Format: 1.8 Date: Fri, 11 Sep 2015 09:28:05 -0400 Source: icu Binary: libicu52 libicu52-dbg libicu-dev icu-devtools icu-doc Architecture: arm64 Version: 52.1-3ubuntu0.4 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: icu-devtools - Development utilities for International Components for Unicode icu-doc - API documentation for ICU classes and functions libicu-dev - Development files for International Components for Unicode libicu52 - International Components for Unicode libicu52-dbg - International Components for Unicode Changes: icu (52.1-3ubuntu0.4) trusty-security; urgency=medium . * SECURITY UPDATE: denial of service via mishandling of converter names with initial x- substrings - debian/patches/CVE-2015-1270.patch: fix logic in source/common/ucnv_io.cpp. - CVE-2015-1270 * SECURITY UPDATE: information disclosure via overflows - debian/patches/CVE-2015-2632.patch: properly calculate index in source/layout/Features.cpp, check for overflows in source/layout/LETableReference.h. - CVE-2015-2632 * SECURITY UPDATE: denial of service and possible code execution via overflows - debian/patches/CVE-2015-4760.patch: check bounds in source/layout/ContextualGlyphInsertionProc2.cpp, source/layout/ContextualGlyphSubstProc.cpp, source/layout/ContextualGlyphSubstProc2.cpp, source/layout/IndicRearrangementProcessor.cpp, source/layout/IndicRearrangementProcessor2.cpp, use unsigned flags in source/layout/LigatureSubstProc.cpp, source/layout/StateTables.h, properly handle errors in source/layout/StateTableProcessor.cpp, source/layout/StateTableProcessor2.cpp. - CVE-2015-4760 Checksums-Sha1: 22f966516d447373e6dabc6aad6721068b4583a1 6601140 libicu52_52.1-3ubuntu0.4_arm64.deb 2b11ddb06fa07e7506d6243054f8bb20f8377da9 888 libicu52-dbgsym_52.1-3ubuntu0.4_arm64.ddeb d123eeedcb5131dd382abfe7418ceb9368a0b293 5979840 libicu52-dbg_52.1-3ubuntu0.4_arm64.deb 1e881d0e96cc4238285120107cfc0da310aea2d4 7516244 libicu-dev_52.1-3ubuntu0.4_arm64.deb eb6d134ed34562ab759daa6996ccffb2e379045a 894 libicu-dev-dbgsym_52.1-3ubuntu0.4_arm64.ddeb 0b89f02c34c61157b875c2716dee0950236d9e20 150772 icu-devtools_52.1-3ubuntu0.4_arm64.deb 9bc376af5a27e9967bb76c170b1908520955d7a4 968 icu-devtools-dbgsym_52.1-3ubuntu0.4_arm64.ddeb Checksums-Sha256: be7c7834f0f69cf8e9bef5fba3fa2fb612bc285183102942c232e64027b57738 6601140 libicu52_52.1-3ubuntu0.4_arm64.deb 5f94c32eba87c59194b62583d238110109057da8d27f575f57af6ee5d3e657b7 888 libicu52-dbgsym_52.1-3ubuntu0.4_arm64.ddeb 71a28e1845473230655a2cc3e0ff716e3ce2448f5524f72c3f6ec730d87f9737 5979840 libicu52-dbg_52.1-3ubuntu0.4_arm64.deb 77d62539bdd2ac77195bf3f59d2c3c3acf1c66ba73a10dbe3394c067359b20c6 7516244 libicu-dev_52.1-3ubuntu0.4_arm64.deb bedc7f08e7d3dc5db317c4123d670c62cd272504b236b03683213e621f1808c9 894 libicu-dev-dbgsym_52.1-3ubuntu0.4_arm64.ddeb a90cbed372f3d2acf26a308e82049d73dc09fd38a22c536ce52bc88b12e5ee75 150772 icu-devtools_52.1-3ubuntu0.4_arm64.deb 784f9d4b6d754cc156c47fd4067f1799569f5979358581f79f333c656d228949 968 icu-devtools-dbgsym_52.1-3ubuntu0.4_arm64.ddeb Files: e959cbb495f197f6b29b475fddff1f0c 6601140 libs optional libicu52_52.1-3ubuntu0.4_arm64.deb 04ad9418131634c543cd6aed7ae89106 888 libs extra libicu52-dbgsym_52.1-3ubuntu0.4_arm64.ddeb 82622249f2c0240ae1cd195b79967e06 5979840 debug extra libicu52-dbg_52.1-3ubuntu0.4_arm64.deb bf3a60ae747c2bad607e30c87d1832a9 7516244 libdevel optional libicu-dev_52.1-3ubuntu0.4_arm64.deb 361d59d6a09f7a44a3e995e7bcb883a3 894 libdevel extra libicu-dev-dbgsym_52.1-3ubuntu0.4_arm64.ddeb dc420cd3dbdecbd992e8ac2dabcd68e2 150772 libdevel optional icu-devtools_52.1-3ubuntu0.4_arm64.deb 98443a553c0a1667e519ed0f1e152e90 968 libdevel extra icu-devtools-dbgsym_52.1-3ubuntu0.4_arm64.ddeb Original-Maintainer: Jay Berkenbilt