USN-846-1: ICU vulnerability

iBot · #1 (**permalink**) 10-08-2009

Referenced CVEs:
CVE-2009-0153

Description:
===========================================================Ubuntu Security Notice USN-846-1 October 08, 2009icu vulnerabilityCVE-2009-0153===========================================================A security issue affects the following Ubuntu releases:Ubuntu 8.04 LTSUbuntu 8.10Ubuntu 9.04This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 8.04 LTS: libicu38 3.8-6ubuntu0.2Ubuntu 8.10: libicu38 3.8.1-2ubuntu0.2Ubuntu 9.04: libicu38 3.8.1-3ubuntu1.1After a standard system upgrade you need to restart applications linkedagainst libicu, such as OpenOffice.org, to effect the necessary changes.Details follow:It was discovered that ICU did not properly handle invalid byte sequencesduring Unicode conversion. If an application using ICU processed crafteddata, content security mechanisms could be bypassed, potentially leading tocross-site scripting (XSS) attacks.

More...

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
USN-799-1: D-Bus vulnerability	iBot	Security Advisories (RSS)	0	07-13-2009 04:30 PM
USN-705-1: NTP vulnerability	iBot	Security Advisories (RSS)	0	01-08-2009 02:50 PM
USN-664-1: Tk vulnerability	iBot	Security Advisories (RSS)	0	11-06-2008 03:50 PM
S-358: DNS Vulnerability	iBot	Security Advisories (RSS)	0	08-18-2008 02:50 PM
S-067: Tk Vulnerability	iBot	Security Advisories (RSS)	0	02-22-2008 05:20 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by