Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:1790-1

Опубликовано: 15 окт. 2015
Источник: suse-cvrf

Описание

Security update for icu

icu was updated to fix one security issue.

This security issue was fixed:

  • CVE-2014-9654: Insufficient size limit checks in regular expression compiler (bsc#917129).

Список пакетов

SUSE Linux Enterprise Desktop 11 SP4
icu-4.0-7.30.2
libicu-4.0-7.30.2
SUSE Linux Enterprise Server 11 SP4
libicu-4.0-7.30.2
libicu-32bit-4.0-7.30.2
libicu-doc-4.0-7.30.2
libicu-x86-4.0-7.30.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libicu-4.0-7.30.2
libicu-32bit-4.0-7.30.2
libicu-doc-4.0-7.30.2
libicu-x86-4.0-7.30.2
SUSE Linux Enterprise Software Development Kit 11 SP4
icu-4.0-7.30.2
libicu-32bit-4.0-7.30.2
libicu-devel-4.0-7.30.2
libicu-devel-32bit-4.0-7.30.2

Ссылки

Описание

The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923.

Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP4:icu-4.0-7.30.2
SUSE Linux Enterprise Desktop 11 SP4:libicu-4.0-7.30.2
SUSE Linux Enterprise Server 11 SP4:libicu-32bit-4.0-7.30.2
SUSE Linux Enterprise Server 11 SP4:libicu-4.0-7.30.2
Ссылки