Re: Bug#1036740: Fix for CVE-2022-23123 causes afpd segfault with valid metadata

2023-06-01 Thread Markus Koschany
Version: 3.1.12~ds-3+deb10u2 Thanks for your report and the detailed replies. I could reproduce the problem and identify a wrongly applied commit in libatalk/adouble/ad_open.c. After applying a new patch to fix it, the AppleDouble v2 format seems to work as intended again. I'm going to close this

Re: Bug#1036740: Fix for CVE-2022-23123 causes afpd segfault with valid metadata

2023-05-25 Thread Markus Koschany
Hello Daniel, Am Donnerstag, dem 25.05.2023 um 08:02 +0200 schrieb Salvatore Bonaccorso: > > > > These two commits in upstream addressed this: > > https://github.com/Netatalk/netatalk/commit/9d0c21298363e8174cdfca657e66c4d10819507b > > https://github.com/Netatalk/netatalk/commit/4140e5495bac42ecb

Re: Bug#1036740: Fix for CVE-2022-23123 causes afpd segfault with valid metadata

2023-05-24 Thread Salvatore Bonaccorso
Control: forwarded -1 https://github.com/Netatalk/netatalk/pull/174 Hi Daniel, On Wed, May 24, 2023 at 10:50:41PM -0700, Daniel Markstedt wrote: > Package: netatalk > Version: 3.1.12~ds-3+deb10u1 > X-Debbugs-Cc: t...@security.debian.org > > The code that addressed CVE-2022-23123 introduced apple