ALT-PU-2026-11039

Низкий

ALT-PU-2026-11039: package libidn update to version 1.44-alt1

Источник

errata.altlinux.org

Дата публикации

20.07.2026

Дата обновления

20.07.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades libidn to version 1.44-alt1.

Устраненные уязвимости1

CVE-2026-57053

Низкий 2.5

Дата публикации: 23.06.2026

CWE-1284

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

CVSS 3.1

Низкий 2.5

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack vector: Local
Complexity: High
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: None

Ссылки

CVE-2026-57053 https://nvd.nist.gov/vuln/detail/CVE-2026-57053

Ссылки1

ALT-PU-2026-11039 https://errata.altlinux.org/ALT-PU-2026-11039

Связанные уязвимости

CVE-2026-57053

CVSS3: 2.5

ubuntu

5 месяцев назад

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

CVE-2026-57053

CVSS3: 2.9

redhat

5 месяцев назад

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

CVE-2026-57053

CVSS3: 2.5

nvd

5 месяцев назад

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

CVE-2026-57053

CVSS3: 2.5

debian

5 месяцев назад

GNU libidn before 1.44 is prone to out-of-bounds reads ofuninitialized ...

openSUSE-SU-2026:21758-1

suse-cvrf

2 месяца назад

Security update for libidn