RHBA-2012:0887 - Bug Fix Advisory

Topic

An updated libunistring package that fixes one bug is now available for Red Hat
Enterprise Linux 6.

Description

The libunistring package contains a portable C library that implements the
UTF-8, UTF-16 and UTF-32 Unicode string types, together with functions for
character processing (names, classifications, and properties) and functions for
string processing (iteration, formatted output, width, word breaks, line breaks,
normalization, case folding, and regular expressions).

This update fixes the following bug:

• Previously, when calling the malloc() function, no check for the returned

pointer was performed to find out whether memory was successfully allocated.
Therefore, if a null pointer was returned, this could cause the libunistring
library to misbehave in low-memory situations. This update adds the missing
check to properly handle such situations. (BZ#732017)

All users of libunistring are advised to upgrade to this updated package, which
fixes this bug.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat
Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 732017 - Malloc without NULL check

CVEs

(none)

References

(none)