-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 23 Jan 2022 17:07:26 +0100
Source: uriparser
Architecture: source
Version: 0.9.1-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Jörg Frings-Fürst <debian@jff.email>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
uriparser (0.9.1-1+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* UriNormalize.c: Fix .hostText copying in uriMakeOwnerEngine
(CVE-2021-46141)
* UriParse.c: Adjust uriFreeUriMembers* to fixed uriMakeOwner* behavior
(CVE-2021-46141)
* UriNormalize.c: Fix handling of empty segments in uriPreventLeakage
(CVE-2021-46142)
Checksums-Sha1:
3a18d8bf75ec048d51aa2c1b34bb80d9b6c5d8c9 2258 uriparser_0.9.1-1+deb10u1.dsc
35b0f326bad6749c6a08da854e8ad0638d2fd198 372722 uriparser_0.9.1.orig.tar.bz2
bd9b2fec845ebf1c632160c5f019af518c9d04ca 8328 uriparser_0.9.1-1+deb10u1.debian.tar.xz
Checksums-Sha256:
59371fa82d1d0e9b418897fdb45be805270b2e5d6c9f0c2928d1ff2bd65873e0 2258 uriparser_0.9.1-1+deb10u1.dsc
75248f3de3b7b13c8c9735ff7b86ebe72cbb8ad043291517d7d53488e0893abe 372722 uriparser_0.9.1.orig.tar.bz2
72bfc8d5c992cb783a8595b8e3c6a0cf1f7579313b2b860cae1b46fc598a460a 8328 uriparser_0.9.1-1+deb10u1.debian.tar.xz
Files:
f1bd9a4f5490e1932bb51671cbf29373 2258 libs optional uriparser_0.9.1-1+deb10u1.dsc
c00ac34aaf4ab66c69d1100db3b79a62 372722 libs optional uriparser_0.9.1.orig.tar.bz2
4575bca8b2640c168d4082a1e1bf275a 8328 libs optional uriparser_0.9.1-1+deb10u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmHtmqZfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EKrgP/2/IUckSS2mgb2Ky9Wj3LweHE490f1rb
5xv4Dl31OCULzNduLJs4J5Dz6o8YRTlDAOhUx937BwkJXs5qDiO3nr2PyMG9gftX
dvi2LE2kXUbK2O1m5ZPllXdaah8ekh/Gpc1kMtGbT7VqJGw0LKoAznlfUZBGeK2b
9CLGUBJuYmLyGMWSOr2m3OqaAC6iZ4Yeg7320KcUtllavjjlkykLNnG+DdN9lz2W
3J6o/1AbGmUKcSVn5hzqKSTc5b6CDcxLcST/8VKU8xthQMbUqPzZPbKJvh9CN2S8
UpsfEfUvfPdRpJckzfvBG9i71DEKGsL2T7EwMyBkbxP7AVk//iX6Mm+pflm0F7Hp
ItJ1PfAqXOrNP8sSqYmNNe//wAwW26uUIJTBJSUvbUl9iGaOn3p1BPiH1E+Hm5+8
8Rw267xf4nUlP0hR8Bz/eZcPjUXPi1VOBW4NnFfFaymR3spmOvk4HCn4B7HEELFN
+iocl1CeMdTQuuXr5XHXHgIRWImgDgDTl88q4mPBOzQCFKNHOHK5tRIFLGlsa4kM
Gm4MgTWjzXzH0AlH9w814NAAwUisEqbsHA1wgmq6uBYCXF7fiKZW+h8DNcNgCPFs
LwBA++Kh38edaeYOb3MsDEA4FzQ9toGzrIMZqAb9ZKxsKROYLnWKQWtp3pbDEn/R
3WhUanmHXZ8Q
=xqUb
-----END PGP SIGNATURE-----
