SUSE-RU-2023:4615-1: Recommended update for icu
This update of icu fixes the following issue: missing 32bit libraries in SLES 15 SP3 were added, required by xerces-c 32bit.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libicu-docto a version that resolves this vulnerability.Fixed in 65.1-150200.4.10.1 - Upgrade
Upgrade
suse/icuto a version that resolves this vulnerability.Fixed in 65.1-150200.4.10.1 - Upgrade
Upgrade
suse/icu-debugsourceto a version that resolves this vulnerability.Fixed in 65.1-150200.4.10.1 - Upgrade
Upgrade
suse/icu-debuginfoto a version that resolves this vulnerability.Fixed in 65.1-150200.4.10.1 - Upgrade
Upgrade
suse/libicu-develto a version that resolves this vulnerability.Fixed in 65.1-150200.4.10.1 - Upgrade
Upgrade
suse/libicu-develto a version that resolves this vulnerability.Fixed in 32bit-65.1-150200.4.10.1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Micro-5.3-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Micro-5.4-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SUSE-MicroOS-5.1-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-SUSE-MicroOS-5.2-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch SUSE-Storage-7.1-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch openSUSE-Leap-Micro-5.3-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch openSUSE-Leap-Micro-5.4-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch openSUSE-SLE-15.4-2023-4615=1 - Upgrade
Upgrade
icuto a version that resolves this vulnerability.Patch openSUSE-SLE-15.5-2023-4615=1
Event History
Frequently Asked Questions
Which systems are most likely affected by this issue?
The issue concerns SLES 15 SP3 environments that need the 32-bit ICU libraries required by 32-bit xerces-c. The update is also listed for SUSE openSUSE Leap 15.4 on aarch64, ppc64le, s390x, x86_64, and noarch packages.
What is the practical impact if the update is not installed?
Systems may lack the 32-bit ICU libraries needed by xerces-c 32-bit, which can prevent software depending on that package combination from functioning correctly. The provided information does not describe a remote exploitation condition or an attacker requirement.
How can I determine whether I need this update?
Check whether the system uses SLES 15 SP3 with 32-bit xerces-c or otherwise requires 32-bit ICU libraries. Also review installed ICU packages against the SUSE update identified as SUSE-RU-2023:4615-1.