gpsd 3.17-6 source package in Debian
Changelog
gpsd (3.17-6) unstable; urgency=medium * [0a8e4e18] Pull json fixes from upstream to fix a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs. CVE-2018-17937 / Closes: #925327 The update also fixes several other json parser bugs. - ECMA-404 says JSON \u must have 4 hex digits - Allow for \u escapes with fewer than 4 digits. - Fail on bad escape string. * [71020f4f] Update git-buildpackage config to build from the buster branch. -- Bernd Zeimetz <email address hidden> Fri, 05 Apr 2019 23:31:30 +0200
Upload details
- Uploaded by:
- Bernd Zeimetz
- Uploaded to:
- Sid
- Original maintainer:
- Bernd Zeimetz
- Architectures:
- any
- Section:
- misc
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Builds
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
gpsd_3.17-6.dsc | 2.5 KiB | 393946eefc2ac406d508200ed721a480214db67bdbe09ab47e5edc22e539f7fd |
gpsd_3.17.orig.tar.gz | 8.3 MiB | 68e0dbecfb5831997f8b3d6ba48aed812eb465d8c0089420ab68f9ce4d85e77a |
gpsd_3.17-6.debian.tar.xz | 36.1 KiB | 0d852cee49266122d925493c0633b5ed1bf84e1ee8b646d4c0a1c94aed29c141 |
Available diffs
No changes file available.