UbuntuUpdates.org

Package "libidn"

Name: libidn

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Command line interface to GNU Libidn

Latest version: 1.42-1ubuntu0.1
Release: noble (24.04)
Level: updates
Repository: universe

Links



Other versions of "libidn" in Noble

Repository Area Version
base universe 1.42-1build1
base main 1.42-1build1
security main 1.42-1ubuntu0.1
security universe 1.42-1ubuntu0.1
updates main 1.42-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.42-1ubuntu0.1 2026-07-09 17:08:29 UTC

  libidn (1.42-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: OOB of uninitialized memory
    - debian/patches/CVE-2026-57053.patch: Guard against read-out-bounds on some
      xn-- strings in lib/idna.c.
    - CVE-2026-57053

 -- Marc Deslauriers <email address hidden> Tue, 07 Jul 2026 09:12:53 -0400

CVE-2026-57053 GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_intern



About   -   Send Feedback to @ubuntu_updates