Download
| Alert*
|
oval:org.secpod.oval:def:113111
libidn2 is installed oval:org.secpod.oval:def:113116 Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names . It is a standalone library, without any dependency on libidn. oval:org.secpod.oval:def:113632 Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names . It is a standalone library, without any dependency on libidn. oval:org.secpod.oval:def:113110 Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names . It is a standalone library, without any dependency on libidn. oval:org.secpod.oval:def:89050867 This update for libidn2 to version 2.2.0 fixes the following issues: - CVE-2019-12290: Fixed an improper round-trip check when converting A-labels to U-labels . - CVE-2019-18224: Fixed a heap-based buffer overflow that was caused by long domain strings . oval:org.secpod.oval:def:1700285 heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. |
