libksba 1.3.0-3ubuntu0.14.04.2 source package in Ubuntu

Changelog

libksba (1.3.0-3ubuntu0.14.04.2) trusty-security; urgency=medium

  * SECURITY UPDATE: denial of service via decoder stack overflow
    - debian/patches/CVE-2016-4353.patch: improve error handling in
      src/ber-decoder.c.
    - CVE-2016-4353
  * SECURITY UPDATE: integer overflow in BER decoder
    - debian/patches/CVE-2016-4354-4355.patch: add overflow checks to
      src/ber-decoder.c.
    - CVE-2016-4354
    - CVE-2016-4355
  * SECURITY UPDATE: denial of service in bad encoding handling
    - debian/patches/CVE-2016-4356.patch: fix encoding of invalid utf-8
      strings in src/dn.c.
    - CVE-2016-4356
  * SECURITY UPDATE: denial of service in bad encoding handling
    - debian/patches/CVE-2016-4574.patch: fix OOB read access in
      src/dn.c.
    - CVE-2016-4574
  * SECURITY UPDATE: denial of service via TLV given length
    - debian/patches/CVE-2016-4579.patch: fix possible read access beyond
      the buffer in src/ber-help.c, src/cert.c, src/name.c, src/ocsp.c.
    - CVE-2016-4579

 -- Marc Deslauriers <email address hidden>  Fri, 13 May 2016 08:39:32 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates main libs
Trusty security main libs

Downloads

File Size SHA-256 Checksum
libksba_1.3.0.orig.tar.bz2 610.1 KiB 5a61eed50550d4d0dcb47457ce7b6a90f8e719d42a3b25f7e79333e8cd721971
libksba_1.3.0-3ubuntu0.14.04.2.debian.tar.gz 20.7 KiB eeaf01b5c0a939f6984a74da57dcdc8663c556501e24c3f41670ef8bdce18d30
libksba_1.3.0-3ubuntu0.14.04.2.dsc 2.2 KiB 1e61c2b3659098d4da973ce37a354fd8a672f3387f79903dc5d9f1c3fe706657

View changes file

Binary packages built by this source

libksba-dev: X.509 and CMS support library - development files

 KSBA (pronounced Kasbah) is a library to make X.509 certificates as
 well as the CMS easily accessible by other applications. Both
 specifications are building blocks of S/MIME and TLS.
 .
 KSBA provides these subsystems: ASN.1 Parser, BER Decoder, BER
 Encoder, Certificate Handling and CMS Handling.
 .
 This package contains the development library files.

libksba8: X.509 and CMS support library

 KSBA (pronounced Kasbah) is a library to make X.509 certificates as
 well as the CMS easily accessible by other applications. Both
 specifications are building blocks of S/MIME and TLS.
 .
 KSBA provides these subsystems: ASN.1 Parser, BER Decoder, BER
 Encoder, Certificate Handling and CMS Handling.
 .
 This package contains the runtime library files.

libksba8-dbgsym: debug symbols for package libksba8

 KSBA (pronounced Kasbah) is a library to make X.509 certificates as
 well as the CMS easily accessible by other applications. Both
 specifications are building blocks of S/MIME and TLS.
 .
 KSBA provides these subsystems: ASN.1 Parser, BER Decoder, BER
 Encoder, Certificate Handling and CMS Handling.
 .
 This package contains the runtime library files.