SUSE-SU-2025:02079-1

Опубликовано: 24 июн. 2025

Источник: suse-cvrf

Описание

Security update for icu

This update for icu fixes the following issues:

CVE-2025-5222: Stack buffer overflow in the SRBRoot:addTag function (bsc#1243721).

Список пакетов

Container suse/postgres:16

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Container suse/postgres:latest

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Container suse/sle-micro/5.1/toolbox:latest

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Container suse/sle-micro/5.2/toolbox:latest

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Container suse/sle-micro/5.3/toolbox:latest

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Container suse/sle-micro/5.4/toolbox:latest

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Container suse/sle-micro/5.5/toolbox:latest

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Image SLES15-SP7-BYOS-Azure

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Image SLES15-SP7-HPC-Azure

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Image SLES15-SP7-HPC-BYOS-Azure

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Enterprise Storage 7.1

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu-suse65_1-32bit-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu-suse65_1-32bit-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Micro 5.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Micro 5.2

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Micro 5.3

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Micro 5.4

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Module for Package Hub 15 SP6

icu-65.1-150200.4.15.1

SUSE Linux Enterprise Module for Package Hub 15 SP7

icu-65.1-150200.4.15.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu-suse65_1-32bit-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Server 15 SP5-LTSS

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu-suse65_1-32bit-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Manager Proxy 4.3

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

SUSE Manager Server 4.3

libicu-devel-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

openSUSE Leap 15.6

icu-65.1-150200.4.15.1

libicu-devel-65.1-150200.4.15.1

libicu-devel-32bit-65.1-150200.4.15.1

libicu-doc-65.1-150200.4.15.1

libicu-suse65_1-65.1-150200.4.15.1

libicu-suse65_1-32bit-65.1-150200.4.15.1

libicu65_1-bedata-65.1-150200.4.15.1

libicu65_1-ledata-65.1-150200.4.15.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-202502079-1/
Link for SUSE-SU-2025:02079-1
https://lists.suse.com/pipermail/sle-updates/2025-June/040452.html
E-Mail link for SUSE-SU-2025:02079-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1161007
SUSE Bug 1161007
https://bugzilla.suse.com/1167603
SUSE Bug 1167603
https://bugzilla.suse.com/1193951
SUSE Bug 1193951
https://bugzilla.suse.com/1243721
SUSE Bug 1243721
https://www.suse.com/security/cve/CVE-2020-21913/
SUSE CVE CVE-2020-21913 page
https://www.suse.com/security/cve/CVE-2025-5222/
SUSE CVE CVE-2025-5222 page

Описание

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

Затронутые продукты

Container suse/postgres:16:libicu-suse65_1-65.1-150200.4.15.1

Container suse/postgres:16:libicu65_1-ledata-65.1-150200.4.15.1

Container suse/postgres:latest:libicu-suse65_1-65.1-150200.4.15.1

Container suse/postgres:latest:libicu65_1-ledata-65.1-150200.4.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-21913.html
CVE-2020-21913
https://bugzilla.suse.com/1193951
SUSE Bug 1193951

Описание

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Затронутые продукты

Container suse/postgres:16:libicu-suse65_1-65.1-150200.4.15.1

Container suse/postgres:16:libicu65_1-ledata-65.1-150200.4.15.1

Container suse/postgres:latest:libicu-suse65_1-65.1-150200.4.15.1

Container suse/postgres:latest:libicu65_1-ledata-65.1-150200.4.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-5222.html
CVE-2025-5222
https://bugzilla.suse.com/1243721
SUSE Bug 1243721

SUSE-SU-2025:02079-1

Описание

Список пакетов

Container suse/postgres:16

Container suse/postgres:latest

Container suse/sle-micro/5.1/toolbox:latest

Container suse/sle-micro/5.2/toolbox:latest

Container suse/sle-micro/5.3/toolbox:latest

Container suse/sle-micro/5.4/toolbox:latest

Container suse/sle-micro/5.5/toolbox:latest

Image SLES15-SP7-BYOS-Azure

Image SLES15-SP7-HPC-Azure

Image SLES15-SP7-HPC-BYOS-Azure

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Module for Basesystem 15 SP6

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Module for Package Hub 15 SP6

SUSE Linux Enterprise Module for Package Hub 15 SP7

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Manager Proxy 4.3

SUSE Manager Server 4.3

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2020-21913

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-5222

Описание

Затронутые продукты

Ссылки