Hello community, here is the log from the commit of package patchinfo.5397 for openSUSE:13.2:Update checked in at 2016-08-01 01:11:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/patchinfo.5397 (Old) and /work/SRC/openSUSE:13.2:Update/.patchinfo.5397.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.5397" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo incident="5397"> <issue id="990189" tracker="bnc">VUL-1: CVE-2015-8948,CVE-2016-6262: libidn: out-of-bounds-read when reading one zero byte as input</issue> <issue id="990191" tracker="bnc">VUL-1: CVE-2016-6263: libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8</issue> <issue id="2015-8948" tracker="cve" /> <issue id="2016-6262" tracker="cve" /> <issue id="2016-6263" tracker="cve" /> <category>security</category> <rating>moderate</rating> <packager>scarabeus_iv</packager> <description> This libidn update to version 1.33 fixes the following issues: Security issues fixed: - CVE-2015-8948, CVE-2016-6262: Fixed an out-of-bounds-read when reading one zero byte as input (bsc#990189). - CVE-2016-6263: Fixed stringprep_utf8_nfkc_normalize to reject invalid UTF-8 (bsc#boo#990191). Included bugfixes: - Fixed crash in idna_to_unicode_8z8z and idna_to_unicode_8zlz (introduced in 1.31). - API and ABI is backwards compatible with the previous version. - Update gpg keyring </description> <summary>Security update for libidn</summary> </patchinfo>