Updated icu package fixes security vulnerabilities

🗓️ 27 Jul 2015 17:34:09Reported by Gentoo FoundationType

Updated ICU package fixes security vulnerabilities. Heap-based buffer overflow, integer overflow, mishandles converter names with initial x- substrings

Reporter	Title	Published	Views	Family All 157
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in ICU libraries used in IBM DataPower Gateway	10 Sep 202114:15	–	ibm
IBM Security Bulletins	Security Bulletin: TADDM is vulnerable to a denial of service due to vulnerabilities in ICU4J Library	26 Apr 202314:21	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of International Components for Unicode, IBM Rational ClearQuest is vulnerable to buffer overflow.	18 Oct 202404:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway Virtual Edition uses out of date ICU libraries in open-vm-tools	2 Jun 202212:50	–	ibm
Tenable Nessus	Google Chrome < 44.0.2403.89 Multiple Vulnerabilities	8 Sep 201500:00	–	nessus
Tenable Nessus	iTunes for Windows < 12.3 Multiple Vulnerabilities	23 Oct 201500:00	–	nessus
Tenable Nessus	Apple iOS < 9.0 Multiple Vulnerabilities	15 Oct 201500:00	–	nessus
Tenable Nessus	Mac OS X < 10.11 Multiple Vulnerabilities	28 Oct 201500:00	–	nessus
Tenable Nessus	Apple iOS < 9.0 Multiple Vulnerabilities	17 Sep 201500:00	–	nessus
Tenable Nessus	Debian DSA-3315-1 : chromium-browser - security update	27 Jul 201500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	4	any	icu	52.1-2.4	icu-52.1-2.4.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
kb	www.kb.cert.org/vuls/id/602540
googlechromereleases	www.googlechromereleases.blogspot.cz/2015/07/stable-channel-update_21.html

27 Jul 2015 17:34Current

8.7High risk

Vulners AI Score8.7

CVSS 27.5

EPSS0.41904