Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4314 > unrolled thread

Re: curl security issue? - [SECURITY NOTICE] libidn with bad UTF8 input

Back to article view | Back to linux.debian.security

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Re: curl security issue? - [SECURITY NOTICE] libidn with bad UTF8  input francois@avalenn.eu - 2015-07-02 14:30 +0200

#4314 — Re: curl security issue? - [SECURITY NOTICE] libidn with bad UTF8 input

On Wed, Jul 01, 2015 at 08:21:17PM +0000, Patrick Schleizer wrote:
> Are you aware of this already?
> 
> [SECURITY NOTICE] libidn with bad UTF8 input
> 
> http://curl.haxx.se/mail/lib-2015-06/0143.html

Out of curiosity, is it related to
https://security-tracker.debian.org/tracker/CVE-2015-2059 ?

I find the answer to this ticket a bit concise. Indeed it can be
considered as a non-important vulnerability on libidn but it seems to
me that it can trigger several more important in reverse-depends (as
it seems to be the case for curl).

François.


-- 
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: https://lists.debian.org/20150702120312.GB8358@fjo-extia-HPdeb.nsn-net.net

[toc] | [standalone]

Back to top | Article view | linux.debian.security

csiph-web