libidn2 2.0.5-1ubuntu0.3 source package in Ubuntu

Changelog

libidn2 (2.0.5-1ubuntu0.3) disco-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflow
    - debian/patches/CVE-2019-18224.patch: Restrict output length to 63
      in lib/lookup.c.
    - CVE-2019-18224
    - debian/control: returning texinfo to Build-Depends since
      for other archs than amd64 build fails with -Indep, since it
      always detect a file change (by a patch as example) and recreate
      docs.
  * SECURITY UPDATE: Domain impersonate
    - debian/patches/CVE-2019-12290.patch: Perform A-Label roundtrip for
      lookup functions by default in lib/error.c, lib/idn2.h.in,
      lib/lookup.c, src/blurbs.h, src/idn2.c, src/idn2.ggo.
    - CVE-2019-12290

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 24 Oct 2019 10:34:00 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa on 2019-10-28
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Disco updates on 2019-10-29 main misc
Disco security on 2019-10-29 main misc

Downloads

File Size SHA-256 Checksum
libidn2_2.0.5.orig.tar.gz 2.0 MiB 53f69170886f1fa6fa5b332439c7a77a7d22626a82ef17e2c1224858bb4ca2b8
libidn2_2.0.5-1ubuntu0.3.debian.tar.xz 9.8 MiB a97da8d870f10b7df27cd163ff00e31c7d8dd3154564500a6f5046a1b5afb636
libidn2_2.0.5-1ubuntu0.3.dsc 2.4 KiB 9550d553d10cc557b1835529987ddc379f42a33613187dc88a1288f25e7615ec

View changes file

Binary packages built by this source

idn2: Internationalized domain names (IDNA2008/TR46) command line tool

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This package contains the idn2 command-line tool.

idn2-dbgsym: debug symbols for idn2
libidn2-0: Internationalized domain names (IDNA2008/TR46) library

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This package contains runtime libraries.

libidn2-0-dbgsym: debug symbols for libidn2-0
libidn2-0-dev: Internationalized domain names (IDNA2008/TR46) development files [dummy]

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This is a dummy transitional package.

libidn2-dev: Internationalized domain names (IDNA2008/TR46) development files

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This package contains header files and libraries for static linking.

libidn2-doc: Internationalized domain names (IDNA2008/TR46) documentation

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This package contains programmer's manual in PDF, HTML and Info formats.