Technical Description

Multiple vulnerabilities have been identified in Mandriva, which could be exploited by attackers to cause a denial of service or execute arbitrary code. These issues are caused by errors in ICU. For additional information, see : VUPEN/ADV-2008-0282

Affected Products

Mandriva Linux 2008.0

Solution

Upgrade the affected packages :

Mandriva Linux 2008.0:
7be8d05368f1df77edc94bb834c714cd 2008.0/i586/icu-3.6-4.1mdv2008.0.i586.rpm
ef3398e874daf8e90a2ba7ac7905ee0c 2008.0/i586/icu-doc-3.6-4.1mdv2008.0.i586.rpm
119907c5156b986a7416e5bd408d671a 2008.0/i586/libicu-devel-3.6-4.1mdv2008.0.i586.rpm
5838818d204a452c9017212829c4028d 2008.0/i586/libicu36-3.6-4.1mdv2008.0.i586.rpm
01bf753e38adbdefc214f39ddc075fea 2008.0/SRPMS/icu-3.6-4.1mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
b95b013d629d556d89e6330407111615 2008.0/x86_64/icu-3.6-4.1mdv2008.0.x86_64.rpm
169020a3e5467ac5d0f63b7224fe9e38 2008.0/x86_64/icu-doc-3.6-4.1mdv2008.0.x86_64.rpm
896c989a753a991b0aa4f41b3ca35b30 2008.0/x86_64/lib64icu-devel-3.6-4.1mdv2008.0.x86_64.rpm
8fb71c76ca95a77d7a37602a29e044e6 2008.0/x86_64/lib64icu36-3.6-4.1mdv2008.0.x86_64.rpm
01bf753e38adbdefc214f39ddc075fea 2008.0/SRPMS/icu-3.6-4.1mdv2008.0.src.rpm

References

http://www.vupen.com/english/advisories/2008/0285
http://archives.mandrivalinux.com/security-announce/2008-01/msg00045.php

ChangeLog

2008-01-28 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.