Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.6
Red Hat libidn2 updated to stop possible exploits
published 2 years ago
Summary
The libidn2 library and its related debug packages from Red Hat have been updated to fix bugs that could be used by attackers. These components handle internationalized domain names, so a flaw could affect web services and applications that rely on them. Apply the latest Red Hat updates as soon as possible to keep your systems secure.
What to do
- Update redhat idn2 to version 0:2.2.0-1.el8.
- Update redhat idn2-debuginfo to version 0:2.2.0-1.el8.
- Update redhat libidn2-debuginfo to version 0:2.2.0-1.el8.
- Update redhat libidn2-debugsource to version 0:2.2.0-1.el8.
- Update redhat libidn2 to version 0:2.2.0-1.el8.
- Update redhat libidn2-devel to version 0:2.2.0-1.el8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:8::appstream | redhat | idn2 |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::appstream | redhat | idn2-debuginfo |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::appstream | redhat | libidn2-debuginfo |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::appstream | redhat | libidn2-debugsource |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::baseos | redhat | idn2-debuginfo |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::baseos | redhat | libidn2 |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::baseos | redhat | libidn2-debuginfo |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::baseos | redhat | libidn2-debugsource |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::crb | redhat | idn2-debuginfo |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::crb | redhat | libidn2-debuginfo |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::crb | redhat | libidn2-debugsource |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
| Red Hat:enterprise_linux:8::crb | redhat | libidn2-devel |
< 0:2.2.0-1.el8 Fix: upgrade to 0:2.2.0-1.el8
|
Original advisory text
Red Hat Bug Fix Advisory: libidn2 bug fix and enhancement update
References
- https://access.redhat.com/errata/RHBA-2019:3621 Vendor Advisory
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.... Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1674201 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_3621.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2019-18224 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1764780 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2019-18224 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-18224 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published16 Sep 2024
Updated21 Oct 2026
First seen21 Oct 2026
Sources
RHBA-2019:3621 · OSV
Track software like this
Free during beta