icu (52.1-3ubuntu0.2) trusty-security; urgency=medium
* SECURITY UPDATE: information disclosure via incorrect font file parsing
- debian/patches/CVE-2014-65xx.patch: add checks to
source/layout/ContextualSubstSubtables.cpp,
source/layout/CursiveAttachmentSubtables.cpp,
source/layout/Features.cpp,
source/layout/LETableReference.h,
source/layout/LigatureSubstSubtables.cpp,
source/layout/MultipleSubstSubtables.cpp.
- CVE-2014-6585
- CVE-2014-6591
* SECURITY UPDATE: denial of service or possible code execution in
regular expressions
- debian/patches/CVE-2014-7923.patch: add limits to
source/i18n/regexcmp.cpp, add test to
source/test/testdata/regextst.txt.
- CVE-2014-7923
* SECURITY UPDATE: denial of service or possible code execution in
regular expressions
- debian/patches/CVE-2014-7926.patch: fix incorrect optimization in
source/i18n/regexcmp.cpp, fix comment in source/i18n/regexcmp.h,
add test to source/test/testdata/regextst.txt.
- CVE-2014-7926
* SECURITY UPDATE: denial of service or possible code execution via
uninitialized memory in the collator implementation
- debian/patches/CVE-2014-7940.patch: properly handle memory in
source/i18n/ucol.cpp.
- CVE-2014-7940
* SECURITY UPDATE: denial of service via incorrect pattern size limits
- debian/patches/CVE-2014-9654.patch: check limits in
source/common/unicode/utypes.h, source/common/utypes.c,
source/i18n/regexcmp.cpp, source/i18n/regexcmp.h,
source/i18n/regeximp.h, added test to
source/test/intltest/regextst.cpp, source/test/intltest/regextst.h.
- CVE-2014-9654
* debian/patches/two-digit-year-test.patch: fix FTBFS caused by known
test suite failure.
-- Marc Deslauriers <email address hidden> Wed, 04 Mar 2015 11:30:28 -0500
|
CVE-2014-6585 |
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors reelat |
CVE-2014-6591 |
Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality v |
CVE-2014-7923 |
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.221 |
CVE-2014-7926 |
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.221 |
CVE-2014-7940 |
The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome b |
|