tocsin

Debian/uap-core: high 7.5

uap-core before 0.7.3 is vulnerable to a denial of service attack when processing crafted User-Agent strings. Some regexes are vulnerable to regular expression denial of service (REDoS) due to overlap

Action: Upgrade uap-core to 1:0.8.0-1 or later.

Affected

introducedfixedlast affected
01:0.8.0-1-

Fixed versions

1:0.8.0-1

Sources

published · modified · JSON