[SECURITY] [DLA 615-1] icu security update

2016-09-0813:53:37

lists.debian.org

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON

Package : icu
Version : 4.8.1.1-12+deb7u5
CVE ID : CVE-2016-6293

This update fixes a buffer overflow in the uloc_acceptLanguageFromHTTP
function in ICU, the International Components for Unicode C and C++
library, in Debian Wheezy

For Debian 7 "Wheezy", these problems have been fixed in version
4.8.1.1-12+deb7u5.

We recommend that you upgrade your icu packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian7armellibicu48-dbg< 4.8.1.1-12+deb7u5libicu48-dbg_4.8.1.1-12+deb7u5_armel.deb
Debian8kfreebsd-i386icu-devtools< 52.1-8+deb8u4icu-devtools_52.1-8+deb8u4_kfreebsd-i386.deb
Debian8amd64icu-devtools< 52.1-8+deb8u4icu-devtools_52.1-8+deb8u4_amd64.deb
Debian8armhflibicu-dev< 52.1-8+deb8u4libicu-dev_52.1-8+deb8u4_armhf.deb
Debian8s390xicu-devtools< 52.1-8+deb8u4icu-devtools_52.1-8+deb8u4_s390x.deb
Debian8mipsellibicu-dev< 52.1-8+deb8u4libicu-dev_52.1-8+deb8u4_mipsel.deb
Debian7i386libicu-dev< 4.8.1.1-12+deb7u5libicu-dev_4.8.1.1-12+deb7u5_i386.deb
Debian8amd64libicu-dev< 52.1-8+deb8u4libicu-dev_52.1-8+deb8u4_amd64.deb
Debian8ppc64ellibicu52-dbg< 52.1-8+deb8u4libicu52-dbg_52.1-8+deb8u4_ppc64el.deb
Debian7amd64libicu48-dbg< 4.8.1.1-12+deb7u5libicu48-dbg_4.8.1.1-12+deb7u5_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	armel	libicu48-dbg	< 4.8.1.1-12+deb7u5	libicu48-dbg_4.8.1.1-12+deb7u5_armel.deb
Debian	8	kfreebsd-i386	icu-devtools	< 52.1-8+deb8u4	icu-devtools_52.1-8+deb8u4_kfreebsd-i386.deb
Debian	8	amd64	icu-devtools	< 52.1-8+deb8u4	icu-devtools_52.1-8+deb8u4_amd64.deb
Debian	8	armhf	libicu-dev	< 52.1-8+deb8u4	libicu-dev_52.1-8+deb8u4_armhf.deb
Debian	8	s390x	icu-devtools	< 52.1-8+deb8u4	icu-devtools_52.1-8+deb8u4_s390x.deb
Debian	8	mipsel	libicu-dev	< 52.1-8+deb8u4	libicu-dev_52.1-8+deb8u4_mipsel.deb
Debian	7	i386	libicu-dev	< 4.8.1.1-12+deb7u5	libicu-dev_4.8.1.1-12+deb7u5_i386.deb
Debian	8	amd64	libicu-dev	< 52.1-8+deb8u4	libicu-dev_52.1-8+deb8u4_amd64.deb
Debian	8	ppc64el	libicu52-dbg	< 52.1-8+deb8u4	libicu52-dbg_52.1-8+deb8u4_ppc64el.deb
Debian	7	amd64	libicu48-dbg	< 4.8.1.1-12+deb7u5	libicu48-dbg_4.8.1.1-12+deb7u5_amd64.deb