openSUSE-SU-2019:2613-1

Details

This update for libidn2 to version 2.2.0 fixes the following issues:

CVE-2019-12290: Fixed an improper round-trip check when converting A-labels to U-labels (bsc#1154884).
CVE-2019-18224: Fixed a heap-based buffer overflow that was caused by long domain strings (bsc#1154887).

This update was imported from the SUSE:SLE-15:Update update project.

Affected Packages

libidn2

openSUSE Leap 15.0

Fixed in:

2.2.0-lp150.2.3.1

libidn2-0

openSUSE Leap 15.0

Fixed in:

2.2.0-lp150.2.3.1

libidn2-0-32bit

openSUSE Leap 15.0

Fixed in:

2.2.0-lp150.2.3.1

libidn2-devel

openSUSE Leap 15.0

Fixed in:

2.2.0-lp150.2.3.1

libidn2-lang

openSUSE Leap 15.0

Fixed in:

2.2.0-lp150.2.3.1

libidn2-tools

openSUSE Leap 15.0

Fixed in:

2.2.0-lp150.2.3.1

References