Lucene search

K
redhatRedHatRHSA-2008:0090
HistoryJan 25, 2008 - 12:00 a.m.

(RHSA-2008:0090) Important: icu security update

2008-01-2500:00:00
access.redhat.com
15

0.007 Low

EPSS

Percentile

80.1%

The International Components for Unicode (ICU) library provides robust and
full-featured Unicode services.

Will Drewry reported multiple flaws in the way libicu processed certain
malformed regular expressions. If an application linked against ICU, such
as OpenOffice.org, processed a carefully crafted regular expression, it may
be possible to execute arbitrary code as the user running the application.
(CVE-2007-4770, CVE-2007-4771)

All users of icu should upgrade to these updated packages, which contain
backported patches to resolve these issues.