openSUSE: Security Advisory for nodejs18 (SUSE-SU-2023:0419-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for libqt5 (SUSE-SU-2023:4951-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 : Optional update for icu (SUSE-SU-SUSE-OU-2024:0647-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-OU-2024:0647-1 advisory. - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a...

SUSE-OU-2024:0647-1 Optional update for icu

This update for icu fixes the following issue: - No source changes, this just synchronizes the changelog with the latest implemented changes and correspondent ids...

PT-2024-40707 · Icu · Icu

Name of the Vulnerable Software and Affected Versions: icu 75 affected versions not specified Description: The issue is related to a stack-buffer-overflow crash in the icu 75 library, specifically in the TZDBTimeZoneNames class. The crash occurs when calling the getMetaZoneNames and...

SUSE-SU-2023:4951-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-37369: Fixed buffer overflow in QXmlStreamReader bsc1214327. - libq5-qtbase was rebuild against icu 73. jscPED-6193...

SUSE-SU-2023:4950-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-37369: Fixed buffer overflow in QXmlStreamReader bsc1214327. - libq5-qtbase was rebuild against icu 73. jscPED-6193...

SUSE-SU-2023:4868-1 Security update for tracker-miners

This update for tracker-miners fixes the following issues: - CVE-2023-5557: Fixed a sandbox escape by adding seccomp rules and applying it to the whole process bsc1216199 - rebuild against current ICU 73...

Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in ICU

Summary IBM Flex System Chassis Management Module CMM has addressed the following vulnerabilities in ICU. Vulnerability Details CVEID: CVE-2017-7868 DESCRIPTION: International Components for Unicode ICU is vulnerable to a heap-based buffer overflow, caused by a flaw in the utf8TextAccess function...

Rocky Linux 8 : icu (RLSA-2020:0902)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:0902 advisory. - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exist...

Rocky Linux 8 : nodejs:12 (RLSA-2020:1293)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:1293 advisory. - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exist...

Rocky Linux 8 : nodejs:10 (RLSA-2020:1317)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:1317 advisory. - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exist...

SUSE SLED15: libicu73_2 / libicu73_2-bedata / libicu73_2-devel / libicu73_2-doc / etc (SUSE-SU-2023:3563-3)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3563-3 advisory. - Update to release 73.2 CLDR extends the support for short Chinese sort orders to cover some additional,...

SUSE SLES15: libicu73_2 / libicu73_2-bedata / libicu73_2-devel / libicu73_2-doc / etc (SUSE-SU-2023:3563-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3563-2 advisory. - Update to release 73.2 CLDR extends the support for short Chinese sort orders to cover some additional, required characters for...

Node.js: insecure loading of ICU data through ICU_DATA environment variable

An untrusted search path vulnerability exists in Node.js. 19.6.1, 18.14.1, 16.19.1, and 14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges...

Security Bulletin: There is a vulnerability in ICU used by IBM Jazz Reporting Service (CVE-2018-18928)

Summary There is a vulnerability in ICU used by IBM Jazz Reporting ServiceJRS. This vulnerabiliity is addressed in JRS by upgrading to a version of ICU that resolves the issue. Vulnerability Details CVEID: CVE-2018-18928 DESCRIPTION: International Components for Unicode ICU is vulnerable to a...

OSV-2023-905 Segv on unknown address in icu_74::UnicodeString::copyFrom

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62651 Crash type: Segv on unknown address Crash state: icu74::UnicodeString::copyFrom icu74::UnicodeString::UnicodeString icu74::number::impl::SimpleModifier::SimpleModifier...

PT-2023-36038 · Icu · Icu

Name of the Vulnerable Software and Affected Versions: icu 74 affected versions not specified Description: The issue is related to a crash in the icu 74 library, specifically in the UnicodeString class. The crash occurs when the copyFrom function is called, leading to a segmentation fault on an...

PT-2023-36036 · Icu · Icu

Name of the Vulnerable Software and Affected Versions: icu 74 affected versions not specified Description: The issue is related to a crash in the RelativeDateTimeFormatter, specifically in the formatRelativeImpl function. This crash occurs due to an unknown read error. The crash state involves...

PT-2023-36019 · Icu · Icu

Name of the Vulnerable Software and Affected Versions: icu 74 affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash indicate it occurs in the icu 74::SimpleDateFormat class, specifically in the subFormat, format,...