Описание
Security update for libidn
This update for libidn fixes the following issue:
- CVE-2017-14062: Prevent integer overflow in the decode_digit function that allowed remote attackers to cause a denial of service or possibly have unspecified other impact (bsc#1056450).
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.3
libidn-1.28-9.3.1
libidn-devel-1.28-9.3.1
libidn-tools-1.28-9.3.1
libidn11-1.28-9.3.1
libidn11-32bit-1.28-9.3.1
Ссылки
- E-Mail link for openSUSE-SU-2018:0891-1
- SUSE Security Ratings
Описание
Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
Затронутые продукты
openSUSE Leap 42.3:libidn-1.28-9.3.1
openSUSE Leap 42.3:libidn-devel-1.28-9.3.1
openSUSE Leap 42.3:libidn-tools-1.28-9.3.1
openSUSE Leap 42.3:libidn11-1.28-9.3.1
Ссылки
- CVE-2017-14062
- SUSE Bug 1056450
- SUSE Bug 1087709
- SUSE Bug 1118435
- SUSE Bug 1123123
- SUSE Bug 1173590