[SECURITY] [DLA 376-1] mono security update

2015-12-3011:29:31

lists.debian.org

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.97 High

EPSS

Percentile

99.7%

JSON

Package : mono
Version : 2.6.7-5.1+deb6u2
CVE ID : CVE-2009-0689

Mono's string-to-double parser may crash, on specially crafted input. This
could theoretically lead to arbitrary code execution.

This issue has been fixed in Debian 6 Squeeze with the version
2.6.7-5.1+deb6u2 of mono. We recommend that you upgrade your
mono packages.

–
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian8armhflibmonoboehm-2.0-1-dbg< 3.2.8+dfsg-10+deb8u1libmonoboehm-2.0-1-dbg_3.2.8+dfsg-10+deb8u1_armhf.deb
Debian5hppakdelibs4c2a< 4:3.5.10.dfsg.1-0lenny4kdelibs4c2a_4:3.5.10.dfsg.1-0lenny4_hppa.deb
Debian8alllibmono-compilerservices-symbolwriter4.0-cil< 3.2.8+dfsg-10+deb8u1libmono-compilerservices-symbolwriter4.0-cil_3.2.8+dfsg-10+deb8u1_all.deb
Debian5mipsellibnspr4-0d-dbg< 4.7.1-5libnspr4-0d-dbg_4.7.1-5_mipsel.deb
Debian5i386libnspr4-dev< 4.7.1-5libnspr4-dev_4.7.1-5_i386.deb
Debian5mipselkdelibs-dbg< 4:3.5.10.dfsg.1-0lenny4kdelibs-dbg_4:3.5.10.dfsg.1-0lenny4_mipsel.deb
Debian8alllibmono-system-web-webpages-deployment2.0-cil< 3.2.8+dfsg-10+deb8u1libmono-system-web-webpages-deployment2.0-cil_3.2.8+dfsg-10+deb8u1_all.deb
Debian5sparclibnspr4-0d-dbg< 4.7.1-5libnspr4-0d-dbg_4.7.1-5_sparc.deb
Debian8i386libmonoboehm-2.0-1< 3.2.8+dfsg-10+deb8u1libmonoboehm-2.0-1_3.2.8+dfsg-10+deb8u1_i386.deb
Debian8alllibmono-system-data-linq2.0-cil< 3.2.8+dfsg-10+deb8u1libmono-system-data-linq2.0-cil_3.2.8+dfsg-10+deb8u1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	armhf	libmonoboehm-2.0-1-dbg	< 3.2.8+dfsg-10+deb8u1	libmonoboehm-2.0-1-dbg_3.2.8+dfsg-10+deb8u1_armhf.deb
Debian	5	hppa	kdelibs4c2a	< 4:3.5.10.dfsg.1-0lenny4	kdelibs4c2a_4:3.5.10.dfsg.1-0lenny4_hppa.deb
Debian	8	all	libmono-compilerservices-symbolwriter4.0-cil	< 3.2.8+dfsg-10+deb8u1	libmono-compilerservices-symbolwriter4.0-cil_3.2.8+dfsg-10+deb8u1_all.deb
Debian	5	mipsel	libnspr4-0d-dbg	< 4.7.1-5	libnspr4-0d-dbg_4.7.1-5_mipsel.deb
Debian	5	i386	libnspr4-dev	< 4.7.1-5	libnspr4-dev_4.7.1-5_i386.deb
Debian	5	mipsel	kdelibs-dbg	< 4:3.5.10.dfsg.1-0lenny4	kdelibs-dbg_4:3.5.10.dfsg.1-0lenny4_mipsel.deb
Debian	8	all	libmono-system-web-webpages-deployment2.0-cil	< 3.2.8+dfsg-10+deb8u1	libmono-system-web-webpages-deployment2.0-cil_3.2.8+dfsg-10+deb8u1_all.deb
Debian	5	sparc	libnspr4-0d-dbg	< 4.7.1-5	libnspr4-0d-dbg_4.7.1-5_sparc.deb
Debian	8	i386	libmonoboehm-2.0-1	< 3.2.8+dfsg-10+deb8u1	libmonoboehm-2.0-1_3.2.8+dfsg-10+deb8u1_i386.deb
Debian	8	all	libmono-system-data-linq2.0-cil	< 3.2.8+dfsg-10+deb8u1	libmono-system-data-linq2.0-cil_3.2.8+dfsg-10+deb8u1_all.deb