Lucene search

GoogleOSV:DLA-381-1

HistoryJan 11, 2016 - 12:00 a.m.

icu - security update

2016-01-1100:00:00

Google

osv.dev

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

A vulnerability was found in ICU, a set of libraries that provides Unicode and
internationalization support. Integer overflows in the ICU layout engine made
it possible to disclose information.

For Debian 6 Squeeze, this problem has been fixed in icu version
4.4.1-8+squeeze5. We recommend you to upgrade your icu packages.

CPENameOperatorVersion
icueq4.4.1-8+squeeze4
icueq4.4.1-7
icueq4.4.1-8
icueq4.4.1-8+squeeze2
icueq4.4.1-8+squeeze3
icueq4.4.1-8+squeeze1

Name	Operator	Version
icu	eq	4.4.1-8+squeeze4
icu	eq	4.4.1-7
icu	eq	4.4.1-8
icu	eq	4.4.1-8+squeeze2
icu	eq	4.4.1-8+squeeze3
icu	eq	4.4.1-8+squeeze1

References

www.debian.org/lts/security/2016/dla-381

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

Related for OSV:DLA-381-1