Bug 598856

Summary:	<net-dns/libidn2-0.11 - stack underflow in 'idn2' command line tool
Product:	Gentoo Security	Reporter:	Jeroen Roovers (RETIRED) <jer>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	~2 [noglsa]
Package list:		Runtime testing required:	---

Description Jeroen Roovers (RETIRED) gentoo-dev

2016-11-03 12:36:13 UTC

Libidn2 NEWS -- History of user-visible changes.                -*- outline -*-
Copyright (C) 2011-2016 Simon Josefsson
See the end for copying conditions.

* Version 0.11 (unreleased) [alpha]

** Fix stack underflow in 'idn2' command line tool.
Reported by Hanno Böck <hanno@hboeck.de>.

Comment 1 Agostino Sarubbo gentoo-dev

2016-11-03 16:53:43 UTC

There aren't much details if it is just a programming bug or it is a security bug. But since it isn't a stable package and it is already bumped/cleaned, for me it is fine as-is.