Re: curl security issue? - [SECURITY NOTICE] libidn with bad UTF8 input

From	francois@avalenn.eu
Newsgroups	linux.debian.security
Subject	Re: curl security issue? - [SECURITY NOTICE] libidn with bad UTF8 input
Date	2015-07-02 14:30 +0200
Message-ID	<pHLMS-2Cb-23@gated-at.bofh.it> (permalink)
References	<pHwNP-1lK-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Wed, Jul 01, 2015 at 08:21:17PM +0000, Patrick Schleizer wrote:
> Are you aware of this already?
> 
> [SECURITY NOTICE] libidn with bad UTF8 input
> 
> http://curl.haxx.se/mail/lib-2015-06/0143.html

Out of curiosity, is it related to
https://security-tracker.debian.org/tracker/CVE-2015-2059 ?

I find the answer to this ticket a bit concise. Indeed it can be
considered as a non-important vulnerability on libidn but it seems to
me that it can trigger several more important in reverse-depends (as
it seems to be the case for curl).

François.

-- 
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: https://lists.debian.org/20150702120312.GB8358@fjo-extia-HPdeb.nsn-net.net

Back to linux.debian.security | Previous | Next | Find similar | Unroll thread

Thread

Re: curl security issue? - [SECURITY NOTICE] libidn with bad UTF8  input francois@avalenn.eu - 2015-07-02 14:30 +0200

csiph-web