portage-ng / portage / dev-libs / libical / 3.0.20-r2
portage-ng glsa
1 advisory reference dev-libs/libical · none place version 3.0.20-r2 in a vulnerable range
▸ GLSA 201904-02 Libical: Multiple vulnerabilities this version unaffected normal remote 2019-04-02

Multiple vulnerabilities have been found in Libical, the worst of which could result in a Denial of Service condition.

Announced
2019-04-02
Revised
2019-04-02
Access
remote
Bugs
#587572 #587574
Advisory
https://security.gentoo.org/glsa/201904-02

Affected packages

PackageArchVulnerableUnaffected
dev-libs/libical*< 3.0.0>= 3.0.0

Background

An Open Source implementation of the iCalendar protocols and protocol data units.

Description

Multiple vulnerabilities have been discovered in Libical. Please review the referenced CVE identifiers for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Libical users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/libical-3.0.0"

References