Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:1090-1

Опубликовано: 18 апр. 2016
Источник: suse-cvrf

Описание

Security update for icu

This update for icu fixes the following issue:

The previous patch for CVE-2014-9654 was incorrect and lead to non-working regular expressions. This update fixes this problem (bsc#952260)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
libicu-4.0-38.1
libicu-32bit-4.0-38.1
libicu-doc-4.0-38.1
libicu-x86-4.0-38.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libicu-4.0-38.1
libicu-32bit-4.0-38.1
libicu-doc-4.0-38.1
libicu-x86-4.0-38.1
SUSE Linux Enterprise Software Development Kit 11 SP4
icu-4.0-38.1
libicu-32bit-4.0-38.1
libicu-devel-4.0-38.1
libicu-devel-32bit-4.0-38.1

Ссылки

Описание

The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libicu-32bit-4.0-38.1
SUSE Linux Enterprise Server 11 SP4:libicu-4.0-38.1
SUSE Linux Enterprise Server 11 SP4:libicu-doc-4.0-38.1
SUSE Linux Enterprise Server 11 SP4:libicu-x86-4.0-38.1
Ссылки