—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512

– ————————————————————————-
Debian Security Advisory DSA-3353-1 security@debian.org
https://www.debian.org/security/ Alessandro Ghedini
September 05, 2015 https://www.debian.org/security/faq
– ————————————————————————-

Package : openslp-dfsg
CVE ID : CVE-2015-5177
Debian Bug : 795429

Qinghao Tang of QIHU 360 discovered a double free flaw in OpenSLP, an
implementation of the IETF Service Location Protocol. This could allow
remote attackers to cause a denial of service (crash).

For the oldstable distribution (wheezy), this problem has been fixed
in version 1.2.1-9+deb7u1.

For the stable distribution (jessie), this problem has been fixed in
version 1.2.1-10+deb8u1.

For the unstable distribution (sid), this problem has been fixed in
version 1.2.1-11.

We recommend that you upgrade your openslp-dfsg packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
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=FB78
—–END PGP SIGNATURE—–