Advisories » MGASA-2017-0365

Updated libidn packages fix security vulnerability

Publication date: 09 Oct 2017
Modification date: 09 Oct 2017
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2017-14062

Description

Integer overflow in the decode_digit function in puny_decode.c in
Libidn2 before 2.0.4 allows remote attackers to cause a denial of
service or possibly have unspecified other impact. (CVE-2017-14062)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21800
• https://usn.ubuntu.com/usn/usn-3434-1/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14062

SRPMS

5/core

• libidn-1.33-1.1.mga5

6/core

• libidn-1.33-1.1.mga6