2016-07-22
ALT-BU-2016-2898-1
Branch p8 update bulletin.
Package LibreOffice updated to version 5.2-alt2 for branch p8 in task 167194.
Closed bugs
libreofficekit: hard-coded bad path
Closed vulnerabilities
Published: 2016-09-07
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-8948
idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References:
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=570e68886c41c2e765e6218cb317d9a9a447a041
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=570e68886c41c2e765e6218cb317d9a9a447a041
- openSUSE-SU-2016:1924
- openSUSE-SU-2016:1924
- openSUSE-SU-2016:2135
- openSUSE-SU-2016:2135
- DSA-3658
- DSA-3658
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- 92070
- 92070
- USN-3068-1
- USN-3068-1
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [help-libidn] 20160720 Libidn 1.33 released
- [help-libidn] 20160720 Libidn 1.33 released
Published: 2016-09-07
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-6261
The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=f20ce1128fb7f4d33297eee307dddaf0f92ac72d
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=f20ce1128fb7f4d33297eee307dddaf0f92ac72d
- openSUSE-SU-2016:2135
- openSUSE-SU-2016:2135
- DSA-3658
- DSA-3658
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- 92070
- 92070
- USN-3068-1
- USN-3068-1
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [help-libidn] 20150709 out of bounds stack read in function idna_to_ascii_4i
- [help-libidn] 20150709 out of bounds stack read in function idna_to_ascii_4i
- [help-libidn] 20160720 Libidn 1.33 released
- [help-libidn] 20160720 Libidn 1.33 released
Published: 2016-09-07
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-6262
idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References:
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60
- openSUSE-SU-2016:1924
- openSUSE-SU-2016:1924
- openSUSE-SU-2016:2135
- openSUSE-SU-2016:2135
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- 92070
- 92070
- USN-3068-1
- USN-3068-1
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [help-libidn] 20160720 Libidn 1.33 released
- [help-libidn] 20160720 Libidn 1.33 released
Published: 2016-09-07
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-6263
The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=1fbee57ef3c72db2206dd87e4162108b2f425555
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=1fbee57ef3c72db2206dd87e4162108b2f425555
- openSUSE-SU-2016:1924
- openSUSE-SU-2016:1924
- openSUSE-SU-2016:2135
- openSUSE-SU-2016:2135
- DSA-3658
- DSA-3658
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- 92070
- 92070
- USN-3068-1
- USN-3068-1
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [help-libidn] 20160720 Libidn 1.33 released
- [help-libidn] 20160720 Libidn 1.33 released
- GLSA-201908-06
- GLSA-201908-06