[ubuntu/groovy-updates] libmaxminddb 1.4.2-0ubuntu1.20.10.1 (Accepted)

Ubuntu Archive Robot cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Thu Nov 12 13:58:23 UTC 2020


libmaxminddb (1.4.2-0ubuntu1.20.10.1) groovy-security; urgency=medium

  * SECURITY UPDATE: heap overread in dump_entry_data_list
    - debian/patches/CVE-2020-28241.patch: replace most malloc uses with
      calloc in bin/mmdblookup.c, doc/libmaxminddb.md, src/maxminddb.c.
    - CVE-2020-28241

Date: 2020-11-11 18:24:20.862910+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/libmaxminddb/1.4.2-0ubuntu1.20.10.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Groovy-changes mailing list