3592.patch
Closes: #989993, CVE-2021-3592: invalid pointer init in bootp_init()
- tftp-check-tftp_input-buffer-size-CVE-2021-3595.patch,
tftp-introduce-a-header-structure-CVE-2021-3595.patch
Closes: #989996, CVE-2021-3595: invalid pointer init in tftp_input()
- udp-check-upd_input-buffer-size-CVE-2021-3594.patch
Closes: #989995, CVE-2021-3594: invalid pointer init in udp_input()
- upd6-check-udp6_input-buffer-size-CVE-2021-3593.patch
Closes: #989994, CVE-2021-3593: invalid pointer init in udp6_input()
Checksums-Sha1:
85d70f8a76cf1cd76f26120e5bc2395fe36b278b 1721 libslirp_4.4.0-1+deb11u1.dsc
6f6585a6a2d28b5ba71a597dd5b524d03c4fb69e 8428 libslirp_4.4.0-1+deb11u1.debian.tar.xz
95f423f3ec14a779b4e778aecdcf9eed9fcd3e3b 6982 libslirp_4.4.0-1+deb11u1_source.buildinfo
Checksums-Sha256:
0c230ef42fb1e861caf601be0aa576f25e5308da669f25aea3265f7c152edb35 1721 libslirp_4.4.0-1+deb11u1.dsc
714c3f00be2ea9524329d6d7d1411399999493255d779297a4ecd0025b2e5270 8428 libslirp_4.4.0-1+deb11u1.debian.tar.xz
e39e65b58be64e6e7b7d238b2f55ebe764286c24c84b5cd1c2e96d96d2462757 6982 libslirp_4.4.0-1+deb11u1_source.buildinfo
Files:
ec5bf1811b2bdf42e11229c6132725b0 1721 net optional libslirp_4.4.0-1+deb11u1.dsc
a119327bf2ae6e739683477899e68b6a 8428 net optional libslirp_4.4.0-1+deb11u1.debian.tar.xz
478769e019ab1a805298549fadc96992 6982 net optional libslirp_4.4.0-1+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmFW1OwPHG1qdEB0bHMu
bXNrLnJ1AAoJEHAbT2saaT5ZEdAIAIFVrfF6s0liI4y5O6PjQDQfGz9ycZ2mlkLv
lD7hkv7JU6Q7kmLNF6Gk7hoJnkYfhrjOS2uhCikP5OIFQ9Kmm6sz2X9x5wak/mDB
LrYM3hmIWdc7XOfwOPJEjaknAshWHTnHdruko+lRGGjb6EW0vLrVhJtrKfGSySP1
Oga5XG8hJd6l1Lp4CtBkxBc+g0c2K6We/EzdoRSlfrli9RbV/URiXt/7fcDKDn6M
uDzgbWof1cIIlz4ZDyPd10p4BPD+tmK0vscF1QcVGmR35E96u5+Eqv8mUwOOmHMi
QOl18GeFyKzsZS2+diOC47mSfBcbAY9boUHdQBV3n17a1EvdAy0=
=EA/9
-----END PGP SIGNATURE-----
Reply to: