Multiple vulnerabilities have been found in ICU, the worst of which could cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/icu | * | < 68.2 | >= 68.2 |
ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications.
Multiple vulnerabilities have been discovered in ICU. Please review the upstream bugs referenced below for details.
Remote attackers could cause a Denial of Service condition or possibly have other unspecified impacts via unspecified vectors.
There is no known workaround at this time.
All ICU users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/icu-68.2"
An integer overflow flaw in ICU could possibly allow for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/icu | * | < 65.1-r1 | >= 65.1-r1 |
ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications.
It was discovered that ICU’s UnicodeString::doAppend() function is vulnerable to an integer overflow. Please review the CVE identifiers referenced below for more details.
A remote attacker could entice a user to process a specially crafted string in an application linked against ICU, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All ICU users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/icu-65.1-r1"
Multiple vulnerabilities have been found in ICU, the worst of which could allow remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/icu | * | < 58.2-r1 | >= 58.2-r1 |
ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications.
Multiple vulnerabilities have been discovered in ICU. Please review the referenced CVE identifiers for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All ICU users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/icu-58.2-r1"
Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying some of these packages.
Multiple vulnerabilities have been found in ICU, the worst of which could cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/icu | * | < 58.1 | >= 58.1 |
ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications.
Multiple vulnerabilities have been discovered in ICU. Please review the CVE identifiers referenced below for details.
Remote attackers could cause a Denial of Service condition or possibly have other unspecified impacts via a long locale string or httpAcceptLanguage argument. Additionally, A remote attacker, via a specially crafted file, could cause an application using ICU to parse untrusted font files resulting in a Denial of Service condition. Finally, remote attackers could affect confidentiality via unknown vectors related to 2D.
There is no known workaround at this time.
All ICU users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/icu-58.1"
Multiple vulnerabilities have been found in International Components for Unicode, allowing attackers to execute arbitrary code or cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/icu | * | < 55.1 | >= 55.1 |
International Components for Unicode is a set of C/C++ and Java libraries providing Unicode and Globalization support for software applications.
Multiple vulnerabilities have been discovered in International Components for Unicode. Please review the CVE identifiers referenced below for details.
A remote attacker could execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All International Components for Unicode users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/icu-55.1"
Multiple vulnerabilities have been found in ICU, possibly resulting in Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/icu | * | < 54.1-r1 | >= 54.1-r1 |
ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications.
Multiple vulnerabilities have been discovered in ICU. Please review the CVE identifiers referenced below for details.
A remote attacker can cause Denial of Service.
There is no known workaround at this time.
All ICU users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/icu-54.1-r1"
Two vulnerabilities in International Components for Unicode might allow remote attackers to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/icu | * | < 51.2-r1 | >= 51.2-r1 |
International Components for Unicode is a set of C/C++ and Java libraries providing Unicode and Globalization support for software applications.
Multiple vulnerabilities have been discovered in International Components for Unicode. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly cause a Denial of Service condition.
There is no known workaround at this time.
All International Components for Unicode users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/icu-51.2-r1"
Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying some of these packages.
A buffer overflow in International Components for Unicode could result in execution of arbitrary code or Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/icu | * | < 49.1.1-r1 | >= 49.1.1-r1 |
International Components for Unicode (ICU) is a set of C/C++ and Java libraries providing Unicode and Globalization support for software applications.
An error in the _canonicalize() function in uloc.cpp could cause a stack-based buffer overflow.
A remote attacker could entice a user to open a specially crafted locale representation using an application linked against ICU, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All ICU users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/icu-49.1.1-r1"
Two vulnerabilities have been discovered in the International Components for Unicode, possibly resulting in the remote execution of arbitrary code or a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/icu | * | < 3.8.1-r1 | >= 3.8.1-r1, >= 3.6-r2 (revision) |
International Components for Unicode is a set of C/C++ and Java libraries providing Unicode and Globalization support for software applications.
Will Drewry (Google Security) reported a vulnerability in the regular expression engine when using back references to capture \0 characters (CVE-2007-4770). He also found that the backtracking stack size is not limited, possibly allowing for a heap-based buffer overflow (CVE-2007-4771).
A remote attacker could submit specially crafted regular expressions to an application using the library, possibly resulting in the remote execution of arbitrary code with the privileges of the user running the application or a Denial of Service.
There is no known workaround at this time.
All International Components for Unicode users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/icu-3.8.1-r1"