icu: possibly more to CVE-2014-6585

Debian Bug report logs - #778511
icu: possibly more to CVE-2014-6585

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Michael Gilbert <mgilbert@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: icu: possibly more to CVE-2014-6585

Date: Sun, 15 Feb 2015 21:32:53 -0500

package: src:icu
version: 52.1-7
severity: important
tags: security

openjdk's changes for CVE-2014-6585 [0] add some additional checking
for the pointers in source/layout/ContextualSubstSubtables.cpp that
have yet to be included in upstream icu.

Also see even more checks added to embedded icu in the latest openjdk-8 package:
jdk-jdk8u40-b22/src/share/native/sun/font/layout/ContextualSubstSubtables.cpp

These are possibly the currently private changes hinted at in upstream
bug #11422:
http://bugs.icu-project.org/trac/ticket/11422

Best wishes,
Mike

[0] https://bugzilla.redhat.com/attachment.cgi?id=981489

Message #10 received at 778511-done@bugs.debian.org (full text, mbox, reply):

From: Alessandro Ghedini <ghedo@debian.org>

To: Michael Gilbert <mgilbert@debian.org>, 778511-done@bugs.debian.org

Subject: Re: Bug#778511: icu: possibly more to CVE-2014-6585

Date: Sat, 9 May 2015 13:17:51 +0200

[Message part 1 (text/plain, inline)]

Source: icu
Source-Version: 55.1-1

On dom, feb 15, 2015 at 09:32:53 -0500, Michael Gilbert wrote:
> package: src:icu
> version: 52.1-7
> severity: important
> tags: security
> 
> openjdk's changes for CVE-2014-6585 [0] add some additional checking
> for the pointers in source/layout/ContextualSubstSubtables.cpp that
> have yet to be included in upstream icu.
> 
> Also see even more checks added to embedded icu in the latest openjdk-8 package:
> jdk-jdk8u40-b22/src/share/native/sun/font/layout/ContextualSubstSubtables.cpp
> 
> These are possibly the currently private changes hinted at in upstream
> bug #11422:
> http://bugs.icu-project.org/trac/ticket/11422

It seems these changes have now been merged upstream (along with other ones) in
http://bugs.icu-project.org/trac/changeset/37086 and uploaded to experimental.

Closing this bug now.

Cheers

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.