[SECURITY] [DLA 545-1] icu security update

2016-07-0717:36:24

lists.debian.org

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.059 Low

EPSS

Percentile

93.3%

JSON

Package : icu
Version : 4.8.1.1-12+deb7u4
CVE ID : CVE-2015-2632 CVE-2015-4844 CVE-2016-0494

Several security issues have been identified and corrected in ICU, the
International Components for Unicode C and C++ library, in Debian Wheezy.

CVE-2015-2632

Buffer overflow vulnerability.

CVE-2015-4844

Buffer overflow vulnerability.

CVE-2016-0494

Integer signedness/overflow vulnerability.

For Debian 7 "Wheezy", these problems have been fixed in version
4.8.1.1-12+deb7u4.

We recommend that you upgrade your icu packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian8kfreebsd-i386icu-devtools< 52.1-8+deb8u4icu-devtools_52.1-8+deb8u4_kfreebsd-i386.deb
Debian7amd64openjdk-6-jre-zero< 6b38-1.13.10-1~deb7u1openjdk-6-jre-zero_6b38-1.13.10-1~deb7u1_amd64.deb
Debian7mipsopenjdk-7-demo< 7u95-2.6.4-1~deb7u1openjdk-7-demo_7u95-2.6.4-1~deb7u1_mips.deb
Debian7s390xopenjdk-6-jre-headless< 6b38-1.13.10-1~deb7u1openjdk-6-jre-headless_6b38-1.13.10-1~deb7u1_s390x.deb
Debian7s390xopenjdk-7-jre-headless< 7u95-2.6.4-1~deb7u1openjdk-7-jre-headless_7u95-2.6.4-1~deb7u1_s390x.deb
Debian7powerpcopenjdk-7-jre< 7u95-2.6.4-1~deb7u1openjdk-7-jre_7u95-2.6.4-1~deb7u1_powerpc.deb
Debian8s390xopenjdk-7-jre< 7u95-2.6.4-1~deb8u1openjdk-7-jre_7u95-2.6.4-1~deb8u1_s390x.deb
Debian7mipsopenjdk-7-jdk< 7u95-2.6.4-1~deb7u1openjdk-7-jdk_7u95-2.6.4-1~deb7u1_mips.deb
Debian8mipselopenjdk-7-jre-headless< 7u95-2.6.4-1~deb8u1openjdk-7-jre-headless_7u95-2.6.4-1~deb8u1_mipsel.deb
Debian7i386openjdk-7-dbg< 7u95-2.6.4-1~deb7u1openjdk-7-dbg_7u95-2.6.4-1~deb7u1_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	kfreebsd-i386	icu-devtools	< 52.1-8+deb8u4	icu-devtools_52.1-8+deb8u4_kfreebsd-i386.deb
Debian	7	amd64	openjdk-6-jre-zero	< 6b38-1.13.10-1~deb7u1	openjdk-6-jre-zero_6b38-1.13.10-1~deb7u1_amd64.deb
Debian	7	mips	openjdk-7-demo	< 7u95-2.6.4-1~deb7u1	openjdk-7-demo_7u95-2.6.4-1~deb7u1_mips.deb
Debian	7	s390x	openjdk-6-jre-headless	< 6b38-1.13.10-1~deb7u1	openjdk-6-jre-headless_6b38-1.13.10-1~deb7u1_s390x.deb
Debian	7	s390x	openjdk-7-jre-headless	< 7u95-2.6.4-1~deb7u1	openjdk-7-jre-headless_7u95-2.6.4-1~deb7u1_s390x.deb
Debian	7	powerpc	openjdk-7-jre	< 7u95-2.6.4-1~deb7u1	openjdk-7-jre_7u95-2.6.4-1~deb7u1_powerpc.deb
Debian	8	s390x	openjdk-7-jre	< 7u95-2.6.4-1~deb8u1	openjdk-7-jre_7u95-2.6.4-1~deb8u1_s390x.deb
Debian	7	mips	openjdk-7-jdk	< 7u95-2.6.4-1~deb7u1	openjdk-7-jdk_7u95-2.6.4-1~deb7u1_mips.deb
Debian	8	mipsel	openjdk-7-jre-headless	< 7u95-2.6.4-1~deb8u1	openjdk-7-jre-headless_7u95-2.6.4-1~deb8u1_mipsel.deb
Debian	7	i386	openjdk-7-dbg	< 7u95-2.6.4-1~deb7u1	openjdk-7-dbg_7u95-2.6.4-1~deb7u1_i386.deb