[SECURITY] [DLA 2025-1] openslp-dfsg security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Package : openslp-dfsg
Version : 1.2.1-10+deb8u2
CVE IDs : CVE-2017-17833 CVE-2019-5544
The OpenSLP package had two open security issues:
CVE-2017-17833
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related
memory corruption issue which may manifest itself as a denial-of-service
or a remote code-execution vulnerability.
CVE-2019-5544
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap
overwrite issue. VMware has evaluated the severity of this issue to be in
the critical severity range.
For Debian 8 "Jessie", these problems have been fixed in version
1.2.1-10+deb8u2. This upload was prepared by Utkarsh Gupta
<guptautkarsh2102@gmail.com>.
We recommend that you upgrade your openslp-dfsg packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Regards,
- --
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-
-----BEGIN PGP SIGNATURE-----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=SxtB
-----END PGP SIGNATURE-----
Reply to: