icu-50.2-4.el7

エラータID: AXSA:2020-4502:01

Release date: 
Wednesday, March 18, 2020 - 16:50
Subject: 
icu-50.2-4.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.

Security Fix(es):

* ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2020-10531
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Solution: 

Update packages.

CVEs: 
CVE-2020-10531
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Additional Info: 

N/A

Download: 

SRPMS
  1. icu-50.2-4.el7.src.rpm
    MD5: 78e636cb031734a0da8927b3eb57c44f
    SHA-256: 4b6a36d0963144340befcda82ddfef034655002e5e9969f91aaa20e25870d2e0
    Size: 17.58 MB

Asianux Server 7 for x86_64
  1. libicu-50.2-4.el7.x86_64.rpm
    MD5: cd92ec1bdcb5cd1e1c392e2543ee840b
    SHA-256: 937f5c275ebd1938a3f99a6e6afcc99f04f147e549381b48049a7a497dbe71e5
    Size: 6.87 MB
  2. libicu-devel-50.2-4.el7.x86_64.rpm
    MD5: 333889030943fdd8ac96e2d8bb32a791
    SHA-256: 876cbfd41f4ef7c8019255409870bce3cdd4255a14ecd07b5a3d0fa4b24dfda9
    Size: 702.12 kB
  3. libicu-50.2-4.el7.i686.rpm
    MD5: 5ac39dfa7e96023b2cb944f8fc675c57
    SHA-256: 19fbf9570359ad7894aad89519ad2d0bfb6d2c1768c79310b0b0c5e303bd1c17
    Size: 6.91 MB
  4. libicu-devel-50.2-4.el7.i686.rpm
    MD5: 686df7aba0b11f09250bde5f9b9d9d28
    SHA-256: 87c00de577bc147c54e0b2e59462014b03073ac96f6cdd3379f32533c2ffe24c
    Size: 702.02 kB