-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 03 Sep 2022 20:04:37 +0200 Source: connman Binary: connman connman-dbgsym connman-dev connman-vpn connman-vpn-dbgsym Architecture: i386 Version: 1.36-2.2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Salvatore Bonaccorso Description: connman - Intel Connection Manager daemon connman-dev - Development files for connman connman-vpn - Intel Connection Manager daemon - VPN daemon Closes: 1004935 1016976 Changes: connman (1.36-2.2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * dnsproxy: Simplify udp_server_event() * dnsproxy: Validate input data before using them (CVE-2022-23096, CVE-2022-23097) (Closes: #1004935) * dnsproxy: Avoid 100 % busy loop in TCP server case (CVE-2022-23098) (Closes: #1004935) * dnsproxy: Keep timeout in TCP case even after connection is established (CVE-2022-23098) (Closes: #1004935) * gweb: Fix OOB write in received_data() (CVE-2022-32292) (Closes: #1016976) * wispr: Add reference counter to portal context (CVE-2022-32293) (Closes: #1016976) * wispr: Update portal context references (CVE-2022-32293) (Closes: #1016976) Checksums-Sha1: 0fe66519bcd6049a3b6074deb8227dae685ce344 1156768 connman-dbgsym_1.36-2.2+deb11u1_i386.deb e2b10bb10bf77aa67b24d527bb8ed6ac23ffbb78 28872 connman-dev_1.36-2.2+deb11u1_i386.deb 24ea2bcf25a58e63e24449448b6a77cfd655dcac 343520 connman-vpn-dbgsym_1.36-2.2+deb11u1_i386.deb 471a1f3a7410ad02df5db304df0feb83edb4fff2 140124 connman-vpn_1.36-2.2+deb11u1_i386.deb 0877471fcd3fd2b506c019a5f9a57030daf5bd9e 9635 connman_1.36-2.2+deb11u1_i386-buildd.buildinfo a7285a50351eef78f77db9994b3530a788b7f040 448120 connman_1.36-2.2+deb11u1_i386.deb Checksums-Sha256: 10626bdb6678aada5f5d36d71f953292c4ffdedbe9b78993c015999105d74b5e 1156768 connman-dbgsym_1.36-2.2+deb11u1_i386.deb 3e196d8f0b27b702c041f262f25e4a563c8248ef203cd42934de88c2043cc434 28872 connman-dev_1.36-2.2+deb11u1_i386.deb 6dedf991d4a966410c50db5228c9dcdb81c3645d8521c73766bd8bc76af3be0d 343520 connman-vpn-dbgsym_1.36-2.2+deb11u1_i386.deb 22718304a3fa88be214570d822636b1cafa5e5a42c34c698cd4184e2dc7d9c12 140124 connman-vpn_1.36-2.2+deb11u1_i386.deb b40e80b990b2cc946874499a17e534bd86dac57019d3e9dd49f075fc26a64ae7 9635 connman_1.36-2.2+deb11u1_i386-buildd.buildinfo fe691339b50438fac86f2f3ae0f79f2ec278e0ebedf7b1466458e46713bdabeb 448120 connman_1.36-2.2+deb11u1_i386.deb Files: 4691e916b4b996937a8e652fbecdf77f 1156768 debug optional connman-dbgsym_1.36-2.2+deb11u1_i386.deb 56c3312367f38528a8863f8aa6386215 28872 devel optional connman-dev_1.36-2.2+deb11u1_i386.deb b98e73b81cca98abb4714a13a26afe33 343520 debug optional connman-vpn-dbgsym_1.36-2.2+deb11u1_i386.deb fe583567780aac0be6d7ab2cad0f4ec7 140124 net optional connman-vpn_1.36-2.2+deb11u1_i386.deb ec7b5a6bf35cddf763361446eb0295d2 9635 net optional connman_1.36-2.2+deb11u1_i386-buildd.buildinfo de09d68955b41ec39b061966e43daff2 448120 net optional connman_1.36-2.2+deb11u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2q+i4qaoTi/nmbi10RfxDyMLhSIFAmMTnsoACgkQ0RfxDyML hSI/fA/9EeNuxdXKCNwZLz/Tc2VO9g+LP3RUlP1dfRND5ptSFh7sh5jR9Xl7EkuM 384wAuX6lFmxbUQixMHNTulW1Kk04/iEsdzAx2UfEJ9kEwGtd44bCUB1uBWFMkTu oDJi3pUY4X7NVWGBb7W2qrHqrwF2NDXtmRO/mGiZD0MzAWidYyyn5RICVAD4RxTM u10kCTN9PDF8nYYfrEzWxCZpfCOtxrnJTydNn/D/8nMjGYrgmn8F2KT/wnVTsUw8 kVeQ1UB5YgWwTsiwl+BEG/KzfcDaw30AfS4GDb9nSY167rxBxKW5NslkAb911FaN RYl1UwpjRAjLcMpKZEUpe1UT4GKlnbB4lxYwHBDkG/8c2ZN9mMG2J5Xc+C+hEFeB VNu35DldEoOjR8ojTROQUPBtoGYfO6sZZ5RQmqILrqMaAj/ha9sQJMYL0R6zf0iO wtLYeT5F/n88Wk93ayZ8fbSO0WdDXnS82pBC8aizz6guG17uF7Ews/RKCxglLL2X PyuL7OMVG1VXUln7D8y+OKRs03xO+SN8onQTNBA65S+xwrnvYtC6nIRfppE24NFe nFp3s+HYJ8U0siJ2jXv8oL7fwuZD82tsiUmvP9K9K/cjL9hIrXXaHhZQfkHXt+J3 c/aDY/J2q6Yc2vsnO7oJCkIvvm5BKWStGCeufHrcoH/RMyvtjVo= =Yufx -----END PGP SIGNATURE-----