Vulnerability Bulletins

DSA-4541 libapreq2 - security update

   
Affected software Debian
 
Max Kellermann reported a NULL pointer dereference flaw in libapreq2, ageneric Apache request library, allowing a remote attacker to cause adenial of service against an application using the library (applicationcrash) if an invalid nested multipart body is processed.

More info:

https://www.debian.org/security/2019/dsa-4541