diff options
| author | Thorsten Alteholz <debian@alteholz.de> | 2019-03-05 10:06:26 +0100 |
|---|---|---|
| committer | Thorsten Alteholz <debian@alteholz.de> | 2019-03-05 10:06:26 +0100 |
| commit | 3cd763726d8cdd17248f0dfda113d90a47c5d737 (patch) | |
| tree | 85874c1977d374dfb138ac3e870b77d5a2f7c5a4 | |
| parent | 3f80ac827bcf1b8709077a8eddadc49b3adf10b2 (diff) | |
DLA-1682-1 advisory
| -rw-r--r-- | english/lts/security/2019/dla-1682.data | 10 | ||||
| -rw-r--r-- | english/lts/security/2019/dla-1682.wml | 25 |
2 files changed, 35 insertions, 0 deletions
diff --git a/english/lts/security/2019/dla-1682.data b/english/lts/security/2019/dla-1682.data new file mode 100644 index 00000000000..ca622c402b6 --- /dev/null +++ b/english/lts/security/2019/dla-1682.data @@ -0,0 +1,10 @@ +<define-tag pagetitle>DLA-1682-1 uriparser</define-tag> +<define-tag report_date>2019-2-18</define-tag> +<define-tag secrefs>CVE-2018-20721</define-tag> +<define-tag packages>uriparser</define-tag> +<define-tag isvulnerable>yes</define-tag> +<define-tag fixed>yes</define-tag> +<define-tag fixed-section>no</define-tag> + +#use wml::debian::security + diff --git a/english/lts/security/2019/dla-1682.wml b/english/lts/security/2019/dla-1682.wml new file mode 100644 index 00000000000..fa6d494e6bf --- /dev/null +++ b/english/lts/security/2019/dla-1682.wml @@ -0,0 +1,25 @@ +<define-tag description>LTS security update</define-tag> +<define-tag moreinfo> + +<p></pre><tt>Joergen Ibsen reported an issue with uriparser, a URI parsing library +</tt><tt>compliant with RFC 3986. +</tt><pre style="margin: 0em;"></p> + +<p></pre><tt>An Out-of-bounds read for incomplete URIs with IPv6 addresses with +</tt><tt>embedded IPv4 address, e.g. "//[::44.1", were possible. +</tt><pre style="margin: 0em;"></p> + + +<p>For Debian 8 "Jessie", this problem has been fixed in version +0.8.0.1-2+deb8u2.</p> + +<p>We recommend that you upgrade your uriparser packages.</p> + +<p>Further information about Debian LTS security advisories, how to apply +these updates to your system and frequently asked questions can be +found at: <a rel="nofollow" href="https://wiki.debian.org/LTS">https://wiki.debian.org/LTS</a></p> +</define-tag> + +# do not modify the following line +#include "$(ENGLISHDIR)/lts/security/2019/dla-1682.data" +# $Id: $ |