[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1118374: trixie-pu: package libsmb2/6.2+dfsg-2+deb13u1



Control: tags -1 + confirmed

On Sat, 2025-10-18 at 16:27 -0300, Matheus Polkorny wrote:
> The reason is to fix CVE-2025-57632 [1], When processing SMB2 chained
> PDUs (NextCommand), libsmb2 repeatedly calls smb2_add_iovector() to
> append to a fixed-size iovec array without checking the upper bound
> of v->niov (SMB2_MAX_VECTORS=256).
> Bug: #1116446

Please go ahead.

Regards,

Adam


Reply to: