libidn2 2.0.4-1.1ubuntu0.2 source package in Ubuntu

Changelog

libidn2 (2.0.4-1.1ubuntu0.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflow
    - debian/patches/CVE-2019-18224.patch: Restrict output length to 63
      in lib/lookup.c.
    - CVE-2019-18224
  * SECURITY UPDATE: Domain impersonate
    - debian/patches/CVE-2019-12290.patch: Perform A-Label roundtrip for
      lookup functions by default in lib/error.c, lib/idn2.h.in,
      lib/lookup.c, src/blurbs.h, src/idn2.c, src/idn2.ggo.
    - CVE-2019-12290

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 24 Oct 2019 15:02:27 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main misc
Bionic security main misc

Downloads

File Size SHA-256 Checksum
libidn2_2.0.4.orig.tar.gz 1.9 MiB 644b6b03b285fb0ace02d241d59483d98bc462729d8bb3608d5cad5532f3d2f0
libidn2_2.0.4-1.1ubuntu0.2.debian.tar.xz 9.8 MiB 45c587e0bf489b0367a7a1c2eadbd2efcc774c035ef4868c95ea5b0e0f399be2
libidn2_2.0.4-1.1ubuntu0.2.dsc 2.3 KiB 013191e4a413de9928b5f76b2ab7237055d2e51ed1f82c7bd5ddddff6615d7c8

View changes file

Binary packages built by this source

idn2: Internationalized domain names (IDNA2008/TR46) command line tool

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This package contains the idn2 command-line tool.

idn2-dbgsym: debug symbols for idn2
libidn2-0: Internationalized domain names (IDNA2008/TR46) library

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This package contains runtime libraries.

libidn2-0-dbgsym: debug symbols for libidn2-0
libidn2-0-dev: Internationalized domain names (IDNA2008/TR46) development files [dummy]

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This is a dummy transitional package.

libidn2-dev: Internationalized domain names (IDNA2008/TR46) development files

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This package contains header files and libraries for static linking.

libidn2-doc: Internationalized domain names (IDNA2008/TR46) documentation

 Libidn2 implements the revised algorithm for internationalized domain
 names called IDNA2008/TR46.
 .
 This package contains programmer's manual in PDF, HTML and Info formats.