Bug 601400

Summary:	dev-libs/icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp
Product:	Gentoo Security	Reporter:	Ian Zimmerman <nobrowser>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Ian Zimmerman 2016-12-01 22:46:19 UTC

According to the RedHat summary:

It was found that big locale string causes stack based overflow inside libicu.

Upstream ticket, members only :-(
http://bugs.icu-project.org/trac/ticket/12745

Supposedly fixed upstream version: 58.1


Reproducible: Always

Comment 1 Coacher 2016-12-01 22:49:43 UTC


*** This bug has been marked as a duplicate of bug 594494 ***