AXSA:2020-131:03

Release date: 
Thursday, August 27, 2020 - 04:03
Subject: 
icu-60.3-2.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.

Security Fix(es):

* ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2020-10531
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. icu-60.3-2.el8.src.rpm
    MD5: 671ea39a12d4f9cb9e49971d247caad8
    SHA-256: 6e6bb871559e401d661341416e2908c557f7f146220dec9fb4034a02320125d7
    Size: 21.00 MB

Asianux Server 8 for x86_64
  1. icu-60.3-2.el8.x86_64.rpm
    MD5: 75fece6f28d131fd0a1473575d7b72b7
    SHA-256: bc1587af1b58897649ed31d9625a0d346e30aebf2f11d99b17260f5c3c8bd8fa
    Size: 242.09 kB
  2. libicu-60.3-2.el8.x86_64.rpm
    MD5: a5debda94d4a89afef37beabc10d1f6d
    SHA-256: f00d90cc80f984c2fb5cc3e22604c38cd8b7e4596076eb2d40e9dbc6f2cb5e8c
    Size: 8.84 MB
  3. libicu-devel-60.3-2.el8.x86_64.rpm
    MD5: 8c3e15f6c273fb6682ab5a4d46737f97
    SHA-256: b44e64ac0f3482f0f910be5d8d3ee15cd645d34e1d3776c66c8e4d8b947e4a10
    Size: 921.41 kB
  4. libicu-doc-60.3-2.el8.noarch.rpm
    MD5: 2c48ba6d9df5feb8c89fb05afc5dcf89
    SHA-256: 3f4579687500492951803935d80b3a90c89af735b9141d1a6ca8679ac1d1f190
    Size: 3.77 MB
  5. libicu-60.3-2.el8.i686.rpm
    MD5: 3773f0681c73f69d930e92144200ac69
    SHA-256: a638fedb69aa915fcb44c2c180bddb4484d4ecc58bf9cc8c68fe32b9ad4887cf
    Size: 9.00 MB
  6. libicu-devel-60.3-2.el8.i686.rpm
    MD5: 838395d834071c4a5ac38960048f4ca5
    SHA-256: de31d010abd0cf6040e24dc4d0e52344c5d937ad7515202d3e1fbac226e08fe8
    Size: 921.51 kB
Copyright© 2007-2015 Asianux. All rights reserved.