shield Security update for libidn

SUSE-SLE-SERVER-12-SP1-2016-1228

This update for libidn fixes the following issues: - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input (bsc#990189) - CVE-2016-6261: Out-of-bounds stack read in idna_to_ascii_4i (bsc#990190) - CVE-2016-6263: stringprep_utf8_nfkc_normalize reject invalid UTF-8 (bsc#990191) - CVE-2015-2059: out-of-bounds read with stringprep on invalid UTF-8 (bsc#923241)

• Release Date
  Aug 16 2016
• References
  Bugzilla: 923241, 990189, 990190, 990191
  CVEs: CVE-2016-6263, CVE-2016-6262, CVE-2016-6261, CVE-2015-2059, CVE-2015-8948
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.1 ppc64le

• Packages
  libidn
  Support for Internationalized Domain Names (IDN)

  1.28-4.1

  lock src

  libidn-tools
  Command line utility to convert Int. Domain Names

  1.28-4.1

  lock rpm

  libidn11
  Support for Internationalized Domain Names (IDN)

  1.28-4.1

  lock rpm

SUSE Linux Enterprise Server 12.1 s390x

• Packages
  libidn
  Support for Internationalized Domain Names (IDN)

  1.28-4.1

  lock src

  libidn-tools
  Command line utility to convert Int. Domain Names

  1.28-4.1

  lock rpm

  libidn11
  Support for Internationalized Domain Names (IDN)

  1.28-4.1

  lock rpm

  libidn11-32bit
  Support for Internationalized Domain Names (IDN)

  1.28-4.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64

• Packages
  libidn
  Support for Internationalized Domain Names (IDN)

  1.28-4.1

  lock src

  libidn-tools
  Command line utility to convert Int. Domain Names

  1.28-4.1

  lock rpm

  libidn11
  Support for Internationalized Domain Names (IDN)

  1.28-4.1

  lock rpm

  libidn11-32bit
  Support for Internationalized Domain Names (IDN)

  1.28-4.1

  lock rpm