Ubuntu
icu package

icu 4.8.1.1-3ubuntu0.3 source package in Ubuntu

Changelog

icu (4.8.1.1-3ubuntu0.3) precise-security; urgency=medium

  * SECURITY UPDATE: multiple issues via incorrect font file parsing
    - debian/patches/layoutengine-security.patch: backport a whole new
      layout engine to source/layout/*, as provided by upstream.
    - CVE-2013-1569
    - CVE-2013-2383
    - CVE-2013-2384
    - CVE-2013-2419
  * SECURITY UPDATE: information disclosure via incorrect font file parsing
    - debian/patches/CVE-2014-65xx.patch: add checks to
      source/layout/ContextualSubstSubtables.cpp,
      source/layout/CursiveAttachmentSubtables.cpp,
      source/layout/Features.cpp,
      source/layout/LETableReference.h,
      source/layout/LigatureSubstSubtables.cpp,
      source/layout/MultipleSubstSubtables.cpp.
    - CVE-2014-6585
    - CVE-2014-6591
  * SECURITY UPDATE: denial of service or possible code execution in
    regular expressions
    - debian/patches/CVE-2014-7923.patch: add limits to
      source/i18n/regexcmp.cpp, add test to
      source/test/testdata/regextst.txt.
    - CVE-2014-7923
  * SECURITY UPDATE: denial of service or possible code execution in
    regular expressions
    - debian/patches/CVE-2014-7926.patch: fix incorrect optimization in
      source/i18n/regexcmp.cpp, fix comment in source/i18n/regexcmp.h,
      add test to source/test/testdata/regextst.txt.
    - CVE-2014-7926
  * SECURITY UPDATE: denial of service or possible code execution via
    uninitialized memory in the collator implementation
    - debian/patches/CVE-2014-7940.patch: properly handle memory in
      source/i18n/ucol.cpp.
    - CVE-2014-7940
  * SECURITY UPDATE: denial of service via incorrect pattern size limits
    - debian/patches/CVE-2014-9654.patch: fix case insensitive matches and
      check limits in source/common/unicode/utypes.h,
      source/common/utypes.c,
      source/i18n/regexcmp.cpp, source/i18n/regexcmp.h,
      source/i18n/regeximp.h, source/i18n/i18n.vcxproj.filters,
      source/i18n/unicode/regex.h, source/i18n/regeximp.cpp,
      source/i18n/rematch.cpp, source/i18n/i18n.vcxproj,
      source/i18n/Makefile.in, added tests to
      source/test/intltest/regextst.cpp, source/test/intltest/regextst.h,
      source/test/testdata/regextst.txt.
    - CVE-2014-9654
  * debian/rules: added cdbs autotools rule and adjust DEB_SRCDIR so test
    suite gets run during build.
  * debian/patches/two-digit-year-test.patch: fix test suite failure.
 -- Marc Deslauriers <email address hidden>   Wed, 04 Mar 2015 11:14:58 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
icu_4.8.1.1.orig.tar.gz 17.8 MiB 0a70491c5fdfc5a0fa7429f820da73951e07d59a268b3d8ffe052eec65820ca1
icu_4.8.1.1-3ubuntu0.3.debian.tar.gz 197.3 KiB f35083b40470ed2bc4b6e2d4e47f0ef7471975dd32d439be9749d8a4ff2ef5e5
icu_4.8.1.1-3ubuntu0.3.dsc 2.2 KiB 5be9e886d80cdbb25d5ce03a4970e8b7e9b60a5eed029eb7049a08d007139ea5

View changes file

Binary packages built by this source

icu-doc: API documentation for ICU classes and functions

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains HTML files
 documenting the ICU APIs.

lib32icu-dev: Development files for International Components for Unicode (32-bit)

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains the development
 files for ICU along with programs used to manipulate data files found
 in the ICU sources.

lib32icu48: International Components for Unicode (32-bit)

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains the runtime
 libraries for ICU.

libicu-dev: Development files for International Components for Unicode

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains the development
 files for ICU along with programs used to manipulate data files found
 in the ICU sources.

libicu48: International Components for Unicode

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains the runtime
 libraries for ICU.

libicu48-dbg: International Components for Unicode

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains debugging symbols
 for the libraries.