shield Security update for libidn

slessp4-libidn-12739

This update for libidn fixes the following issues: - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input (bsc#990189) - CVE-2016-6261: Out-of-bounds stack read in idna_to_ascii_4i (bsc#990190) - CVE-2016-6263: stringprep_utf8_nfkc_normalize reject invalid UTF-8 (bsc#990191) - CVE-2015-2059: out-of-bounds read with stringprep on invalid UTF-8 (bsc#923241)

• Release Date
  Sep 12 2016
• References
  Bugzilla: 923241, 990189, 990190, 990191
  CVEs: CVE-2016-6263, CVE-2016-6262, CVE-2016-6261, CVE-2015-2059, CVE-2015-8948
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  libidn
  Support for Internationalized Domain Names (IDN)

  1.10-6.1 lock rpm lock src

  libidn-x86
  Support for Internationalized Domain Names (IDN)

  1.10-6.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  libidn
  Support for Internationalized Domain Names (IDN)

  1.10-6.1 lock rpm lock src

  libidn-32bit
  Support for Internationalized Domain Names (IDN)

  1.10-6.1 lock rpm

SUSE Linux Enterprise Server 11.4 i586

• Packages
  libidn
  Support for Internationalized Domain Names (IDN)

  1.10-6.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  libidn
  Support for Internationalized Domain Names (IDN)

  1.10-6.1 lock rpm lock src

  libidn-32bit
  Support for Internationalized Domain Names (IDN)

  1.10-6.1 lock rpm

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  libidn
  Support for Internationalized Domain Names (IDN)

  1.10-6.1 lock rpm lock src

  libidn-32bit
  Support for Internationalized Domain Names (IDN)

  1.10-6.1 lock rpm