Ovidiu Panait 3bd6d1831b icu: CVE-2017-14952 ...

Double free in i18n/zonemeta.cpp in International Components for Unicode
(ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary
code via a crafted string, aka a "redundant UVector entry clean up
function call" issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-14952

Upstream patches:
http://bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp

(From OE-Core rev: 4ff12a8bf2b8d094085afbe8fa1d43f781cfa79d)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-11-21 13:06:12 +00:00

..

apr

apr-util: 1.5.4 -> 1.6.0

2017-08-18 10:40:26 +01:00

argp-standalone

argp-standalone: drop RDEPENDS dev/staticdev packages on main package

2017-10-07 23:20:40 +01:00

aspell

aspell: Fix build with gcc7

2017-05-11 16:59:18 +01:00

atk

at-spi2-core: remove redundant intltool dependency

2017-11-11 12:14:26 +00:00

attr

attr: Backports to fix exported headers

2017-09-18 11:07:30 +01:00

bash-completion

bash-completion: remove rfkill file that util-linux provides

2017-11-08 22:24:03 +00:00

beecrypt

beecrypt: add option --with-dev-dsp

2014-11-12 15:38:30 +00:00

bmap-tools

bmap-tools: switch to Python 3

2017-09-11 17:30:29 +01:00

boost

boost: update to 1.65.1

2017-11-09 12:33:16 +00:00

ca-certificates

ca-certificates: update to 20170717

2017-08-31 23:30:03 +01:00

consolekit

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

curl

curl_7.54.1.bb: improve reproducibility

2017-11-08 22:24:04 +00:00

db

db: don't provide virtual/db

2017-11-11 12:14:26 +00:00

debianutils

debianutils: Add a native version (for run-parts)

2017-08-25 12:08:50 +01:00

enchant

enchant: add PACKAGECONFIG for *spell

2016-09-20 15:11:08 +01:00

gdbm

gdbm: update to 1.13

2017-05-23 17:45:36 +01:00

gmp

gmp: improve reproducibility

2017-08-17 00:21:15 +01:00

gnome-desktop-testing

gnome-desktop-testing: fix ptest output format

2015-11-16 11:39:33 +00:00

gnupg

gnupg: 2.1.23 -> 2.2.0

2017-09-02 00:52:10 +01:00

gnutls

gnutls: update to 3.5.16

2017-11-07 13:25:31 +00:00

gpgme

gpgme: remove local m4/python.m4

2017-08-18 10:40:27 +01:00

icu

icu: CVE-2017-14952

2017-11-21 13:06:12 +00:00

iso-codes

iso-codes: update to 3.76

2017-11-09 12:33:16 +00:00

libassuan

nativesdk-packagegroup-sdk-host: replace smartpm with dnf

2017-03-14 14:42:17 +00:00

libatomic-ops

libatomic-ops: Upgrade to 7.6.0

2017-06-03 23:46:07 +01:00

libbsd

libbsd: 0.8.5 -> 0.8.6

2017-08-23 08:47:02 +01:00

libcap

libcap: fix build with gperf 3.1

2017-08-13 09:27:37 +01:00

libcap-ng

libcap-ng: 0.7.7 -> 0.7.8

2016-08-04 15:22:23 +01:00

libcheck

libcheck: Upgrade to 0.12.0

2017-11-05 22:33:23 +00:00

libcroco

libcroco: Upgrade 0.6.11 -> 0.6.12

2017-06-28 15:52:19 +01:00

libdaemon

libdaemon: Explicitly include unisttd.h instead of sys/unistd.h

2015-04-10 18:10:26 +01:00

libevdev

libevdev: Upgrade 1.5.6 -> 1.5.7

2017-06-03 23:46:07 +01:00

libevent

libevent: 2.0.22 -> 2.1.8

2017-05-16 14:08:29 +01:00

libexif

Tweak SUMMARY

2014-01-02 22:39:23 +00:00

libffi

libffi: Add HOMEPAGE info into recipe file.

2017-09-22 17:15:30 +01:00

libfm

libfm: remove file which conflicts with libfm-extra

2017-09-11 17:30:30 +01:00

libgcrypt

libgcrypt: update from version 1.8.0 to 1.8.1

2017-11-05 22:33:20 +00:00

libgpg-error

libgpg-error: 1.26 -> 1.27

2017-05-18 14:01:47 +01:00

libical

libical: fix build failure after changing machine

2016-09-14 22:22:07 +01:00

libksba

libksba: update to 1.3.5

2016-10-28 16:15:18 +01:00

libmpc

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libnl

libnl: update to 3.2.29

2017-03-01 23:27:09 +00:00

libpcre

libpcre2: update to 10.30

2017-11-07 13:25:31 +00:00

libproxy

libproxy: upgrade to 0.4.15

2017-11-21 13:06:11 +00:00

libsoup

libsoup-2.4: update to 2.60.1

2017-11-09 12:33:17 +00:00

libunistring

libunistring: Update version 0.9.6 -> 0.9.7

2016-12-17 09:57:03 +00:00

libunwind

libunwind: We set -fPIE in security flags now if gcc is not configured for default PIE

2017-07-08 13:34:45 +01:00

liburcu

liburcu: update to 0.10.0

2017-06-28 15:52:18 +01:00

libusb

libusb1: upgrade 1.0.20 -> 1.0.21

2017-03-01 23:27:10 +00:00

libxslt

libxslt: update to 1.1.31

2017-11-09 12:33:16 +00:00

libyaml

libyaml: Enable nativesdk bake

2016-11-15 15:19:53 +00:00

lz4

lz4: fix upstream version check

2017-11-09 12:33:16 +00:00

lzo

lzo: Upgrade 2.09 -> 2.10

2017-06-06 19:52:26 +01:00

lzop

meta: do not append to BBCLASSEXTEND

2017-03-10 14:50:11 +00:00

mpfr

mpfr: 3.1.4 -> 3.1.5

2016-12-13 22:55:19 +00:00

neon

neon: Upgrade 0.30.1 -> 0.30.2

2016-11-06 23:35:34 +00:00

nettle

nettle-ptest: fix a failing test

2017-11-05 22:33:22 +00:00

npth

npth: update to 1.5

2017-06-28 15:52:18 +01:00

nspr

nspr: update to 4.17

2017-11-07 13:25:30 +00:00

nss

nss: update to 3.33.0

2017-11-07 13:25:31 +00:00

nss-myhostname

nss-myhostname: Fix build on musl

2016-02-04 23:39:02 +00:00

p11-kit

p11-kit: enable gtk-doc

2016-09-09 12:12:23 +01:00

pinentry

pinentry: update to 1.0.0

2017-06-28 20:55:08 +01:00

popt

meta: update patch metadata

2016-07-08 09:57:24 +01:00

ptest-runner

ptest-runner: fix segfault with -t option

2017-09-22 17:15:30 +01:00

re2c

re2c: fix build race

2017-08-03 11:14:13 +01:00

rng-tools

rng-tools: Fix crazy defaults

2017-11-05 13:40:33 +00:00

serf

serf: Update to version 1.3.9

2016-11-15 15:19:53 +00:00

shared-mime-info

shared-mime-info: update to 1.9

2017-11-09 12:33:17 +00:00

source-highlight

source-highlight: use with-boost-libdir

2016-10-15 10:01:43 +01:00

sqlite

sqlite3: upgrade to 3.21.0

2017-11-21 13:06:11 +00:00

taglib

taglib: Security fix CVE-2017-12678

2017-08-27 22:30:06 +01:00

user-creation

xuser-account: remove GROUPADD_PARAM

2016-07-20 10:28:51 +01:00

vte

vte: update to 0.50.1

2017-11-09 12:33:17 +00:00