UbuntuUpdates.org

Package "adsys"

Name: adsys

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • AD SYStem integration

Latest version: 0.15.2ubuntu0.1
Release: oracular (24.10)
Level: security
Repository: universe

Links



Other versions of "adsys" in Oracular

Repository Area Version
base universe 0.15.2
base main 0.15.2
security main 0.15.2ubuntu0.1
updates main 0.15.2ubuntu0.1
updates universe 0.15.2ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.15.2ubuntu0.1 2025-01-09 17:07:26 UTC

  adsys (0.15.2ubuntu0.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Denial of service in parse function.
    - Use strings.EqualFold instead of direct comparison and
      strings.ToLower in .../html/doctype.go, .../html/foreign.go, and
      .../html/parse.go. Based on
      https://go.googlesource.com/net/+/8e66b04771e35c4e4125e8c60334b34e2423effb
      upstream patch.
    - CVE-2024-45338

 -- Hlib Korzhynskyy <email address hidden> Tue, 07 Jan 2025 14:39:21 -0330

CVE-2024-45338 An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow pa



About   -   Send Feedback to @ubuntu_updates