598856 – <net-dns/libidn2-0.11 - stack underflow in 'idn2' command line tool

Bug 598856 - <net-dns/libidn2-0.11 - stack underflow in 'idn2' command line tool

Summary: <net-dns/libidn2-0.11 - stack underflow in 'idn2' command line tool

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	~2 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2016-11-03 12:36 UTC by Jeroen Roovers (RETIRED)
Modified:	2016-11-03 16:53 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Jeroen Roovers (RETIRED) gentoo-dev

2016-11-03 12:36:13 UTC

Libidn2 NEWS -- History of user-visible changes.                -*- outline -*-
Copyright (C) 2011-2016 Simon Josefsson
See the end for copying conditions.

* Version 0.11 (unreleased) [alpha]

** Fix stack underflow in 'idn2' command line tool.
Reported by Hanno Böck <hanno@hboeck.de>.

Comment 1 Agostino Sarubbo gentoo-dev

2016-11-03 16:53:43 UTC

There aren't much details if it is just a programming bug or it is a security bug. But since it isn't a stable package and it is already bumped/cleaned, for me it is fine as-is.