Accepted connman 1.33-3+deb9u3 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 08 Feb 2022 10:06:16 +0100
Source: connman
Architecture: source
Version: 1.33-3+deb9u3
Distribution: stretch-security
Urgency: medium
Maintainer: Alexander Sack <asac@debian.org>
Changed-By: Emilio Pozuelo Monfort <pochu@debian.org>
Changes:
connman (1.33-3+deb9u3) stretch-security; urgency=medium
.
* Non-maintainer upload by the LTS team.
* CVE-2021-33833: stack-based buffer overflow in dnsproxy.
* CVE-2022-23096: buffer over-read in forward_dns_reply.
* CVE-2022-23097: buffer over-read in forward_dns_reply.
* CVE-2022-23098: infinite loop in dnsproxy.
Checksums-Sha1:
45e3c8ca76a04b02848d54221186c538aedd79bc 2362 connman_1.33-3+deb9u3.dsc
cd5fa114a3148f74953c5722022d36bb97e8d14a 958059 connman_1.33.orig.tar.gz
9473e17ac3b4fc9d3f33603c9455ccb35dcd96ab 17652 connman_1.33-3+deb9u3.debian.tar.xz
8156960c6175cc6469d2255196ab3b6a93bfc0e4 6955 connman_1.33-3+deb9u3_source.buildinfo
Checksums-Sha256:
be23ab1cfbe4bb894c9534558d0dc82c7eba1f48696836ea4ca65ad16c214d28 2362 connman_1.33-3+deb9u3.dsc
5a9abae1573fa367269df8bd92792de407fd15c7ac6c1448d07a24a5d6b5b831 958059 connman_1.33.orig.tar.gz
d3ef07919375943e85d215c696d40899572dfb4fa4ab861d5a20481fa7623471 17652 connman_1.33-3+deb9u3.debian.tar.xz
4538cd9e56e930f987792aec255893ed7fbb305449ae23805e011128c7a6fac6 6955 connman_1.33-3+deb9u3_source.buildinfo
Files:
0f51ef1f60f615eb685c9c8288ff3ed7 2362 net optional connman_1.33-3+deb9u3.dsc
48d3e878d31efd4854fc9b66e29622c1 958059 net optional connman_1.33.orig.tar.gz
624d881f3ab9bce1f5b917207ba41b7a 17652 net optional connman_1.33-3+deb9u3.debian.tar.xz
b7f18994aeaec358aac48506aa170679 6955 net optional connman_1.33-3+deb9u3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=nGpL
-----END PGP SIGNATURE-----
Reply to: