Univention Bugzilla – Bug 51040
icu: Multiple issues (4.3)
Last modified: 2020-04-02 15:09:04 CEST
New Debian icu 57.1-6+deb9u4 fixes: This update addresses the following issue: * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * 57.1-6+deb9u3 (Wed, 07 Aug 2019 16:30:43 +0000) * Fix pkgdata command segfault. * Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)
--- mirror/ftp/4.3/unmaintained/4.3-5/source/icu_57.1-6+deb9u3.dsc +++ apt/ucs_4.3-0-errata4.3-5/source/icu_57.1-6+deb9u4.dsc @@ -1,3 +1,8 @@ +57.1-6+deb9u4 [Sat, 14 Mar 2020 19:34:22 +0000] Laszlo Boszormenyi (GCS) <gcs@debian.org>: + + * Backport upstream security fix for CVE-2020-10531: SEGV_MAPERR in + UnicodeString::doAppend() (closes: #953747). + 57.1-6+deb9u3 [Wed, 07 Aug 2019 16:30:43 +0000] Laszlo Boszormenyi (GCS) <gcs@debian.org>: * Fix pkgdata command segfault (closes: #893009). <http://10.200.17.11/4.3-5/#4148741556317664766>
OK: piuparts OK: debdiff, dchdiff, dscdiff OK: ~yaml; jenkinsjob failed to create the yaml properly, fixed now OK: no patch required Verified
<http://errata.software-univention.de/ucs/4.3/663.html>