[ubuntu/focal-updates] raptor2 2.0.15-0ubuntu1.20.04.2 (Accepted)

[Ubuntu Archive Robot]

raptor2 (2.0.15-0ubuntu1.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: out of bounds array access
    - debian/patches/CVE-2020-25713.patch: compare namespace declarations
      correctly in src/raptor_xml_writer.c.
    - CVE-2020-25713
  * SECURITY UPDATE: heap overread when parsing triples
    - debian/patches/CVE-2024-57822.patch: only allow looking at the last
      character of a bnode ID only if bnode length >0 in
      src/raptor_ntriples.c.
    - debian/patches/CVE-2024-5782x-tests.patch: added test in
      configure.ac, tests/Makefile.am, tests/bugs/Makefile.am,
      tests/bugs/issue70b.c.
    - CVE-2024-57822
  * SECURITY UPDATE: integer overflow when normalizing a URI
    - debian/patches/CVE-2024-57823.patch: return empty buffer if path gets
      to 0 length in src/raptor_rfc2396.c.
    - debian/patches/CVE-2024-5782x-tests.patch: added test in
      configure.ac, tests/Makefile.am, tests/bugs/Makefile.am,
      tests/bugs/issue70a.c.
    - CVE-2024-57823

Date: 2025-02-25 14:28:28.744176+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/raptor2/2.0.15-0ubuntu1.20.04.2
-------------- next part --------------
Sorry, changesfile not available.