Advisories » MGASA-2015-0287

Updated icu package fixes security vulnerability

Publication date: 27 Jul 2015
Modification date: 27 Jul 2015
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-1270

Description

The ucnv_io_getConverterName function in common/ucnv_io.cpp in
International Components for Unicode (ICU) mishandles converter names with
initial x- substrings, which allows remote attackers to cause a denial of
service (read of uninitialized memory) or possibly have unspecified other
impact via a crafted file (CVE-2015-1270).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=16478
• http://googlechromereleases.blogspot.cz/2015/07/stable-channel-update_21.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1270

SRPMS

5/core

• icu-53.1-12.1.mga5