Publishing details

Changelog

libksba (1.2.0-2ubuntu0.2) precise-security; urgency=medium

  * SECURITY UPDATE: denial of service via decoder stack overflow
    - debian/patches/CVE-2016-4353.patch: improve error handling in
      src/ber-decoder.c.
    - CVE-2016-4353
  * SECURITY UPDATE: integer overflow in BER decoder
    - debian/patches/CVE-2016-4354-4355.patch: add overflow checks to
      src/ber-decoder.c.
    - CVE-2016-4354
    - CVE-2016-4355
  * SECURITY UPDATE: denial of service in bad encoding handling
    - debian/patches/CVE-2016-4356.patch: fix encoding of invalid utf-8
      strings in src/dn.c.
    - CVE-2016-4356
  * SECURITY UPDATE: denial of service in bad encoding handling
    - debian/patches/CVE-2016-4574.patch: fix OOB read access in
      src/dn.c.
    - CVE-2016-4574
  * SECURITY UPDATE: denial of service via TLV given length
    - debian/patches/CVE-2016-4579.patch: fix possible read access beyond
      the buffer in src/ber-help.c, src/cert.c, src/name.c, src/ocsp.c.
    - CVE-2016-4579

 -- Marc Deslauriers <email address hidden>  Fri, 13 May 2016 08:45:29 -0400

Available diffs

Builds

Built packages

Package files