Ubuntu
icu package

icu 52.1-3ubuntu0.4 source package in Ubuntu

Changelog

icu (52.1-3ubuntu0.4) trusty-security; urgency=medium

  * SECURITY UPDATE: denial of service via mishandling of converter names
    with initial x- substrings
    - debian/patches/CVE-2015-1270.patch: fix logic in
      source/common/ucnv_io.cpp.
    - CVE-2015-1270
  * SECURITY UPDATE: information disclosure via overflows
    - debian/patches/CVE-2015-2632.patch: properly calculate index in
      source/layout/Features.cpp, check for overflows in
      source/layout/LETableReference.h.
    - CVE-2015-2632
  * SECURITY UPDATE: denial of service and possible code execution via
    overflows
    - debian/patches/CVE-2015-4760.patch: check bounds in
      source/layout/ContextualGlyphInsertionProc2.cpp,
      source/layout/ContextualGlyphSubstProc.cpp,
      source/layout/ContextualGlyphSubstProc2.cpp,
      source/layout/IndicRearrangementProcessor.cpp,
      source/layout/IndicRearrangementProcessor2.cpp,
      use unsigned flags in source/layout/LigatureSubstProc.cpp,
      source/layout/StateTables.h, properly handle errors in
      source/layout/StateTableProcessor.cpp,
      source/layout/StateTableProcessor2.cpp.
    - CVE-2015-4760

 -- Marc Deslauriers <email address hidden>  Fri, 11 Sep 2015 09:28:05 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
icu_52.1.orig.tar.gz 22.8 MiB 2f4d5e68d4698e87759dbdc1a586d053d96935787f79961d192c477b029d8092
icu_52.1-3ubuntu0.4.debian.tar.gz 34.8 KiB 6d4d8bfb4df58014c0c13b4b76f7ac796979bcae0e7f6a00a39af986beeab7c7
icu_52.1-3ubuntu0.4.dsc 2.0 KiB 90f788d1d63a7c549d47dd343c505a504c73ed0247f9b620b22ac643ad0e3963

View changes file

Binary packages built by this source

icu-devtools: Development utilities for International Components for Unicode

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains programs used to
 manipulate data files found in the ICU sources and is a dependency of
 libicu-dev. End users would generally not need to install this package.

icu-devtools-dbgsym: debug symbols for package icu-devtools

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains programs used to
 manipulate data files found in the ICU sources and is a dependency of
 libicu-dev. End users would generally not need to install this package.

icu-doc: API documentation for ICU classes and functions

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains HTML files
 documenting the ICU APIs.

libicu-dev: Development files for International Components for Unicode

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains the development
 files for ICU.

libicu-dev-dbgsym: debug symbols for package libicu-dev

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains the development
 files for ICU.

libicu52: International Components for Unicode

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains the runtime
 libraries for ICU.

libicu52-dbg: International Components for Unicode

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains debugging symbols
 for the libraries.

libicu52-dbgsym: debug symbols for package libicu52

 ICU is a C++ and C library that provides robust and full-featured
 Unicode and locale support. This package contains the runtime
 libraries for ICU.