Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idn2 | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idn2-debuginfo | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libidn2-debuginfo | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libidn2-debugsource | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | idn2-debuginfo | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | libidn2 | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | libidn2-debuginfo | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | libidn2-debugsource | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | idn2-debuginfo | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | libidn2-debuginfo | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | libidn2-debugsource | 0:2.2.0-1.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | libidn2-devel | 0:2.2.0-1.el8 |
Vulnerabilities 1
-
Unscored —
idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
References
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1674201
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_3621.json
-
report
https://access.redhat.com/security/cve/CVE-2019-18224
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1764780
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-18224
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-18224