Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:0458-1

Опубликовано: 02 мар. 2015
Источник: suse-cvrf

Описание

Security update for icu

icu was updated to fix one security issue.

This security issue was fixed:

  • CVE-2014-9654: Insufficient size limit checks in regular expression compiler (bnc#917129).

Список пакетов

SUSE Linux Enterprise Desktop 12
icu-52.1-7.1
libicu52_1-52.1-7.1
libicu52_1-32bit-52.1-7.1
libicu52_1-data-52.1-7.1
SUSE Linux Enterprise Server 12
libicu-doc-52.1-7.1
libicu52_1-52.1-7.1
libicu52_1-32bit-52.1-7.1
libicu52_1-data-52.1-7.1
SUSE Linux Enterprise Server for SAP Applications 12
libicu-doc-52.1-7.1
libicu52_1-52.1-7.1
libicu52_1-32bit-52.1-7.1
libicu52_1-data-52.1-7.1
SUSE Linux Enterprise Software Development Kit 12
libicu-devel-52.1-7.1
SUSE Linux Enterprise Workstation Extension 12
icu-52.1-7.1

Ссылки

Описание

The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923.

Затронутые продукты
SUSE Linux Enterprise Desktop 12:icu-52.1-7.1
SUSE Linux Enterprise Desktop 12:libicu52_1-32bit-52.1-7.1
SUSE Linux Enterprise Desktop 12:libicu52_1-52.1-7.1
SUSE Linux Enterprise Desktop 12:libicu52_1-data-52.1-7.1
Ссылки