diff options
| author | Sona Sarmadi <sona.sarmadi@enea.com> | 2015-09-04 12:51:00 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-09-19 11:52:55 +0100 |
| commit | 1bc6391f65dec41ff0360b625b7a85a161e43955 (patch) | |
| tree | 29830a186d2fc00695436d9d22d13475cebd5ff5 /meta/recipes-support/icu/icu_53.1.bb | |
| parent | 9a747554ba985970009a065f3403b94565e698e3 (diff) | |
| download | openembedded-core-1bc6391f65dec41ff0360b625b7a85a161e43955.tar.gz openembedded-core-1bc6391f65dec41ff0360b625b7a85a161e43955.tar.bz2 openembedded-core-1bc6391f65dec41ff0360b625b7a85a161e43955.zip | |
icu: CVE-2014-8146-CVE-2014-8147
CVE-2014-8146 icu: heap overflow via incorrect isolateCount
CVE-2014-8147 icu: integer truncation in the resolveImplicitLevels function
References:
[1] https://github.com/pedrib/PoC/raw/master/generic/i-c-u-fail.7z
[2] https://www.kb.cert.org/vuls/id/602540
[3] http://bugs.icu-project.org/trac/changeset/37080
[4] http://bugs.icu-project.org/trac/changeset/37162
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta/recipes-support/icu/icu_53.1.bb')
| -rw-r--r-- | meta/recipes-support/icu/icu_53.1.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-support/icu/icu_53.1.bb b/meta/recipes-support/icu/icu_53.1.bb index d93af68438..2906e8f864 100644 --- a/meta/recipes-support/icu/icu_53.1.bb +++ b/meta/recipes-support/icu/icu_53.1.bb @@ -11,6 +11,7 @@ ICU_PV = "${@icu_download_version(d)}" BASE_SRC_URI = "http://download.icu-project.org/files/icu4c/${PV}/icu4c-${ICU_PV}-src.tgz" SRC_URI = "${BASE_SRC_URI} \ file://icu-pkgdata-large-cmd.patch \ + file://icu-CVE-2014-8146-CVE-2014-8147.patch \ " SRC_URI_append_class-target = "\ |