File _patchinfo of Package patchinfo.5397

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.5397

<patchinfo incident="5397">
  <issue id="990189" tracker="bnc">VUL-1: CVE-2015-8948,CVE-2016-6262: libidn: out-of-bounds-read when reading one zero byte as input</issue>
  <issue id="990191" tracker="bnc">VUL-1: CVE-2016-6263: libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8</issue>
  <issue id="2015-8948" tracker="cve" />
  <issue id="2016-6262" tracker="cve" />
  <issue id="2016-6263" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>scarabeus_iv</packager>
  <description>
This libidn update to version 1.33 fixes the following issues:

Security issues fixed:
- CVE-2015-8948, CVE-2016-6262: Fixed an out-of-bounds-read when reading one zero byte as input (bsc#990189).
- CVE-2016-6263: Fixed stringprep_utf8_nfkc_normalize to reject invalid UTF-8 (bsc#boo#990191).

Included bugfixes:
- Fixed crash in idna_to_unicode_8z8z and idna_to_unicode_8zlz (introduced in 1.31).
- API and ABI is backwards compatible with the previous version.
- Update gpg keyring
</description>
  <summary>Security update for libidn</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.5397

Places