MGASA-2016-0269

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2016-0269.html

Import Source

https://advisories.mageia.org/MGASA-2016-0269.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2016-0269

Upstream

Published

2016-07-26T22:11:11Z

Modified

2026-04-16T06:25:57Z

Summary

Updated libidn packages fix security vulnerability

Details

Out-of-bounds stack read in libidn before 1.33 in idna_to_ascii_4i (CVE-2016-6261).

Out-of-bounds-read in libidn when reading one zero byte as input (CVE-2015-8948, CVE-2016-6262).

In libidn before 1.33, stringprep_utf8_nfkc_normalize would crash when presented with invalid UTF-8 (CVE-2016-6263).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.33-1.mga5

{
    "section": "core"
}

source

"https://advisories.mageia.org/MGASA-2016-0269.json"