icu-4.2.1-9.1.AXS4

エラータID: AXSA:2012-08:01

Release date: 
Friday, January 13, 2012 - 21:39
Subject: 
icu-4.2.1-9.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Tools and utilities for developing with icu.
Security issues fixed with this release:
CVE-2011-4599
No information available at the time of writing, please refer to the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2011-4599
Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization.


Additional Info: 

N/A

Download: 

SRPMS
  1. icu-4.2.1-9.1.AXS4.src.rpm
    MD5: 8cc524f32289a2fd59909d3defd1dd28
    SHA-256: dbd435661540bb3de88d9b4655bdfd840a8cc6253e0692aaa9da4f23eefed53c
    Size: 11.70 MB

Asianux Server 4 for x86
  1. libicu-4.2.1-9.1.AXS4.i686.rpm
    MD5: 3f919079d936f7bfba44a558d0087575
    SHA-256: 8f8275b1ef11df6fafc2cb8bace9d4e1a5209a0a61112aaed0b0c581759cd336
    Size: 4.97 MB

Asianux Server 4 for x86_64
  1. libicu-4.2.1-9.1.AXS4.x86_64.rpm
    MD5: aa98a9d52122674d5cb1961eceac47f8
    SHA-256: a17289f0cd649ffb6adcbe9b7492e7e73fea27df61d7ee6268f1a2e0ed23588e
    Size: 4.92 MB
  2. libicu-4.2.1-9.1.AXS4.i686.rpm
    MD5: 3f919079d936f7bfba44a558d0087575
    SHA-256: 8f8275b1ef11df6fafc2cb8bace9d4e1a5209a0a61112aaed0b0c581759cd336
    Size: 4.97 MB