—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512

– ————————————————————————-
Debian Security Advisory DSA-3254-1 security@debian.org
http://www.debian.org/security/ Salvatore Bonaccorso
May 09, 2015 http://www.debian.org/security/faq
– ————————————————————————-

Package : suricata
CVE ID : CVE-2015-0971

Kostya Kortchinsky of the Google Security Team discovered a flaw in the
DER parser used to decode SSL/TLS certificates in suricata. A remote
attacker can take advantage of this flaw to cause suricata to crash.

For the stable distribution (jessie), this problem has been fixed in
version 2.0.7-2+deb8u1.

For the unstable distribution (sid), this problem has been fixed in
version 2.0.8-1.

We recommend that you upgrade your suricata packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
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=A+CU
—–END PGP SIGNATURE—–

—
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of “unsubscribe”. Trouble? Contact listmaster@lists.debian.org
Archive: https://lists.debian.org/E1Yr5zn-0000P9-DR@master.debian.org