-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 19 Dec 2024 09:01:14 +0200 Source: avahi Binary: avahi-discover Architecture: all Version: 0.8-10+deb12u1 Distribution: bookworm Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Adrian Bunk Description: avahi-discover - Service discover user interface for avahi Closes: 1054876 1054877 1054878 1054879 1054880 Changes: avahi (0.8-10+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. . [ Michael Biebl ] * core: make sure there is rdata to process before parsing it. Patch cherry-picked from upstream Git. (CVE-2023-38472, Closes: #1054879) * core: reject overly long TXT resource records. Patches cherry-picked from upstream Git. (CVE-2023-38469, Closes: #1054876) * Ensure each label is at least one byte long. Patch cherry-picked from upstream Git. (CVE-2023-38470, Closes: #1054877) * core: extract host name using avahi_unescape_label() Patch cherry-picked from upstream Git. (CVE-2023-38471, Closes: #1054878) * common: derive alternative host name from its unescaped version. Patch cherry-picked from upstream Git. (CVE-2023-38473, Closes: #1054880) * Fix browsing when invalid services present. See https://github.com/lathiat/avahi/issues/212 Checksums-Sha1: 6ca153f21fe49c52dd988518083e6aaf65f08fd7 30128 avahi-discover_0.8-10+deb12u1_all.deb 6775ce0656be3a4f48cfba80e0e135317e3ce630 15478 avahi_0.8-10+deb12u1_all-buildd.buildinfo Checksums-Sha256: 997268574de0c1397e5dc7b8c7f53f9008b0b7056a7f202c46a21c056a13b520 30128 avahi-discover_0.8-10+deb12u1_all.deb 6981f9236efa89a9c4249e76a0da6812c5083d7d1ccdb6d4c7044668fe339da8 15478 avahi_0.8-10+deb12u1_all-buildd.buildinfo Files: 4a3af7457dc5f17633257e62386cda02 30128 net optional avahi-discover_0.8-10+deb12u1_all.deb 46ac99648c9ca59af9cb3fef28ae7927 15478 net optional avahi_0.8-10+deb12u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEQsM0t1ygJv2xcx3e4cagXJhOTXsFAmd5dwEACgkQ4cagXJhO TXs5Hg/8DJb64/ODELPQhqiyZ25CgAQy+Wct7ey3tDY5CNs/c5aN8jdiS+sPP33Z f/+gciV+iEM7wVY00ftoerR1qzuEiiJGJvk65k1Btg1wrYtqsFxWwCfuE+kAwEvq oMmchvk4+1RFGdM5K7+d9y4FfTah8+hvsQ2O862auXgFlrox5aJNvh2nmzSdVsPx xZJsqEgKE4TdhzGBoyeFcnov7CfL6++sfQuy8ts154CsG6/0vhh9L/bTbnJYiww6 UDeAYm3Iwb3Y8MFXe4eToiHnppc6nfbRIZ7VUnoEP6MX3BMELFAHun8Ac/czT3GQ TTim/ZOwYKeAGH/U4R1ERAk720YOXze2HE/cTj3pjX5Ye1fqBPN4NPAqlYTkMcmp 6JL82wEsb8s5OqHk/pkgNS8ZQsk36JeXtXot/h4TjPEJZRvF6kOe32oBHZzMhYfz 9jrJQty4nHesL8j8AI2sgrt88xz1C5NpegF88cYnxbgYMDEwxieZ+pnnSkTaJUln xu1pMmATEHEDKiNKLkhe1vEecGeIixMIe7Azo4JZrbIhOrxPXa1Rbavr9YrTEl65 jl/9sAhkcmhlBxN6dEiWw0itDROrqVbktiYSWEYWE5vK2i+dZt9vycri97Nj8+G9 hlRlhkdaz3hTNEHi/3LCzfE6Mk0fzNEgymJW6UbTukFYgaL5N9o= =72y/ -----END PGP SIGNATURE-----