[SECURITY] [DLA 219-1] icu security update

2015-05-1409:45:27

lists.debian.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.057 Low

EPSS

Percentile

93.2%

JSON

Package : icu
Version : 4.4.1-8+squeeze3
CVE ID : CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2419
CVE-2014-6585 CVE-2014-6591 CVE-2014-7923 CVE-2014-7926
CVE-2014-7940 CVE-2014-9654

Several vulnerabilities were discovered in the International Components
for Unicode (ICU) library:

CVE-2013-1569

Glyph table issue.

CVE-2013-2383

Glyph table issue.

CVE-2013-2384

Font layout issue.

CVE-2013-2419

Font processing issue.

CVE-2014-6585

Out-of-bounds read.

CVE-2014-6591

Additional out-of-bounds reads.

CVE-2014-7923

Memory corruption in regular expression comparison.

CVE-2014-7926

Memory corruption in regular expression comparison.

CVE-2014-7940

Uninitialized memory.

CVE-2014-9654

More regular expression flaws.

For Debian 6 “Squeeze”, these issues have been fixed in icu version
4.4.1-8+squeeze3.
Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian7mipsellibicu48-dbg< 4.8.1.1-12+deb7u2libicu48-dbg_4.8.1.1-12+deb7u2_mipsel.deb
Debian6amd64libicu44-dbg< 4.4.1-8+squeeze3libicu44-dbg_4.4.1-8+squeeze3_amd64.deb
Debian7kfreebsd-amd64libicu48< 4.8.1.1-12+deb7u2libicu48_4.8.1.1-12+deb7u2_kfreebsd-amd64.deb
Debian7armellibicu-dev< 4.8.1.1-12+deb7u2libicu-dev_4.8.1.1-12+deb7u2_armel.deb
Debian7allicu< 4.8.1.1-12+deb7u2icu_4.8.1.1-12+deb7u2_all.deb
Debian6allicu-doc< 4.4.1-8+squeeze3icu-doc_4.4.1-8+squeeze3_all.deb
Debian7armhflibicu48-dbg< 4.8.1.1-12+deb7u2libicu48-dbg_4.8.1.1-12+deb7u2_armhf.deb
Debian6i386libicu44< 4.4.1-8+squeeze3libicu44_4.4.1-8+squeeze3_i386.deb
Debian7powerpclibicu48-dbg< 4.8.1.1-12+deb7u2libicu48-dbg_4.8.1.1-12+deb7u2_powerpc.deb
Debian7s390xlibicu48-dbg< 4.8.1.1-12+deb7u2libicu48-dbg_4.8.1.1-12+deb7u2_s390x.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	mipsel	libicu48-dbg	< 4.8.1.1-12+deb7u2	libicu48-dbg_4.8.1.1-12+deb7u2_mipsel.deb
Debian	6	amd64	libicu44-dbg	< 4.4.1-8+squeeze3	libicu44-dbg_4.4.1-8+squeeze3_amd64.deb
Debian	7	kfreebsd-amd64	libicu48	< 4.8.1.1-12+deb7u2	libicu48_4.8.1.1-12+deb7u2_kfreebsd-amd64.deb
Debian	7	armel	libicu-dev	< 4.8.1.1-12+deb7u2	libicu-dev_4.8.1.1-12+deb7u2_armel.deb
Debian	7	all	icu	< 4.8.1.1-12+deb7u2	icu_4.8.1.1-12+deb7u2_all.deb
Debian	6	all	icu-doc	< 4.4.1-8+squeeze3	icu-doc_4.4.1-8+squeeze3_all.deb
Debian	7	armhf	libicu48-dbg	< 4.8.1.1-12+deb7u2	libicu48-dbg_4.8.1.1-12+deb7u2_armhf.deb
Debian	6	i386	libicu44	< 4.4.1-8+squeeze3	libicu44_4.4.1-8+squeeze3_i386.deb
Debian	7	powerpc	libicu48-dbg	< 4.8.1.1-12+deb7u2	libicu48-dbg_4.8.1.1-12+deb7u2_powerpc.deb
Debian	7	s390x	libicu48-dbg	< 4.8.1.1-12+deb7u2	libicu48-dbg_4.8.1.1-12+deb7u2_s390x.deb