Ovidiu Panait c6d473f460 icu: CVE-2017-14952 ...

Double free in i18n/zonemeta.cpp in International Components for Unicode
(ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary
code via a crafted string, aka a "redundant UVector entry clean up
function call" issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-14952

Upstream patches:
http://bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp

(From OE-Core rev: 16006869e30395dd758a1797e324567ec4f8e074)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 4ff12a8bf2b8d094085afbe8fa1d43f781cfa79d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-12-04 17:23:59 +00:00

..

icu

icu: CVE-2017-14952

2017-12-04 17:23:59 +00:00

icu_59.1.bb

icu: CVE-2017-14952

2017-12-04 17:23:59 +00:00

icu.inc

icu.inc: set CVE_PRODUCT to international_components_for_unicode

2017-07-24 09:13:31 +01:00