-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 08 Aug 2022 11:27:46 +0200 Source: avahi Architecture: source Version: 0.8-5+deb11u1 Distribution: bullseye Urgency: medium Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Michael Biebl <biebl@debian.org> Closes: 986018 993051 Changes: avahi (0.8-5+deb11u1) bullseye; urgency=medium . [ Simon McVittie ] * Add patch to fix display of URLs containing '&' in avahi-discover. Otherwise, a TXT entry containing a URL with '&' will cause an error. . [ Michael Biebl ] * Do not disable timeout cleanup on watch cleanup. This was causing timeouts to never be removed from the linked list that tracks them, resulting in both memory and CPU usage to grow larger over time. Thanks to Gustavo Noronha Silva. (Closes: #993051) * Fix NULL pointer crashes when trying to resolve badly-formatted hostnames. Fixes a local DoS in avahi-daemon that can be triggered by trying to resolve badly-formatted hostnames on the /run/avahi-daemon/socket interface. (CVE-2021-3502, Closes: #986018) Checksums-Sha1: 5febd087b98d861dacd533a047a4a95007c94391 3981 avahi_0.8-5+deb11u1.dsc 0e89f98a36e102079dfcc49b96dcc37c15a1cbbd 36484 avahi_0.8-5+deb11u1.debian.tar.xz f9a695acfd6418f7077c3efb005ed165a5f0bd72 8599 avahi_0.8-5+deb11u1_source.buildinfo Checksums-Sha256: fc6d5f87761bf8a21efe2fac6dc1986ea65c4548c5a21ef1371f57ab7e977893 3981 avahi_0.8-5+deb11u1.dsc 232235b695cd63a30294673a97dc36f688c2abec0945647aa033d4f9330a9ce9 36484 avahi_0.8-5+deb11u1.debian.tar.xz b1882ea82473e4928ba5cff39175327a1f62fad50be7ec1adffc1da331f7d970 8599 avahi_0.8-5+deb11u1_source.buildinfo Files: 341f9c8f9057921c2b43bf5b0453ceba 3981 net optional avahi_0.8-5+deb11u1.dsc a31dd38cd899b754f83c232fb9b30966 36484 net optional avahi_0.8-5+deb11u1.debian.tar.xz 8706d6aa27c76e7e68122fb09f9a137a 8599 net optional avahi_0.8-5+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEECbOsLssWnJBDRcxUauHfDWCPItwFAmMJHTkACgkQauHfDWCP ItwbpxAAmAP+hqWDF56z+vijBc90nGnkDMjwAIyYBvpmu/rX2nhbDjyT88wn6Yl2 2OIdg0PYKQYPZdcmDInGd9JBb8RveRYnOrNmkcGBlTOk0eL5OK24Pg7WbKMAjICM +vcEhsiXqtfcvLg09j2GJVvMuXA4SdA5ziW6y7H3xVgmWOsj93gOdZd+uRHOJdjr P9AQz3MwzmI9dQeVwtM8fERWquiB8cFal6WjevJepPP9ROgBGhYMMJhtTCIgxax9 eoIfH2icvZEy9Cl+wkk8lD8SRERMHogjpQLm4TvGpabCkq6V8v+bbw0Rt5BOGhlh mtUE9Bm9obIyCqkkznkD0ZfuMymSjaFOt5JSCqv5P2v0BhcRz6lt30yn9PaDQHP/ jX0zbVL3ywBbBJov7x0C9rlUvTshBliBP0boRZFhXMqOv9IFjaXxYFAnRqAfXy9+ m+2f/LNUW6Kl6rvv0iAwJj01OQtCCa0PE6TXfB8DFkQfJ2dSegFOqrwuBr+qC8YT SPifpaxt0ffsdrPKZlZaEUuoF5prWdAiIA4jMW3bm3IaJmYsWBLhL7NRlsw1mcoN GCSjOR3zHXfS1ap/sNIK6DE1F3+OZeMGBVkCksYbskwVeB0Qer3n7LCE1TApKXMJ 1ZJnnr+h0buyPPsgD5QlAoZKBMowIOOfIZDcHCqEq4GBcE2j/Uw= =EKe2 -----END PGP SIGNATURE-----
