Advisories » MGASA-2019-0353

Updated icu packages fix security vulnerability

Publication date: 06 Dec 2019
Modification date: 06 Dec 2019
Type: security
Affected Mageia releases : 7
CVE: CVE-2018-18928

Description

The updated packages fix a security vulnerability:

International Components for Unicode (ICU) for C/C++ 63.1 has an integer
overflow in number::impl::DecimalQuantity::toScientificString() in
i18n/number_decimalquantity.cpp. (CVE-2018-18928)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23155
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DHAC6XIATCPVSWFNBGGL2MRSBMN2F7D5/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18928

SRPMS

7/core

• icu-63.1-1.1.mga7