[ubuntu/resolute-security] netatalk 4.2.3~ds-2.1ubuntu0.2 (Accepted)

[Shishir Subedi]

netatalk (4.2.3~ds-2.1ubuntu0.2) resolute-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read
    - d/p/CVE-2026-44057,CVE-2026-44066.patch: afpd: fix spotlight
      unmarshalling depth and dead check in etc/afpd/spotlight_marshalling.c
    - CVE-2026-44057
    - CVE-2026-44066
  * SECURITY UPDATE: path traversal
    - debian/patches/CVE-2026-44068.patch: libatalk/vfs: reject slash in EA
      names
    - CVE-2026-44068

Date: 2026-06-18 10:39:11.740928+00:00
Changed-By: Shishir Subedi <shishirsub10 at gmail.com>
https://launchpad.net/ubuntu/+source/netatalk/4.2.3~ds-2.1ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.