libidn2 2.0.5-1ubuntu0.3 source package in Ubuntu

Changelog

libidn2 (2.0.5-1ubuntu0.3) disco-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflow
    - debian/patches/CVE-2019-18224.patch: Restrict output length to 63
      in lib/lookup.c.
    - CVE-2019-18224
    - debian/control: returning texinfo to Build-Depends since
      for other archs than amd64 build fails with -Indep, since it
      always detect a file change (by a patch as example) and recreate
      docs.
  * SECURITY UPDATE: Domain impersonate
    - debian/patches/CVE-2019-12290.patch: Perform A-Label roundtrip for
      lookup functions by default in lib/error.c, lib/idn2.h.in,
      lib/lookup.c, src/blurbs.h, src/idn2.c, src/idn2.ggo.
    - CVE-2019-12290

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 24 Oct 2019 10:34:00 -0300