[SECURITY] [DLA 381-1] icu security update

2016-01-1108:42:30

lists.debian.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.3%

JSON

Package : icu
Version : 4.4.1-8+squeeze5
CVE ID : CVE-2015-2632

A vulnerability was found in ICU, a set of libraries that provides Unicode and
internationalization support. Integer overflows in the ICU layout engine made
it possible to disclose information.

For Debian 6 "Squeeze", this problem has been fixed in icu version
4.4.1-8+squeeze5. We recommend you to upgrade your icu packages.

Learn more about the Debian Long Term Support (LTS) Project and how to
apply these updates at: https://wiki.debian.org/LTS/

Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian8amd64openjdk-7-demo< 7u79-2.5.6-1~deb8u1openjdk-7-demo_7u79-2.5.6-1~deb8u1_amd64.deb
Debian8kfreebsd-amd64icu-devtools< 52.1-8+deb8u4icu-devtools_52.1-8+deb8u4_kfreebsd-amd64.deb
Debian8powerpcopenjdk-7-demo< 7u79-2.5.6-1~deb8u1openjdk-7-demo_7u79-2.5.6-1~deb8u1_powerpc.deb
Debian8mipselopenjdk-7-jdk< 7u79-2.5.6-1~deb8u1openjdk-7-jdk_7u79-2.5.6-1~deb8u1_mipsel.deb
Debian8arm64openjdk-7-jre-zero< 7u79-2.5.6-1~deb8u1openjdk-7-jre-zero_7u79-2.5.6-1~deb8u1_arm64.deb
Debian7powerpcopenjdk-7-dbg< 7u79-2.5.6-1~deb7u1openjdk-7-dbg_7u79-2.5.6-1~deb7u1_powerpc.deb
Debian8mipselicu-devtools< 52.1-8+deb8u4icu-devtools_52.1-8+deb8u4_mipsel.deb
Debian8armhflibicu52-dbg< 52.1-8+deb8u4libicu52-dbg_52.1-8+deb8u4_armhf.deb
Debian8i386openjdk-7-jre-zero< 7u79-2.5.6-1~deb8u1openjdk-7-jre-zero_7u79-2.5.6-1~deb8u1_i386.deb
Debian8i386libicu52< 52.1-8+deb8u4libicu52_52.1-8+deb8u4_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	amd64	openjdk-7-demo	< 7u79-2.5.6-1~deb8u1	openjdk-7-demo_7u79-2.5.6-1~deb8u1_amd64.deb
Debian	8	kfreebsd-amd64	icu-devtools	< 52.1-8+deb8u4	icu-devtools_52.1-8+deb8u4_kfreebsd-amd64.deb
Debian	8	powerpc	openjdk-7-demo	< 7u79-2.5.6-1~deb8u1	openjdk-7-demo_7u79-2.5.6-1~deb8u1_powerpc.deb
Debian	8	mipsel	openjdk-7-jdk	< 7u79-2.5.6-1~deb8u1	openjdk-7-jdk_7u79-2.5.6-1~deb8u1_mipsel.deb
Debian	8	arm64	openjdk-7-jre-zero	< 7u79-2.5.6-1~deb8u1	openjdk-7-jre-zero_7u79-2.5.6-1~deb8u1_arm64.deb
Debian	7	powerpc	openjdk-7-dbg	< 7u79-2.5.6-1~deb7u1	openjdk-7-dbg_7u79-2.5.6-1~deb7u1_powerpc.deb
Debian	8	mipsel	icu-devtools	< 52.1-8+deb8u4	icu-devtools_52.1-8+deb8u4_mipsel.deb
Debian	8	armhf	libicu52-dbg	< 52.1-8+deb8u4	libicu52-dbg_52.1-8+deb8u4_armhf.deb
Debian	8	i386	openjdk-7-jre-zero	< 7u79-2.5.6-1~deb8u1	openjdk-7-jre-zero_7u79-2.5.6-1~deb8u1_i386.deb
Debian	8	i386	libicu52	< 52.1-8+deb8u4	libicu52_52.1-8+deb8u4_i386.deb