Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 26: 2017-fe4f93fde4 Moderate: Libidn2 Integer Overflow Fixes

fedora
Calendar Grey September 8, 2017
Dist Fedora Esm H88
Fedora 26 security patch released, correcting an integer overflow vulnerability in libidn2, alongside numerous enhancements and bug resolutions.
Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * ...

Summary

Libidn2 is an implementation of the IDNA2008 specifications in RFC

5890, 5891, 5892 and 5893 for internationalized domain names (IDN).

It is a standalone library, without any dependency on libidn.

Libidn2 2.0.4 (released 2017-08-30) =================================== * Fix

integer overflow in bidi.c/_isBidi() * Fix integer overflow in

puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free()

* Update fuzzer corpora

[ 1 ] Bug #1486883 - CVE-2017-14061 CVE-2017-14062 mingw-libidn2: various flaws [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1486883

su -c 'dnf upgrade mingw-libidn2' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Product: Fedora 26
Version: 2.0.4
Release: 1.fc26
Summary: MinGW Windows Internationalized Domain Name 2008 support library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here