[ubuntu/bionic-proposed] ldns 1.7.0-3ubuntu2 (Accepted)

[Marc Deslauriers]

ldns (1.7.0-3ubuntu2) bionic; urgency=medium

  * SECURITY UPDATE: double-free in ldns_fget_token_l
    - debian/patches/CVE-2017-1000231.patch: check parse limit before t
      increment in parse.c.
    - CVE-2017-1000231
  * SECURITY UPDATE: double-free in ldns_str2rdf_long_str
    - debian/patches/CVE-2017-1000232.patch: free after reallocing to 0
      size in str2host.c.
    - CVE-2017-1000232

Date: Wed, 22 Nov 2017 11:46:21 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/ldns/1.7.0-3ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 22 Nov 2017 11:46:21 -0500
Source: ldns
Binary: libldns2 libldns-dev ldnsutils python-ldns python3-ldns
Architecture: source
Version: 1.7.0-3ubuntu2
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 ldnsutils  - ldns library for DNS programming
 libldns-dev - ldns library for DNS programming
 libldns2   - ldns library for DNS programming
 python-ldns - Python bindings for the ldns library for DNS programming
 python3-ldns - Python3 bindings for the ldns library for DNS programming
Changes:
 ldns (1.7.0-3ubuntu2) bionic; urgency=medium
 .
   * SECURITY UPDATE: double-free in ldns_fget_token_l
     - debian/patches/CVE-2017-1000231.patch: check parse limit before t
       increment in parse.c.
     - CVE-2017-1000231
   * SECURITY UPDATE: double-free in ldns_str2rdf_long_str
     - debian/patches/CVE-2017-1000232.patch: free after reallocing to 0
       size in str2host.c.
     - CVE-2017-1000232
Checksums-Sha1:
 4b6b3546e34b48f60d01ff12e0a5559a2b541e88 2260 ldns_1.7.0-3ubuntu2.dsc
 d2fec266b89a6a8a5a98f91962eb63d8ce834818 12412 ldns_1.7.0-3ubuntu2.debian.tar.xz
 d61086291b45f2500b7dd414624a8568a5d80b63 7319 ldns_1.7.0-3ubuntu2_source.buildinfo
Checksums-Sha256:
 84cb91cdaa6fa156f8930dbc35cf7e7c850e30c12e708a18ddd40cd87dcc6475 2260 ldns_1.7.0-3ubuntu2.dsc
 2a4262c2423de8ed3deffe815684a83a06385f7785f5988c0bedd6f5d0d6fe14 12412 ldns_1.7.0-3ubuntu2.debian.tar.xz
 8f826f041225597d9fdac126813e622da597b61759e60d8b4f10aea5c76eb43e 7319 ldns_1.7.0-3ubuntu2_source.buildinfo
Files:
 60c2809966b87cc18756c859415d32a1 2260 net extra ldns_1.7.0-3ubuntu2.dsc
 827cfed36cd7509d1fa2e346231478c9 12412 net extra ldns_1.7.0-3ubuntu2.debian.tar.xz
 0fa4f09ee7d42710b493172926354271 7319 net extra ldns_1.7.0-3ubuntu2_source.buildinfo
Original-Maintainer: Debian DNS Packaging <pkg-dns-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=jqFb
-----END PGP SIGNATURE-----