This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============6011923999438175818==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="K9ZxzgD7HN8XKFbxhpPrvDLlIRbuL8MUf"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--K9ZxzgD7HN8XKFbxhpPrvDLlIRbuL8MUf
Content-Type: multipart/mixed;
 boundary="1bfB8q1EpTCzQq7luxSn10Y2bfg2sqKEK";
 protected-headers="v1"
From: Avital Ostromich <avital.ostromich@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: ubuntu-security-announce@lists.ubuntu.com
Message-ID: <046c7388-333d-3a14-cc54-0a1ed755841e@canonical.com>
Subject: [USN-4919-1] OpenSLP vulnerability

--1bfB8q1EpTCzQq7luxSn10Y2bfg2sqKEK
Content-Type: text/plain; charset=utf-
Content-Transfer-Encoding: quoted-printable
Content-Language: en-US

==========================================================================
Ubuntu Security Notice USN-4919-1
April 19, 2021

openslp-dfsg vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS
- Ubuntu 14.04 ESM

Summary:

OpenSLP could be made to crash or run programs as your login if it received
specially crafted network traffic.

Software Description:
- openslp-dfsg: Service Location Protocol library

Details:

It was discovered that OpenSLP did not properly validate URLs. A remote
attacker could use this issue to cause OpenSLP to crash or possibly execute
arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  libslp1                         1.2.1-11ubuntu0.16.04.2

Ubuntu 14.04 ESM:
  libslp1                         1.2.1-9ubuntu0.3+esm1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-4919-1
  CVE-2019-5544

Package Information:
  https://launchpad.net/ubuntu/+source/openslp-dfsg/1.2.1-11ubuntu0.16.04.2



--1bfB8q1EpTCzQq7luxSn10Y2bfg2sqKEK--

--K9ZxzgD7HN8XKFbxhpPrvDLlIRbuL8MUf
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEElnO/d49FoUPK9fwytGdj0GOh2+wFAmB+DIwFAwAAAAAACgkQtGdj0GOh2+wz
9ggAiJMca2J2wZjLwDmcuEP0sx8mUYH5jUTHiNW3DswNG5fCGvS7yCc91Qq88br13ovvzdmQnCok
yOkGy7kGYSDGPtIkG1CKyKNjPTAqcpO1ECoOOA8a22AdgUOt8mRyV7EB2nahz/bW5TQW7cqxri69
57KKdANTj8ki5KWHmhcsL0FrVTK0gvXZuLwdwhXv4CJ0VHsfh8Y9j3PLReVklE5b6/+R6s6pmw45
F51ahiVI1mz4pFsaFobX8WDv1PZNPTRxPgtmWieEGxUv7JKKUOCO9Ro2Hzt8Tv376NdVAazA6AzV
8eAqAgW12/QTHq32FWdwbx1X4FX1rUB5drsvntNBIA==
=llYi
-----END PGP SIGNATURE-----

--K9ZxzgD7HN8XKFbxhpPrvDLlIRbuL8MUf--


--===============6011923999438175818==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

--===============6011923999438175818==--