Ubuntu Security Notice 3421-1 - It was discovered that Libidn2 incorrectly handled certain input. A remote attacker could possibly use this issue to cause Libidn2 to crash, resulting in a denial of service.
6ae7719d16a32671a0c9681af049b687e272cc35aaba6ec3ad7821b5df336045
==========================================================================
Ubuntu Security Notice USN-3421-1
September 18, 2017
libidn2-0 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.04
Summary:
Libidn2 could be made to crash if it received specially crafted
input.
Software Description:
- libidn2-0: Internationalized domain names (IDNA2008) library
Details:
It was discovered that Libidn2 incorrectly handled certain input. A
remote attacker could possibly use this issue to cause Libidn2 to
crash, resulting in a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 17.04:
A idn2A A A A A A A A A A A A A A A A A A A A A A A A A A A A 0.16-1ubuntu0.1
A libidn2-0A A A A A A A A A A A A A A A A A A A A A A A 0.16-1ubuntu0.1
In general, a standard system update will make all the necessary
changes.
References:
A https://www.ubuntu.com/usn/usn-3421-1
A CVE-2017-14062
Package Information:
A https://launchpad.net/ubuntu/+source/libidn2-0/0.16-1ubuntu0.1