Publishing details

• Published on 2021-07-15
• Copied from ubuntu focal in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

libslirp (4.1.0-2ubuntu2.2) focal-security; urgency=medium

  * SECURITY UPDATE: DoS via buffer overread
    - debian/patches/CVE-2020-29129_30.patch: check pkt_len before reading
      protocol header in src/ncsi.c, src/slirp.c.
    - CVE-2020-29129
    - CVE-2020-29130
  * SECURITY UPDATE: data leak in bootp_input()
    - debian/patches/CVE-2021-3592-1.patch: add mtod_check() to src/mbuf.*.
    - debian/patches/CVE-2021-3592-2.patch: limit vendor-specific area to
      input packet memory buffer in src/bootp.*, src/mbuf.*.
    - debian/patches/CVE-2021-3592-3.patch: check bootp_input buffer size
      in src/bootp.c.
    - debian/patches/CVE-2021-3592-4.patch: fix regression in dhcp in
      src/bootp.c.
    - CVE-2021-3592
  * SECURITY UPDATE: data leak in udp6_input()
    - debian/patches/CVE-2021-3593.patch: check udp6_input buffer size in
      src/udp6.c.
    - CVE-2021-3593
  * SECURITY UPDATE: data leak in udp_input()
    - debian/patches/CVE-2021-3594.patch: check upd_input buffer size in
      src/udp.c.
    - CVE-2021-3594
  * SECURITY UPDATE: data leak in tftp_input()
    - debian/patches/CVE-2021-3595-1.patch: check tftp_input buffer size in
      src/tftp.c.
    - debian/patches/CVE-2021-3595-2.patch: introduce a header structure in
      src/tftp.*.
    - CVE-2021-3595

 -- Marc Deslauriers <email address hidden>  Mon, 21 Jun 2021 08:43:06 -0400

Builds

• amd64
• arm64
• armhf
• ppc64el
• riscv64
• s390x

Built packages

• libslirp-dev General purpose TCP-IP emulator library (development files)

• libslirp0 General purpose TCP-IP emulator library

• libslirp0-dbgsym debug symbols for libslirp0

Package files

• libslirp-dev_4.1.0-2ubuntu2.2_amd64.deb (5.1 KiB)
• libslirp-dev_4.1.0-2ubuntu2.2_arm64.deb (5.1 KiB)
• libslirp-dev_4.1.0-2ubuntu2.2_armhf.deb (5.1 KiB)
• libslirp-dev_4.1.0-2ubuntu2.2_ppc64el.deb (5.1 KiB)
• libslirp-dev_4.1.0-2ubuntu2.2_riscv64.deb (5.1 KiB)
• libslirp-dev_4.1.0-2ubuntu2.2_s390x.deb (5.1 KiB)
• libslirp0-dbgsym_4.1.0-2ubuntu2.2_amd64.ddeb (248.6 KiB)
• libslirp0-dbgsym_4.1.0-2ubuntu2.2_arm64.ddeb (243.4 KiB)
• libslirp0-dbgsym_4.1.0-2ubuntu2.2_armhf.ddeb (241.3 KiB)
• libslirp0-dbgsym_4.1.0-2ubuntu2.2_ppc64el.ddeb (251.8 KiB)
• libslirp0-dbgsym_4.1.0-2ubuntu2.2_riscv64.ddeb (243.1 KiB)
• libslirp0-dbgsym_4.1.0-2ubuntu2.2_s390x.ddeb (240.7 KiB)
• libslirp0_4.1.0-2ubuntu2.2_amd64.deb (53.2 KiB)
• libslirp0_4.1.0-2ubuntu2.2_arm64.deb (49.4 KiB)
• libslirp0_4.1.0-2ubuntu2.2_armhf.deb (45.9 KiB)
• libslirp0_4.1.0-2ubuntu2.2_ppc64el.deb (56.9 KiB)
• libslirp0_4.1.0-2ubuntu2.2_riscv64.deb (50.4 KiB)
• libslirp0_4.1.0-2ubuntu2.2_s390x.deb (47.4 KiB)
• libslirp_4.1.0-2ubuntu2.2.debian.tar.xz (12.4 KiB)
• libslirp_4.1.0-2ubuntu2.2.dsc (2.1 KiB)
• libslirp_4.1.0.orig.tar.bz2 (90.9 KiB)