Ubuntu
slirp package

slirp 1:1.0.17-8ubuntu16.04.1 source package in Ubuntu

Changelog

slirp (1:1.0.17-8ubuntu16.04.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflows
    - debian/patches/014_CVE-2020-7039.patch: tcp_emu: Fix oob access
    - debian/patches/CVE-2020-8608.patch: tcp_emu: fix unsafe snprintf()
      usages and util: add slirp_fmt() helpers
    - CVE-2020-7039
    - CVE-2020-8608

 -- Paulo Flabiano Smorigo <email address hidden>  Thu, 05 Nov 2020 13:45:40 +0000

Upload details

Uploaded by:
Paulo Flabiano Smorigo
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates universe interpreters
Xenial security universe interpreters

Downloads

File Size SHA-256 Checksum
slirp_1.0.17.orig.tar.gz 298.6 KiB afe59cd298075aa1b9eba5a5f7cf720597372b8b81657de529b2cd35a2a2bc2e
slirp_1.0.17-8ubuntu16.04.1.debian.tar.xz 16.0 KiB 984a76d58734541e8da2a6890637d7aa966c2424ef371478d69235c4d828de43
slirp_1.0.17-8ubuntu16.04.1.dsc 1.8 KiB 58b3b9dc423256d39cdf36ca117e557a7c2193ddb5dbee556c40b20a007c3ca1

View changes file

Binary packages built by this source

slirp: SLIP/PPP emulator using a dial up shell account

 Slirp is a TCP/IP emulator which turns an ordinary shell account
 into a (C)SLIP/PPP account. This allows shell users to use all the
 funky Internet applications like Netscape, Mosaic, CUSeeMe, etc.
 .
 Please note that maybe your ISP really doesn't like you using slirp,
 because they want to charge more for a ppp connection, so use it at
 your own risk.

slirp-dbgsym: debug symbols for package slirp

 Slirp is a TCP/IP emulator which turns an ordinary shell account
 into a (C)SLIP/PPP account. This allows shell users to use all the
 funky Internet applications like Netscape, Mosaic, CUSeeMe, etc.
 .
 Please note that maybe your ISP really doesn't like you using slirp,
 because they want to charge more for a ppp connection, so use it at
 your own risk.