diff options
author | Sona Sarmadi <sona.sarmadi@enea.com> | 2015-08-28 15:12:04 +0200 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-09-01 21:19:46 +0100 |
commit | 7e8bd02a57dbf3cb7d46960748fc27078fb98597 (patch) | |
tree | 855027efb64c69f8205affcc1410932056fa4480 /meta/recipes-support/icu/icu_54.1.bb | |
parent | bdba0dd12dcca168e4721088414b47e411b0ef16 (diff) | |
download | poky-7e8bd02a57dbf3cb7d46960748fc27078fb98597.tar.gz |
icu: CVE-2014-8146-CVE-2014-8147
CVE-2014-8146 icu: heap overflow via incorrect isolateCount
CVE-2014-8147 icu: integer truncation in the resolveImplicitLevels function
References:
[1] https://github.com/pedrib/PoC/raw/master/generic/i-c-u-fail.7z
[2] https://www.kb.cert.org/vuls/id/602540
[3] http://bugs.icu-project.org/trac/changeset/37080
[4] http://bugs.icu-project.org/trac/changeset/37162
(From OE-Core rev: a461a1a9141fb6a3f79bf9773a837daace2e9996)
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Joshua Lock <joshua.lock@collabora.co.uk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-support/icu/icu_54.1.bb')
-rw-r--r-- | meta/recipes-support/icu/icu_54.1.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-support/icu/icu_54.1.bb b/meta/recipes-support/icu/icu_54.1.bb index 45b5cb6001..9f10beb19c 100644 --- a/meta/recipes-support/icu/icu_54.1.bb +++ b/meta/recipes-support/icu/icu_54.1.bb | |||
@@ -11,6 +11,7 @@ ICU_PV = "${@icu_download_version(d)}" | |||
11 | BASE_SRC_URI = "http://download.icu-project.org/files/icu4c/${PV}/icu4c-${ICU_PV}-src.tgz" | 11 | BASE_SRC_URI = "http://download.icu-project.org/files/icu4c/${PV}/icu4c-${ICU_PV}-src.tgz" |
12 | SRC_URI = "${BASE_SRC_URI} \ | 12 | SRC_URI = "${BASE_SRC_URI} \ |
13 | file://icu-pkgdata-large-cmd.patch \ | 13 | file://icu-pkgdata-large-cmd.patch \ |
14 | file://icu-CVE-2014-8146-CVE-2014-8147.patch \ | ||
14 | " | 15 | " |
15 | 16 | ||
16 | SRC_URI_append_class-target = "\ | 17 | SRC_URI_append_class-target = "\ |