-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 08 Feb 2022 10:06:16 +0100 Source: connman Architecture: source Version: 1.33-3+deb9u3 Distribution: stretch-security Urgency: medium Maintainer: Alexander Sack <asac@debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Changes: connman (1.33-3+deb9u3) stretch-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2021-33833: stack-based buffer overflow in dnsproxy. * CVE-2022-23096: buffer over-read in forward_dns_reply. * CVE-2022-23097: buffer over-read in forward_dns_reply. * CVE-2022-23098: infinite loop in dnsproxy. Checksums-Sha1: 45e3c8ca76a04b02848d54221186c538aedd79bc 2362 connman_1.33-3+deb9u3.dsc cd5fa114a3148f74953c5722022d36bb97e8d14a 958059 connman_1.33.orig.tar.gz 9473e17ac3b4fc9d3f33603c9455ccb35dcd96ab 17652 connman_1.33-3+deb9u3.debian.tar.xz 8156960c6175cc6469d2255196ab3b6a93bfc0e4 6955 connman_1.33-3+deb9u3_source.buildinfo Checksums-Sha256: be23ab1cfbe4bb894c9534558d0dc82c7eba1f48696836ea4ca65ad16c214d28 2362 connman_1.33-3+deb9u3.dsc 5a9abae1573fa367269df8bd92792de407fd15c7ac6c1448d07a24a5d6b5b831 958059 connman_1.33.orig.tar.gz d3ef07919375943e85d215c696d40899572dfb4fa4ab861d5a20481fa7623471 17652 connman_1.33-3+deb9u3.debian.tar.xz 4538cd9e56e930f987792aec255893ed7fbb305449ae23805e011128c7a6fac6 6955 connman_1.33-3+deb9u3_source.buildinfo Files: 0f51ef1f60f615eb685c9c8288ff3ed7 2362 net optional connman_1.33-3+deb9u3.dsc 48d3e878d31efd4854fc9b66e29622c1 958059 net optional connman_1.33.orig.tar.gz 624d881f3ab9bce1f5b917207ba41b7a 17652 net optional connman_1.33-3+deb9u3.debian.tar.xz b7f18994aeaec358aac48506aa170679 6955 net optional connman_1.33-3+deb9u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmIDhOgACgkQnUbEiOQ2 gwIyNQ//eEF1onLA+bqZPI0kbiSZ60w9oarr1ZeZw3anqDeTlHPgKQD+UBQh6yF8 iNyaB9TefSwx4zkDEqxuvxMTW3V+aO7hwhZP+nf7eraZkA5QEIBrbVfxHnW6KAY7 1GF0im6jXRyUZGk2YXq8rRP4cYv287svyyIZygbQF2w7FKcfcRWFKZpUeZKcHtlF wy3gqW6okXPOoaTuXF0A42jLRCUokT5k4VLUWxWP2JlS4yf+JgSKbspM2uSj2SLK lbFu41P8+FgZY9Ok5F1KWasmx8kR1VNlkfcUlyI0Wmzin54UDzqYtawCZyvjmt5x i3aaE/YsOGxIjWGKICDsnCHA0Im56rIXXHixpIjQYl0HUYrkaHvC/vGDfetk4yre MPwXAW6AcqBGQbi7vLk9WLEFcagJWUbDsOiTz0VklVhuNG5zyT1vn48HuYrvIWGa wfT3hzkwm21VtQaEw33n7yADM8NrtSrNDDCCAaXSG4x5go/eBHiAXJrZCYV5CheV ZACciKvEFi9y7vegmrVy9PsIFZxKzIQQRN2UhG6/gLt6WU8110Aub6RuGfBgsmJ9 QPqdOI/0X1dt++yotS53xZDeeY+xg569XpFwq4I1V27aZzSSJhRYlC/+2O9nElZ9 AYV22kUL52/6OlZseyGgtFA4aIr9C7rsuQSdVxAOButbF1Y08cw= =nGpL -----END PGP SIGNATURE-----