[SECURITY] [DLA 381-1] icu security update

2016-01-1108:42:30

lists.debian.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.008

Percentile

81.6%

JSON

Package : icu
Version : 4.4.1-8+squeeze5
CVE ID : CVE-2015-2632

A vulnerability was found in ICU, a set of libraries that provides Unicode and
internationalization support. Integer overflows in the ICU layout engine made
it possible to disclose information.

For Debian 6 "Squeeze", this problem has been fixed in icu version
4.4.1-8+squeeze5. We recommend you to upgrade your icu packages.

Learn more about the Debian Long Term Support (LTS) Project and how to
apply these updates at: https://wiki.debian.org/LTS/

Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian7mipsopenjdk-6-jre-headless< 6b36-1.13.8-1~deb7u1openjdk-6-jre-headless_6b36-1.13.8-1~deb7u1_mips.deb
Debian8amd64libicu52-dbg< 52.1-8+deb8u4libicu52-dbg_52.1-8+deb8u4_amd64.deb
Debian8armhfopenjdk-7-jre< 7u79-2.5.6-1~deb8u1openjdk-7-jre_7u79-2.5.6-1~deb8u1_armhf.deb
Debian8armhfopenjdk-7-jre-headless< 7u79-2.5.6-1~deb8u1openjdk-7-jre-headless_7u79-2.5.6-1~deb8u1_armhf.deb
Debian8mipselopenjdk-7-jre-headless< 7u79-2.5.6-1~deb8u1openjdk-7-jre-headless_7u79-2.5.6-1~deb8u1_mipsel.deb
Debian8powerpcicu-devtools< 52.1-8+deb8u4icu-devtools_52.1-8+deb8u4_powerpc.deb
Debian8powerpcopenjdk-7-jre-headless< 7u79-2.5.6-1~deb8u1openjdk-7-jre-headless_7u79-2.5.6-1~deb8u1_powerpc.deb
Debian8kfreebsd-amd64openjdk-7-jre-zero< 7u79-2.5.6-1~deb8u1openjdk-7-jre-zero_7u79-2.5.6-1~deb8u1_kfreebsd-amd64.deb
Debian7armelopenjdk-7-demo< 7u79-2.5.6-1~deb7u1openjdk-7-demo_7u79-2.5.6-1~deb7u1_armel.deb
Debian7armhflibicu48-dbg< 4.8.1.1-12+deb7u4libicu48-dbg_4.8.1.1-12+deb7u4_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	mips	openjdk-6-jre-headless	< 6b36-1.13.8-1~deb7u1	openjdk-6-jre-headless_6b36-1.13.8-1~deb7u1_mips.deb
Debian	8	amd64	libicu52-dbg	< 52.1-8+deb8u4	libicu52-dbg_52.1-8+deb8u4_amd64.deb
Debian	8	armhf	openjdk-7-jre	< 7u79-2.5.6-1~deb8u1	openjdk-7-jre_7u79-2.5.6-1~deb8u1_armhf.deb
Debian	8	armhf	openjdk-7-jre-headless	< 7u79-2.5.6-1~deb8u1	openjdk-7-jre-headless_7u79-2.5.6-1~deb8u1_armhf.deb
Debian	8	mipsel	openjdk-7-jre-headless	< 7u79-2.5.6-1~deb8u1	openjdk-7-jre-headless_7u79-2.5.6-1~deb8u1_mipsel.deb
Debian	8	powerpc	icu-devtools	< 52.1-8+deb8u4	icu-devtools_52.1-8+deb8u4_powerpc.deb
Debian	8	powerpc	openjdk-7-jre-headless	< 7u79-2.5.6-1~deb8u1	openjdk-7-jre-headless_7u79-2.5.6-1~deb8u1_powerpc.deb
Debian	8	kfreebsd-amd64	openjdk-7-jre-zero	< 7u79-2.5.6-1~deb8u1	openjdk-7-jre-zero_7u79-2.5.6-1~deb8u1_kfreebsd-amd64.deb
Debian	7	armel	openjdk-7-demo	< 7u79-2.5.6-1~deb7u1	openjdk-7-demo_7u79-2.5.6-1~deb7u1_armel.deb
Debian	7	armhf	libicu48-dbg	< 4.8.1.1-12+deb7u4	libicu48-dbg_4.8.1.1-12+deb7u4_armhf.deb