Sona Sarmadi a01280b7ab icu: CVE-2014-8146-CVE-2014-8147 ...

CVE-2014-8146 icu: heap overflow via incorrect isolateCount
CVE-2014-8147 icu: integer truncation in the resolveImplicitLevels function

References:
[1] https://github.com/pedrib/PoC/raw/master/generic/i-c-u-fail.7z
[2] https://www.kb.cert.org/vuls/id/602540
[3] http://bugs.icu-project.org/trac/changeset/37080
[4] http://bugs.icu-project.org/trac/changeset/37162

(From OE-Core rev: 1bc6391f65dec41ff0360b625b7a85a161e43955)

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2015-09-19 11:53:16 +01:00

..

apr

apr: avoid absolute paths for grep

2014-12-31 10:19:02 +00:00

aspell

aspell: add perl to RDEPENDS_aspell-utils

2014-08-23 09:26:11 +01:00

atk

at-spi2-core: fix DBIND_CHECK_ALIGNOF m4 macro

2014-09-16 22:14:03 +01:00

attr

attr: Allow use during build and SDK

2014-08-15 18:21:52 +01:00

bdwgc

bdwgc: Upgrade 7.2d -> 7.4.2

2014-08-03 12:40:40 +01:00

beecrypt

beecrypt: add option --with-dev-dsp

2014-12-31 10:18:40 +00:00

boost

boost: Avoid to use local host configuration

2015-02-11 17:40:07 +00:00

ca-certificates

ca-certificates: Update to 20140325

2014-06-25 13:51:47 +01:00

consolekit

consolekit: depend on glib-2.0-native

2014-08-15 18:21:51 +01:00

createrepo

createrepo: RDEPENDS on libxml2-python

2014-06-25 13:51:49 +01:00

curl

curl: add a few missing security fixes

2015-07-20 20:54:31 +01:00

db

db_6.0.30: modify SPDX_S variable

2014-09-30 14:10:35 +01:00

enchant

enchant: fix unrecognised option

2014-01-06 11:13:55 +00:00

gdbm

gdbm-1.8.3: obey LDFLAGS

2014-09-22 13:04:22 +01:00

gmp

gmp: ppc64 build issue

2014-08-23 23:01:57 +01:00

gnome-desktop-testing

gnome-desktop-testing: Fix build on uclibc

2014-10-10 16:44:31 +01:00

gnupg

gnupg_1.4.7: add package config libusb

2014-10-18 16:14:05 +02:00

gnutls

gnutls: CVE-2015-3308

2015-09-19 11:53:15 +01:00

gpgme

gpgme: fix CVE-2014-3564

2015-07-20 20:54:33 +01:00

icu

icu: CVE-2014-8146-CVE-2014-8147

2015-09-19 11:53:16 +01:00

libassuan

libassuan: fix for rebuild

2014-10-10 16:44:31 +01:00

libbsd

libbsd: Upgrade to 0.7.0

2014-08-23 09:26:08 +01:00

libcap

coreutils/libpam: Add BBCLASSEXTEND nativesdk

2014-08-15 18:21:53 +01:00

libcheck

libcheck: Upgrade to 0.9.14

2014-08-02 09:26:16 +01:00

libcroco

libcroco: disable /usr/bin/croco-6.0-config

2014-07-08 11:20:13 +01:00

libdaemon

Tweak SUMMARY

2014-01-02 22:39:23 +00:00

libevdev

libevdev: add new recipe (needed by xf86-input-evdev)

2014-07-25 15:33:59 +01:00

libevent

Don't set DESCRIPTION to the same value as SUMMARY

2013-12-03 17:45:52 +00:00

libexif

Tweak SUMMARY

2014-01-02 22:39:23 +00:00

libfm

libcroco/libfm/menu-cache: Add missing gtk-doc class dependencies

2014-06-03 16:49:19 +01:00

libgcrypt

libgcrypt: Fix ARM assembly when building __PIC__

2014-09-16 22:14:11 +01:00

libgpg-error

libgpg-error: fix pkgconfig.patch

2014-07-19 00:08:59 +01:00

libical

libical: upgrade to 1.0.0

2014-08-31 23:40:49 +01:00

libiconv

recipes: Remove references to eglibc

2014-09-01 18:03:05 +01:00

libksba

binconfig-disabled: Add class and use

2014-06-16 15:31:40 +01:00

libmpc

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-02 20:46:59 +01:00

libnl

libnl: Upgrade to 3.2.25

2014-08-02 09:26:16 +01:00

liboil

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

libpcre

binconfig-disabled: Add class and use

2014-06-16 15:31:40 +01:00

libproxy

Globally replace 'base_contains' calls with 'bb.utils.contains'

2014-04-25 17:19:19 +01:00

libsoup

libsoup-2.4: Inherit gettext

2014-08-15 18:21:48 +01:00

libunistring

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-02 20:46:59 +01:00

libunwind

libunwind: backport patch to link against libgcc_s intead of libgcc

2015-04-17 22:39:31 +01:00

liburcu

liburcu: revert ARM GCC blacklist commit

2015-03-27 21:44:39 +00:00

libusb

Revert "libusb: add missing build dependency on udev"

2014-06-29 10:00:44 +01:00

libxslt

libxslt: create wrapper to avoid host system referencing

2014-12-31 10:18:55 +00:00

lz4

lz4: update to version 122

2014-09-03 11:09:02 +01:00

lzo

lzo: add debian patch for alignment issue

2014-12-31 10:18:59 +00:00

lzop

recipes: Remove PR = r0 from all recipes

2013-10-30 14:52:04 +00:00

mpfr

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-02 20:46:59 +01:00

neon

binconfig-disabled: Add class and use

2014-06-16 15:31:40 +01:00

nettle

buildtools-tarball: Add wget to buildtools-tarball

2014-07-21 19:05:35 +01:00

npth

binconfig-disabled: Add class and use

2014-06-16 15:31:40 +01:00

nspr

nspr: Upgrade to 4.10.7

2014-09-10 15:38:57 +01:00

nss

nss: CVE-2014-1568

2014-11-24 16:24:55 +00:00

nss-myhostname

nss-myhostname: skip it when systemd

2014-10-10 16:44:33 +01:00

pinentry

pinentry: add recipes

2014-09-29 12:12:44 +01:00

popt

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

ptest-runner

ptest-runner: return 1 instead of zero if any test fails

2014-08-23 23:01:59 +01:00

pth

binconfig-disabled: Add class and use

2014-06-16 15:31:40 +01:00

serf

serf: fix 'ccache' builds

2015-04-17 22:39:29 +01:00

shared-mime-info

shared-mime-info: upgrade to 1.3

2014-07-25 15:33:59 +01:00

sqlite

sqlite3: Upgrade to 2.8.6.0

2014-08-23 09:26:09 +01:00

taglib

binconfig-disabled: Add class and use

2014-06-16 15:31:40 +01:00

user-creation

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

vte

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00