-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 03 Sep 2022 20:04:37 +0200 Source: connman Binary: connman connman-dbgsym connman-dev connman-vpn connman-vpn-dbgsym Architecture: amd64 Version: 1.36-2.2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Salvatore Bonaccorso Description: connman - Intel Connection Manager daemon connman-dev - Development files for connman connman-vpn - Intel Connection Manager daemon - VPN daemon Closes: 1004935 1016976 Changes: connman (1.36-2.2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * dnsproxy: Simplify udp_server_event() * dnsproxy: Validate input data before using them (CVE-2022-23096, CVE-2022-23097) (Closes: #1004935) * dnsproxy: Avoid 100 % busy loop in TCP server case (CVE-2022-23098) (Closes: #1004935) * dnsproxy: Keep timeout in TCP case even after connection is established (CVE-2022-23098) (Closes: #1004935) * gweb: Fix OOB write in received_data() (CVE-2022-32292) (Closes: #1016976) * wispr: Add reference counter to portal context (CVE-2022-32293) (Closes: #1016976) * wispr: Update portal context references (CVE-2022-32293) (Closes: #1016976) Checksums-Sha1: 6efa5a31b54fdfb144b732c6df2fb6b7541ba921 1379492 connman-dbgsym_1.36-2.2+deb11u1_amd64.deb 05a8cc1418c7c9d44ff472d7c8bc12804a29ee96 28872 connman-dev_1.36-2.2+deb11u1_amd64.deb 40a0b8a15449dae7719a075b61d116e00a312a0a 408768 connman-vpn-dbgsym_1.36-2.2+deb11u1_amd64.deb 271c85e001f1a60485ce08893e49426def5723c6 130300 connman-vpn_1.36-2.2+deb11u1_amd64.deb 3a26ce5ae2c3661c5d89b32a481c71bf17c032c1 9705 connman_1.36-2.2+deb11u1_amd64-buildd.buildinfo 862f45611cefe3fd03deba91c95ed0128d64ca43 414612 connman_1.36-2.2+deb11u1_amd64.deb Checksums-Sha256: 44ba681ff6cec5ac5d1a432459ee7133b99414beb244238f2a684f8fdfa98cb3 1379492 connman-dbgsym_1.36-2.2+deb11u1_amd64.deb 48a2002ed5dd65cb19f022a6fd5b8412aedd9106189fdc4288e930c2cd8bce31 28872 connman-dev_1.36-2.2+deb11u1_amd64.deb b3d6388599d8e5415471afb24b4a9212e3ab9e276874d28ed393c6498908b7c0 408768 connman-vpn-dbgsym_1.36-2.2+deb11u1_amd64.deb d84e8890e463ce7cc65cdaa62355a6226e62503f5f6727ec6bdeb01bc8a1a5d8 130300 connman-vpn_1.36-2.2+deb11u1_amd64.deb 813ebc84140e0f9b6b3773d08447b960236d6857ec13123c6b5120a2f70e6434 9705 connman_1.36-2.2+deb11u1_amd64-buildd.buildinfo ec592ae40b1f607f150db67eff15ba725b1ab13f769e99133924c12307e22006 414612 connman_1.36-2.2+deb11u1_amd64.deb Files: c1c2b6f3f4e792a86fa19dfaa45d698a 1379492 debug optional connman-dbgsym_1.36-2.2+deb11u1_amd64.deb a6d5f80d29c264062f051d2e17b0c7cb 28872 devel optional connman-dev_1.36-2.2+deb11u1_amd64.deb 60e4751c8cd8989794e977f098082e80 408768 debug optional connman-vpn-dbgsym_1.36-2.2+deb11u1_amd64.deb 4fb46811ab31009ad9b2e5cecaf23261 130300 net optional connman-vpn_1.36-2.2+deb11u1_amd64.deb e9e908ab56e789966df351a4d3499489 9705 net optional connman_1.36-2.2+deb11u1_amd64-buildd.buildinfo a5b4be6d6adefbc7f3eb5754ba17630e 414612 net optional connman_1.36-2.2+deb11u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2q+i4qaoTi/nmbi10RfxDyMLhSIFAmMTnyQACgkQ0RfxDyML hSKF5Q//boFeCfkq00QWP1CHrfCxwX5CO4oRhGdsW8WVc0oKVgUg7KwhPsjP2W0t pfTH6XKOjP8H0KAHDAq2unVRX6Gkvis666n0cZFoxBSTJES74rBoHjyqVdyUI8BM tbgv5EeBubTAJyF9WPaAV/pBjMOGdG37XdyJDDH8/GoJ3qVJPt0a23GEcSFiTsY+ 6YjOh0avR8vmKJl0q1k8AMm5fwEaAWZdKyFzuyc3NCZAm0rWfVruGljpTlkR7C4x TGmXGb6DDCBSAydhIndLm1RHb7VMz1yiln2ftLnK8KQZvQiSKvxBSy2WAUHnndO8 I6G9LpM22/4+hJNwbr/uQ9hSPZoLjDOgxEaXE2l4k9ajHXsOP2N3Xlb7QRUrTq1t LDz93ovD39I2wsv/Vi9eGwmprI4IfOrkK5Adv7nXVGpPtVIRxxVRp40X0jiQbCRH Dd7VHKqqQizreSplSaPh2HAR6FfRZV6lufLPuZRKmsvfOv8K6g3kFE+CQwbqkgrA KaCj/AKZpGrow276QYew/Psj8h26As8wkFIRZKLWoCCC5JDg9X0LY1gzSEZU3KzK /4wlnXJ9ygSAPLXsdJ62pZfOMPDBTL38wXRF2yx5IWeDlMVtcwdegkArXa/Hf9qG QT5VYvBNAcajgzY2SVZ4cZBXSelfzg6B+SD64eKPqeHp1JmTj5I= =Zd+X -----END PGP SIGNATURE-----