summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support/icu/icu/CVE-2017-14952.patch
Commit message (Collapse)AuthorAgeFilesLines
* icu: update to 60.1Alexander Kanavin2017-11-301-28/+0
| | | | | | | | | | | | Rebase a couple of patches. LICENSE checksum change due to typo fix. (From OE-Core rev: d4a76a51762d094d6f4fc016c52a6817c7f92637) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: CVE-2017-14952Ovidiu Panait2017-11-211-0/+28
Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-14952 Upstream patches: http://bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp (From OE-Core rev: 4ff12a8bf2b8d094085afbe8fa1d43f781cfa79d) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>