Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 568
Alerts This Week
Warning Icon 1 568

Fedora 25 Security Advisory: mingw-libidn 1.33 DoS Crash Issues

fedora
Calendar Grey October 10, 2016
Dist Fedora Esm H88
The enhancement of mingw-libidn version 1.33 tackles significant vulnerabilities in Fedora 25, providing improved stability and robust security measures.
Update to 1.33 (#1374902,#1359147,#1359148)

Summary

GNU Libidn is an implementation of the Stringprep, Punycode and

IDNA specifications defined by the IETF Internationalized Domain

Names (IDN) working group, used for internationalized domain

names.

Update Information:

Update to 1.33 (#1374902,#1359147,#1359148)

Change Log

References


[ 1 ] Bug #1359145 - CVE-2016-6263 libidn: Crash when given invalid UTF-8 data on input https://bugzilla.redhat.com/show_bug.cgi?id=1359145 [ 2 ] Bug #1359141 - CVE-2015-8948 libidn: Out-of-bounds read due to use of fgets with fixed-size buffer https://bugzilla.redhat.com/show_bug.cgi?id=1359141 [ 3 ] Bug #1359138 - CVE-2016-6262 libidn: Out-of-bounds read when reading zero byte as input https://bugzilla.redhat.com/show_bug.cgi?id=1359138 [ 4 ] Bug #1359134 - CVE-2016-6261 libidn: Out of bounds stack read in idna_to_ascii_4i https://bugzilla.redhat.com/show_bug.cgi?id=1359134

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mingw-libidn' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-libidn
Product: Fedora 25
Version: 1.33
Release: 1.fc25
URL:
Summary: MinGW Windows Internationalized Domain Name support library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.