libksba (1.2.0-2ubuntu0.2) precise-security; urgency=medium
* SECURITY UPDATE: denial of service via decoder stack overflow
- debian/patches/CVE-2016-4353.patch: improve error handling in
src/ber-decoder.c.
- CVE-2016-4353
* SECURITY UPDATE: integer overflow in BER decoder
- debian/patches/CVE-2016-4354-4355.patch: add overflow checks to
src/ber-decoder.c.
- CVE-2016-4354
- CVE-2016-4355
* SECURITY UPDATE: denial of service in bad encoding handling
- debian/patches/CVE-2016-4356.patch: fix encoding of invalid utf-8
strings in src/dn.c.
- CVE-2016-4356
* SECURITY UPDATE: denial of service in bad encoding handling
- debian/patches/CVE-2016-4574.patch: fix OOB read access in
src/dn.c.
- CVE-2016-4574
* SECURITY UPDATE: denial of service via TLV given length
- debian/patches/CVE-2016-4579.patch: fix possible read access beyond
the buffer in src/ber-help.c, src/cert.c, src/name.c, src/ocsp.c.
- CVE-2016-4579
Date: 2016-05-13 12:58:42.184950+00:00
Changed-By: Marc Deslauriers <[email protected]>
https://launchpad.net/ubuntu/+source/libksba/1.2.0-2ubuntu0.2
Sorry, changesfile not available.
--
Precise-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
