-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 17 Apr 2024 14:08:51 +0200
Source: azure-uamqp-python
Architecture: source
Version: 1.6.9-2
Distribution: unstable
Urgency: high
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1068457
Changes:
azure-uamqp-python (1.6.9-2) unstable; urgency=high
.
* Team upload.
* CVE-2024-29195: An attacker can cause an integer wraparound or under-
allocation or heap buffer overflow due to vulnerabilities in parameter
checking mechanism, by exploiting the buffer length parameter in Azure C
SDK, which may lead to remote code execution. Applied upstream patch:
CVE-2024-29195_Add-malloc-size-checks.patch (Closes: #1068457).
Checksums-Sha1:
da0868c3083fdc4eae499788754d3241fa30f678 2316 azure-uamqp-python_1.6.9-2.dsc
b70fda15971f4a2ebc0ef8298c1857b886fddbb6 11624 azure-uamqp-python_1.6.9-2.debian.tar.xz
840627ba390b18bef514eaef014f72660a0a173d 9095 azure-uamqp-python_1.6.9-2_amd64.buildinfo
Checksums-Sha256:
09039d63c22f81849fbbafe413dc423381ee019b47c68bffa765e6e799cf4a57 2316 azure-uamqp-python_1.6.9-2.dsc
b0eddda10d4e1197393603e560db78c5caa27cc58d2d91d8fefeddc4243c5bd5 11624 azure-uamqp-python_1.6.9-2.debian.tar.xz
31fd787e426531456f80a953e83339c36281350bf0073dbaad81dd557db097f6 9095 azure-uamqp-python_1.6.9-2_amd64.buildinfo
Files:
a19610664fc8fd4d090699f9b03f1062 2316 python optional azure-uamqp-python_1.6.9-2.dsc
5140a3fdbb875f8eb29ae443e471c41b 11624 python optional azure-uamqp-python_1.6.9-2.debian.tar.xz
ab7997a1ad2913b7afe38df2fe7582bd 9095 python optional azure-uamqp-python_1.6.9-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=oTDG
-----END PGP SIGNATURE-----
Attachment:
pgpJb0hFbiz6F.pgp
Description: PGP signature