-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Jan 2022 16:13:58 +0100 Source: uriparser Architecture: source Version: 0.9.4+dfsg-1+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Jörg Frings-Fürst <debian@jff.email> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: uriparser (0.9.4+dfsg-1+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * UriNormalize.c: Fix .hostText copying in uriMakeOwnerEngine (CVE-2021-46141) * UriParse.c: Adjust uriFreeUriMembers* to fixed uriMakeOwner* behavior (CVE-2021-46141) * UriNormalize.c: Fix handling of empty segments in uriPreventLeakage (CVE-2021-46142) Checksums-Sha1: 04c21fd753ba64c2243934b565885f28f90864de 2292 uriparser_0.9.4+dfsg-1+deb11u1.dsc 12dc50e18875cfbbb962007f5b251fcd65eab1bb 86020 uriparser_0.9.4+dfsg.orig.tar.xz c353e92b4019c90c6723f6359f0498c3282bf13c 8844 uriparser_0.9.4+dfsg-1+deb11u1.debian.tar.xz Checksums-Sha256: 900b587b2481f13775752b0d8e8fbef2ab56a1de828ff0fb7382352a78be4669 2292 uriparser_0.9.4+dfsg-1+deb11u1.dsc 3558e9fce140f3587fe29bb3c7911dcc0c2abd32d34025f7d50b54e4469f4c37 86020 uriparser_0.9.4+dfsg.orig.tar.xz 07008ff298414e56f2130f30342f6b144d27ae17f0974d36ac4f0e571d247485 8844 uriparser_0.9.4+dfsg-1+deb11u1.debian.tar.xz Files: 743e45c075322de0e588034ede091a5a 2292 libs optional uriparser_0.9.4+dfsg-1+deb11u1.dsc 966be1a0dcde5c09fda1b298598bc30c 86020 libs optional uriparser_0.9.4+dfsg.orig.tar.xz 2ec7b582aa7e7a528bc73d5dea66590d 8844 libs optional uriparser_0.9.4+dfsg-1+deb11u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmHtmf1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EfbsP/14esqu187pVBK241G1jG/RdU4P3+goD SuOy0XEY5YfX6LSv4a5FOFv5eBpK4f2cAHmVQFX6jKTTUFTZZxpXdE5vvs92W68A xi7L3l26WOrHAv92hQmvxXUiMPYh78sZMKG0TROZUQeg9yMCAxvoSDQHZxdaO5/z 2dFZklnuGhOl1JNv66o+H+AbsgznpgxviIFOIq/gxmnDlDQ/DGDcuc9YEuDqgNtI app7rRukByLZ+7f8ZyqD/jK5Gy1RxvxrZWwfCKaFeTck7/W3YA+SpE2Fypk2CHON i+h0qqN26YyRZPH6BvOOwrS81dNzoJDnRYPPidJGCOmlh1cc8tyFsuMdeHkiXh9S L/zr1FXOcBQSzHkZVbOlZffMfcYgFJATaRHUhSbYYWoJ4JrjytdfPYuTjySnlTtk PNkK6uXdS0qiixbvwllUbLWesPxAqCdjmLiq11eZSG3yVNHqJWm0TWK6VehgmcVw +q6F7NkHksaUR5o8YVkpEPOzVcnsOTKkX6oKzTXvv0G9E9Vew4OeckCACELQM+Cv Qgm9hu4TZOQDoF5F+TzTgfGB9ZSkTvuQKRdsssa0FFOrcqnXDjqq6Ws7SQdjyxGq wcUEBdxg2S6dob6vuDNqgoFLUW7iMOsolUKi9NvgoDGHZg785fIYLr2i4dDEceWd GCf/6QEe/pIe =Umld -----END PGP SIGNATURE-----