tocsin

Debian/slirp: medium 5.6

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

Action: Upgrade slirp to 1:1.0.17-11 or later.

Affected

introducedfixedlast affected
01:1.0.17-11-

Fixed versions

1:1.0.17-11

Sources

published · modified · JSON