SUSE-SU-2016:2079-1 Security update for libidn

This update for libidn fixes the following issues: - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 -...

[SECURITY] Fedora 23 Update: libidn-1.33-1.fc23

GNU Libidn is an implementation of the Stringprep, Punycode and IDNA specifications defined by the IETF Internationalized Domain Names IDN working group, used for internationalized domain names...

Fedora 23 : libidn (2016-610fe5f5f8)

Security fix for CVE-2016-6263, CVE-2015-8948, CVE-2016-6262, CVE-2016-6261 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for libidn FEDORA-2016-610fe5f5f8

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libidn (openSUSE-2016-925)

This libidn update to version 1.33 fixes the following issues : Security issues fixed : - CVE-2015-8948, CVE-2016-6262: Fixed an out-of-bounds-read when reading one zero byte as input bsc990189. - CVE-2016-6263: Fixed stringpreputf8nfkcnormalize to reject invalid UTF-8 bscboo990191. Included...

Debian DLA-582-1 : libidn security update

Multiple vulnerabilities have been discovered in libidn. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-8948 When idn is reading one zero byte as input an out-of-bounds-read occurred. CVE-2016-6261 An out-of-bounds stack read is exploitable in...

[SECURITY] [DLA 582-1] libidn security update

Package : libidn Version : 1.25-2+deb7u2 CVE ID : CVE-2015-8948 CVE-2016-6261 CVE-2016-6263 Multiple vulnerabilities have been discovered in libidn. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-8948 When idn is reading one zero byte as input an...

Fedora Update for libidn FEDORA-2016-42514bee97

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-582-1 libidn - security update

Bulletin has no description...

FreeBSD : libidn -- multiple vulnerabilities (cb5189eb-572f-11e6-b334-002590263bf5)

Simon Josefsson reports : libidn: Fix out-of-bounds stack read in idnatoascii4i. idn: Solve out-of-bounds-read when reading one zero byte as input. Also replaced fgets with getline. libidn: stringpreputf8nfkcnormalize reject invalid UTF-8. It was always documented to only accept UTF-8 data, but n...

libidn: denial of service

CVE-2015-8948 denial of service Solve out-of-bounds-read when reading one zero byte as input. Also replaced fgets with getline. Reported by Hanno Boeck. - CVE-2016-6261 denial of service Fix out-of-bounds stack read in idnatoascii4i. Reported by Hanno Boeck. - CVE-2016-6262 denial of service...

GNU Libidn Remote Arbitrary Code Execution Vulnerability

GNU Libidn is a package that implements string preprocessing, Punycode, and IDNA specification definitions via the IETF International Domain Name IDN. A remote arbitrary code execution vulnerability exists in GNU Libidn. An attacker could exploit this vulnerability to execute arbitrary code in th...

GNU Libidn Remote Arbitrary Code Execution Vulnerability (CNVD-2016-05808)

GNU Libidn is a package that implements string preprocessing, Punycode, and IDNA specification definitions via the IETF International Domain Name IDN. A remote arbitrary code execution vulnerability exists in GNU Libidn, which could be exploited by an attacker to execute arbitrary code in an...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : libidn (SSA:2016-210-01)

New libidn packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-210-01. The te...

GNU Libidn Remote Arbitrary Code Execution Vulnerability (CNVD-2016-05807)

GNU Libidn is a package that implements string preprocessing, Punycode, and IDNA specification definitions via the IETF International Domain Name IDN. A remote arbitrary code execution vulnerability exists in GNU Libidn, which could be exploited by an attacker to execute arbitrary code in an...

GNU Libidn Remote Arbitrary Code Execution Vulnerability (CNVD-2016-05809)

GNU Libidn is a package that implements string preprocessing, Punycode, and IDNA specification definitions via the IETF International Domain Name IDN. A remote arbitrary code execution vulnerability exists in GNU Libidn, which could be exploited by an attacker to execute arbitrary code in an...

libidn

New libidn packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libidn-1.33-i586-1slack14.2.txz: Upgraded. Fixed out-of-bounds read bugs. Fixed crashes on invalid...

MGASA-2016-0269 Updated libidn packages fix security vulnerability

Out-of-bounds stack read in libidn before 1.33 in idnatoascii4i CVE-2016-6261. Out-of-bounds-read in libidn when reading one zero byte as input CVE-2015-8948, CVE-2016-6262. In libidn before 1.33, stringpreputf8nfkcnormalize would crash when presented with invalid UTF-8 CVE-2016-6263...

Updated libidn packages fix security vulnerability

Out-of-bounds stack read in libidn before 1.33 in idnatoascii4i CVE-2016-6261. Out-of-bounds-read in libidn when reading one zero byte as input CVE-2015-8948, CVE-2016-6262. In libidn before 1.33, stringpreputf8nfkcnormalize would crash when presented with invalid UTF-8 CVE-2016-6263...

Fedora 24 : libidn (2016-42514bee97)

Security fix for CVE-2016-6263, CVE-2015-8948, CVE-2016-6262, CVE-2016-6261 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...