- libidn 1.33 bnc#990189 CVE-2015-8948 CVE-2016-6262 bnc#990191 CVE-2016-6263:

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libidn?expand=0&rev=47
This commit is contained in:
Tomáš Chvátal 2016-07-22 08:22:22 +00:00 committed by Git OBS Bridge
parent bc1f774d3e
commit f0740cc3f6

View File

@ -1,7 +1,7 @@
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Jul 20 21:01:13 UTC 2016 - astieger@suse.com Wed Jul 20 21:01:13 UTC 2016 - astieger@suse.com
- libidn 1.33 bnc#990189 CVE-2015-8948 CVE-2016-6262: - libidn 1.33 bnc#990189 CVE-2015-8948 CVE-2016-6262 bnc#990191 CVE-2016-6263:
* libidn: Fix out-of-bounds stack read in idna_to_ascii_4i. * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
* idn: Solve out-of-bounds-read when reading one zero byte as input. * idn: Solve out-of-bounds-read when reading one zero byte as input.
* libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8. * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.