Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

Ubuntu 15.04: 2605-2 Critical: OpenSSL Vulnerability and Remote Exploit

ubuntu
Calendar Grey May 11, 2015
Dist Ubuntu Esm H88
Recent weaknesses identified in ICU on Ubuntu may lead to system crashes or permit unintended code execution. Ensure your software is updated to safeguard against these issues.
ICU could be made to crash or run programs as your login if it processed specially crafted data.

Summary

ICU could be made to crash or run programs as your login if it processed

specially crafted data.

Software Description:

- icu: International Components for Unicode library

Details:

Pedro Ribeiro discovered that ICU incorrectly handled certain memory

operations when processing data. If an application using ICU processed

crafted data, an attacker could cause it to crash or potentially execute

arbitrary code with the privileges of the user invoking the program.

Topics%20covered

Topics Covered

security advisory code execution ubuntu icu crash threat

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  libicu52                        52.1-8ubuntu0.1

Ubuntu 14.10:
  libicu52                        52.1-6ubuntu0.3

Ubuntu 14.04 LTS:
  libicu52                        52.1-3ubuntu0.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2605-1

CVE-2014-8146, CVE-2014-8147

Severity
critical
Lowest
Low
Medium
High
Critical

May 11, 2015

Topics%20covered

Topics Covered

security advisory code execution ubuntu icu crash threat

Package Information

https://launchpad.net/ubuntu/+source/icu/52.1-8ubuntu0.1
https://launchpad.net/ubuntu/+source/icu/52.1-6ubuntu0.3
https://launchpad.net/ubuntu/+source/icu/52.1-3ubuntu0.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.