icu-3.6-5.16.1

エラータID: AXSA:2011-562:02

Release date: 
Tuesday, December 27, 2011 - 19:15
Subject: 
icu-3.6-5.16.1
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

Tools and utilities for developing with icu.
Security issues fixed with this release:
CVE-2011-4599
No information available at the time of writing, please refer to the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2011-4599
Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization.


Additional Info: 

N/A

Download: 

SRPMS
  1. icu-3.6-5.16.1.src.rpm
    MD5: b2be9e635906bc1336bbe6bc740f182b
    SHA-256: 4c953229d15934748b08302f6879417d5a45fcb2ceab16ed44d8a626f631c687
    Size: 9.39 MB

Asianux Server 3 for x86
  1. libicu-3.6-5.16.1.i386.rpm
    MD5: d0010f977c1ca1fe60fd1d8e43e4aa09
    SHA-256: fd5dcb195d60f5d91c208aa9a6ce5cac85f1bdfbbf6bacbca927edef3dfaf42b
    Size: 5.25 MB

Asianux Server 3 for x86_64
  1. libicu-3.6-5.16.1.x86_64.rpm
    MD5: 0b15b2fa4c447cc7e79eace95438feb1
    SHA-256: b48c22f558b910193864ed4ee8cef533c9c67327fcb4c9540b3656dfd6a194d6
    Size: 5.23 MB