[SECURITY] [DLA 141-1] libksba security update

2015-01-2823:06:06

lists.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.5%

JSON

Package : libksba
Version : 1.0.7-2+deb6u1
CVE ID : CVE-2014-9087

A vulnerability has been fixed in the libksba X.509 and CMS support library:

CVE-2014-9087

Fix buffer overflow in ksba_oid_to_str reported by Hanno Böck.

We recommend that you upgrade your libksba packages.

OSVersionArchitecturePackageVersionFilename
Debian6alllibksba8< 1.0.7-2+deb6u1libksba8_1.0.7-2+deb6u1_all.deb
Debian6alllibksba-dev< 1.0.7-2+deb6u1libksba-dev_1.0.7-2+deb6u1_all.deb
Debian6alllibksba< 1.0.7-2+deb6u1libksba_1.0.7-2+deb6u1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	all	libksba8	< 1.0.7-2+deb6u1	libksba8_1.0.7-2+deb6u1_all.deb
Debian	6	all	libksba-dev	< 1.0.7-2+deb6u1	libksba-dev_1.0.7-2+deb6u1_all.deb
Debian	6	all	libksba	< 1.0.7-2+deb6u1	libksba_1.0.7-2+deb6u1_all.deb