UbuntuUpdates.org

Package "openslp-dfsg"

Name: openslp-dfsg

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • OpenSLP Server (slpd)
  • SLP command line tool

Latest version: 1.2.1-7.8ubuntu1.1
Release: precise (12.04)
Level: updates
Repository: universe

Links



Other versions of "openslp-dfsg" in Precise

Repository Area Version
base universe 1.2.1-7.8ubuntu1
base main 1.2.1-7.8ubuntu1
security main 1.2.1-7.8ubuntu1.1
security universe 1.2.1-7.8ubuntu1.1
updates main 1.2.1-7.8ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.2.1-7.8ubuntu1.1 2015-09-03 18:12:27 UTC

  openslp-dfsg (1.2.1-7.8ubuntu1.1) precise-security; urgency=medium

  * SECURITY UPDATE: denial of service via out-of-bounds buffer access
    - debian/patches/CVE-2012-4428.patch: fix handling of string-list in
      common/slp_compare.c
    - CVE-2012-4428
  * SECURITY UPDATE: denial of service via double free flaw
    - debian/patches/CVE-2015-5177.patch: fix double free if
      SLPDKnownDAAdd() fails in slpd/slpd_knownda.c.
    - CVE-2015-5177

 -- Marc Deslauriers Fri, 28 Aug 2015 15:55:17 -0400

CVE-2015-5177 double free in SLPDProcessMessage()



About   -   Send Feedback to @ubuntu_updates