Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:2318-1

Опубликовано: 31 авг. 2017
Источник: suse-cvrf

Описание

Security update for icu

icu was updated to fix two security issues.

These security issues were fixed:

  • CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) used an integer data type that is inconsistent with a header file, which allowed remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text (bsc#929629).
  • CVE-2014-8146: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) did not properly track directionally isolated pieces of text, which allowed remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text (bsc#929629).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP2
icu-52.1-8.3.1
libicu52_1-52.1-8.3.1
libicu52_1-32bit-52.1-8.3.1
libicu52_1-data-52.1-8.3.1
SUSE Linux Enterprise Desktop 12 SP3
icu-52.1-8.3.1
libicu52_1-52.1-8.3.1
libicu52_1-32bit-52.1-8.3.1
libicu52_1-data-52.1-8.3.1
SUSE Linux Enterprise Server 12 SP2
libicu-doc-52.1-8.3.1
libicu52_1-52.1-8.3.1
libicu52_1-32bit-52.1-8.3.1
libicu52_1-data-52.1-8.3.1
SUSE Linux Enterprise Server 12 SP3
libicu-doc-52.1-8.3.1
libicu52_1-52.1-8.3.1
libicu52_1-32bit-52.1-8.3.1
libicu52_1-data-52.1-8.3.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libicu-doc-52.1-8.3.1
libicu52_1-52.1-8.3.1
libicu52_1-data-52.1-8.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libicu-doc-52.1-8.3.1
libicu52_1-52.1-8.3.1
libicu52_1-32bit-52.1-8.3.1
libicu52_1-data-52.1-8.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libicu-doc-52.1-8.3.1
libicu52_1-52.1-8.3.1
libicu52_1-32bit-52.1-8.3.1
libicu52_1-data-52.1-8.3.1
SUSE Linux Enterprise Software Development Kit 12 SP2
libicu-devel-52.1-8.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libicu-devel-52.1-8.3.1
SUSE Linux Enterprise Workstation Extension 12 SP2
icu-52.1-8.3.1
SUSE Linux Enterprise Workstation Extension 12 SP3
icu-52.1-8.3.1

Ссылки

Описание

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:icu-52.1-8.3.1
SUSE Linux Enterprise Desktop 12 SP2:libicu52_1-32bit-52.1-8.3.1
SUSE Linux Enterprise Desktop 12 SP2:libicu52_1-52.1-8.3.1
SUSE Linux Enterprise Desktop 12 SP2:libicu52_1-data-52.1-8.3.1
Ссылки

Описание

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:icu-52.1-8.3.1
SUSE Linux Enterprise Desktop 12 SP2:libicu52_1-32bit-52.1-8.3.1
SUSE Linux Enterprise Desktop 12 SP2:libicu52_1-52.1-8.3.1
SUSE Linux Enterprise Desktop 12 SP2:libicu52_1-data-52.1-8.3.1
Ссылки