Red Hat Product Errata RHSA-2009:1122 - Security Advisory
Issued:
2009-06-25
Updated:
2009-06-25

RHSA-2009:1122 - Security Advisory

Synopsis

Moderate: icu security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated icu packages that fix a security issue are now available for Red
Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

The International Components for Unicode (ICU) library provides robust and
full-featured Unicode services.

A flaw was found in the way ICU processed certain, invalid byte sequences
during Unicode conversion. If an application used ICU to decode malformed,
multibyte character data, it may have been possible to bypass certain
content protection mechanisms, or display information in a manner
misleading to the user. (CVE-2009-0153)

All users of icu should upgrade to these updated packages, which contain
backported patches to resolve this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.3 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386
  • Red Hat Enterprise Linux Server - AUS 5.3 x86_64
  • Red Hat Enterprise Linux Server - AUS 5.3 ia64
  • Red Hat Enterprise Linux Server - AUS 5.3 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3 ppc

Fixes

  • BZ - 503071 - CVE-2009-0153 icu: XSS vulnerability due to improper invalid byte sequence handling

Red Hat Enterprise Linux Server 5

SRPM
icu-3.6-5.11.4.src.rpm SHA-256: be780e47c67880233fb4e46d9209e4d6777daff1d2a26fb5b9aadf87895e9ce4
x86_64
icu-3.6-5.11.4.x86_64.rpm SHA-256: e70c75d825d97a1ef79a2e51de4f66f1b8d56fa060779838afb24114241dc817
libicu-3.6-5.11.4.i386.rpm SHA-256: 7fa5a3f10c33e95c7791dc89e9f27ede4da8dbf75bd03aba87b682b51fc75519
libicu-3.6-5.11.4.x86_64.rpm SHA-256: e97713f868fc0b5d96662fd06183a8802b80213ad38bb4421bfdb2007da451f1
libicu-devel-3.6-5.11.4.i386.rpm SHA-256: 552b3178bc895449f57e0307de47f12f46b0f34ebf3ef15a90ee1c68ee5af3b6
libicu-devel-3.6-5.11.4.x86_64.rpm SHA-256: a8da8f68204c5660e8ff4ca43b98778ab9b8a6bb5fdac9153b3bbc026bf272f5
libicu-doc-3.6-5.11.4.x86_64.rpm SHA-256: 9a8f9a5a5acdc93600054d312a549a4b264d7c92f06c612a37f09a9d5fb6ec9b
ia64
icu-3.6-5.11.4.ia64.rpm SHA-256: 00291da4b7b7b98a60ac476ff3d4ffa267b2983f6572f56fa6ac76cbbf033d08
libicu-3.6-5.11.4.ia64.rpm SHA-256: bbf88322ab79aa0011ff55d903fc3ab26b803a7b40ac690ed460eca0ae130ed9
libicu-devel-3.6-5.11.4.ia64.rpm SHA-256: 11eb51b6888c234afe4bfd772c2b4641885111139cd6d83788c79a9ef23ead19
libicu-doc-3.6-5.11.4.ia64.rpm SHA-256: 5f332f9f53d13d50f8174254f62778b7b4c83fb224db6a67030031dfc359b322
i386
icu-3.6-5.11.4.i386.rpm SHA-256: 992e3a196d01fbe5a93d40743eaffdc9220be7e3306440656d19ede0acd86a0d
libicu-3.6-5.11.4.i386.rpm SHA-256: 7fa5a3f10c33e95c7791dc89e9f27ede4da8dbf75bd03aba87b682b51fc75519
libicu-devel-3.6-5.11.4.i386.rpm SHA-256: 552b3178bc895449f57e0307de47f12f46b0f34ebf3ef15a90ee1c68ee5af3b6
libicu-doc-3.6-5.11.4.i386.rpm SHA-256: 8eef03202ad83e519bf9bbfe43fac9694617af143a5c74bc5c2a03865c5f0fca

Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Server - AUS 5.3

SRPM
ia64
i386
x86_64

Red Hat Enterprise Linux Workstation 5

SRPM
icu-3.6-5.11.4.src.rpm SHA-256: be780e47c67880233fb4e46d9209e4d6777daff1d2a26fb5b9aadf87895e9ce4
x86_64
icu-3.6-5.11.4.x86_64.rpm SHA-256: e70c75d825d97a1ef79a2e51de4f66f1b8d56fa060779838afb24114241dc817
libicu-3.6-5.11.4.i386.rpm SHA-256: 7fa5a3f10c33e95c7791dc89e9f27ede4da8dbf75bd03aba87b682b51fc75519
libicu-3.6-5.11.4.x86_64.rpm SHA-256: e97713f868fc0b5d96662fd06183a8802b80213ad38bb4421bfdb2007da451f1
libicu-devel-3.6-5.11.4.i386.rpm SHA-256: 552b3178bc895449f57e0307de47f12f46b0f34ebf3ef15a90ee1c68ee5af3b6
libicu-devel-3.6-5.11.4.x86_64.rpm SHA-256: a8da8f68204c5660e8ff4ca43b98778ab9b8a6bb5fdac9153b3bbc026bf272f5
libicu-doc-3.6-5.11.4.x86_64.rpm SHA-256: 9a8f9a5a5acdc93600054d312a549a4b264d7c92f06c612a37f09a9d5fb6ec9b
i386
icu-3.6-5.11.4.i386.rpm SHA-256: 992e3a196d01fbe5a93d40743eaffdc9220be7e3306440656d19ede0acd86a0d
libicu-3.6-5.11.4.i386.rpm SHA-256: 7fa5a3f10c33e95c7791dc89e9f27ede4da8dbf75bd03aba87b682b51fc75519
libicu-devel-3.6-5.11.4.i386.rpm SHA-256: 552b3178bc895449f57e0307de47f12f46b0f34ebf3ef15a90ee1c68ee5af3b6
libicu-doc-3.6-5.11.4.i386.rpm SHA-256: 8eef03202ad83e519bf9bbfe43fac9694617af143a5c74bc5c2a03865c5f0fca

Red Hat Enterprise Linux Desktop 5

SRPM
icu-3.6-5.11.4.src.rpm SHA-256: be780e47c67880233fb4e46d9209e4d6777daff1d2a26fb5b9aadf87895e9ce4
x86_64
icu-3.6-5.11.4.x86_64.rpm SHA-256: e70c75d825d97a1ef79a2e51de4f66f1b8d56fa060779838afb24114241dc817
libicu-3.6-5.11.4.i386.rpm SHA-256: 7fa5a3f10c33e95c7791dc89e9f27ede4da8dbf75bd03aba87b682b51fc75519
libicu-3.6-5.11.4.x86_64.rpm SHA-256: e97713f868fc0b5d96662fd06183a8802b80213ad38bb4421bfdb2007da451f1
libicu-doc-3.6-5.11.4.x86_64.rpm SHA-256: 9a8f9a5a5acdc93600054d312a549a4b264d7c92f06c612a37f09a9d5fb6ec9b
i386
icu-3.6-5.11.4.i386.rpm SHA-256: 992e3a196d01fbe5a93d40743eaffdc9220be7e3306440656d19ede0acd86a0d
libicu-3.6-5.11.4.i386.rpm SHA-256: 7fa5a3f10c33e95c7791dc89e9f27ede4da8dbf75bd03aba87b682b51fc75519
libicu-doc-3.6-5.11.4.i386.rpm SHA-256: 8eef03202ad83e519bf9bbfe43fac9694617af143a5c74bc5c2a03865c5f0fca

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
icu-3.6-5.11.4.src.rpm SHA-256: be780e47c67880233fb4e46d9209e4d6777daff1d2a26fb5b9aadf87895e9ce4
s390x
icu-3.6-5.11.4.s390x.rpm SHA-256: 7bd1b9994e943d90d1a27fdf64fce22af111506bca0519dac5ccc0aebe8d2c13
libicu-3.6-5.11.4.s390.rpm SHA-256: 6eaeadea3ab8f47fc4a4d50c56ff7e0547c87ccfc1181d88233e4ee5bab3234d
libicu-3.6-5.11.4.s390x.rpm SHA-256: 7549972463cedb06c42bb32a3ddd86ec2dafc11175fedee9de5b7c18c8df1ab6
libicu-devel-3.6-5.11.4.s390.rpm SHA-256: 7af60ea0df26977422d426f1296b7fe4a3b8f41884bdb131f5494a71f9577730
libicu-devel-3.6-5.11.4.s390x.rpm SHA-256: 721725b45ec2ef0b02b03622a641fed6788e77eeee1e1d50df53531c7a7c8c0e
libicu-doc-3.6-5.11.4.s390x.rpm SHA-256: 47ea8c4910b998cc4cf56349d70521891abd06dc3b3e55056061d01c57003258

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.3

SRPM
s390x

Red Hat Enterprise Linux for Power, big endian 5

SRPM
icu-3.6-5.11.4.src.rpm SHA-256: be780e47c67880233fb4e46d9209e4d6777daff1d2a26fb5b9aadf87895e9ce4
ppc
icu-3.6-5.11.4.ppc.rpm SHA-256: 4940f1069bb7a5e53e1ec406ffa1cdbd9beda2bc2ab555f0511c2245a83d5b7a
libicu-3.6-5.11.4.ppc.rpm SHA-256: d0ce811aa94a66c6b3228a3f781159f77b42f1659db82c1e102020447c66d340
libicu-3.6-5.11.4.ppc64.rpm SHA-256: 0107fbd64da46d20923021809e6586981fd620d2e8ada6df88c2f49a5f27493b
libicu-devel-3.6-5.11.4.ppc.rpm SHA-256: d1195cab2df69f6eed4587c7dd2a8ba7b0d7016d7b19170dcd3757554c8fa6c2
libicu-devel-3.6-5.11.4.ppc64.rpm SHA-256: 978e469c36d2d69154309d590a6def90495c089066d1d9c44ad900e0d2070cbf
libicu-doc-3.6-5.11.4.ppc.rpm SHA-256: b864a21c42f1aac6618fb6a509925bef24583419956489ba2db4a0d4a8ee23bf

Red Hat Enterprise Linux Server from RHUI 5

SRPM
icu-3.6-5.11.4.src.rpm SHA-256: be780e47c67880233fb4e46d9209e4d6777daff1d2a26fb5b9aadf87895e9ce4
x86_64
icu-3.6-5.11.4.x86_64.rpm SHA-256: e70c75d825d97a1ef79a2e51de4f66f1b8d56fa060779838afb24114241dc817
libicu-3.6-5.11.4.i386.rpm SHA-256: 7fa5a3f10c33e95c7791dc89e9f27ede4da8dbf75bd03aba87b682b51fc75519
libicu-3.6-5.11.4.x86_64.rpm SHA-256: e97713f868fc0b5d96662fd06183a8802b80213ad38bb4421bfdb2007da451f1
libicu-devel-3.6-5.11.4.i386.rpm SHA-256: 552b3178bc895449f57e0307de47f12f46b0f34ebf3ef15a90ee1c68ee5af3b6
libicu-devel-3.6-5.11.4.x86_64.rpm SHA-256: a8da8f68204c5660e8ff4ca43b98778ab9b8a6bb5fdac9153b3bbc026bf272f5
libicu-doc-3.6-5.11.4.x86_64.rpm SHA-256: 9a8f9a5a5acdc93600054d312a549a4b264d7c92f06c612a37f09a9d5fb6ec9b
i386
icu-3.6-5.11.4.i386.rpm SHA-256: 992e3a196d01fbe5a93d40743eaffdc9220be7e3306440656d19ede0acd86a0d
libicu-3.6-5.11.4.i386.rpm SHA-256: 7fa5a3f10c33e95c7791dc89e9f27ede4da8dbf75bd03aba87b682b51fc75519
libicu-devel-3.6-5.11.4.i386.rpm SHA-256: 552b3178bc895449f57e0307de47f12f46b0f34ebf3ef15a90ee1c68ee5af3b6
libicu-doc-3.6-5.11.4.i386.rpm SHA-256: 8eef03202ad83e519bf9bbfe43fac9694617af143a5c74bc5c2a03865c5f0fca

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3

SRPM
ppc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.