icu: CVE-2017-14952: Double free in i18n/zonemeta.cpp

Debian Bug report logs - #878840
icu: CVE-2017-14952: Double free in i18n/zonemeta.cpp

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: icu: CVE-2017-14952: Double free in i18n/zonemeta.cpp

Date: Tue, 17 Oct 2017 06:34:20 +0200

Source: icu
Version: 57.1-6
Severity: grave
Tags: patch security upstream

Hi,

the following vulnerability was published for icu.

CVE-2017-14952[0]:
| Double free in i18n/zonemeta.cpp in International Components for
| Unicode (ICU) for C/C++ through 59.1 allows remote attackers to
| execute arbitrary code via a crafted string, aka a "redundant UVector
| entry clean up function call" issue.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-14952
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14952
[1] http://www.sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu/
[2] https://ssl.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp

Please adjust the affected versions in the BTS as needed, unstable
seem to contain the issue, experimental not checked. Older version
have as well not been verified.

Regards,
Salvatore

Message #10 received at 878840-close@bugs.debian.org (full text, mbox, reply):

From: Laszlo Boszormenyi (GCS) <gcs@debian.org>

To: 878840-close@bugs.debian.org

Subject: Bug#878840: fixed in icu 57.1-7

Date: Tue, 17 Oct 2017 05:49:03 +0000

Source: icu
Source-Version: 57.1-7

We believe that the bug you reported is fixed in the latest version of
icu, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 878840@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <gcs@debian.org> (supplier of updated icu package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 17 Oct 2017 04:48:25 +0000
Source: icu
Binary: libicu57 libicu57-dbg libicu-dev icu-devtools icu-devtools-dbg icu-doc
Architecture: source amd64 all
Version: 57.1-7
Distribution: unstable
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 icu-devtools - Development utilities for International Components for Unicode
 icu-devtools-dbg - Development utilities for International Components for Unicode (d
 icu-doc    - API documentation for ICU classes and functions
 libicu-dev - Development files for International Components for Unicode
 libicu57   - International Components for Unicode
 libicu57-dbg - International Components for Unicode (debug symbols)
Closes: 878840
Changes:
 icu (57.1-7) unstable; urgency=high
 .
   * Backport upstream security fix for CVE-2017-14952: double free in
     createMetazoneMappings() (closes: #878840).
Checksums-Sha1:
 d91ea3535d19c000682c086ec16849bb5457bde5 2105 icu_57.1-7.dsc
 67a58944ae4342d94abebe35a1bac3883659d6eb 32968 icu_57.1-7.debian.tar.xz
 b6179f080b4077a90b28438f3abeab39796b3dd2 640210 icu-devtools-dbg_57.1-7_amd64.deb
 3bec816ca71c3e15f9783e2a80f5078ffc5fa958 177318 icu-devtools_57.1-7_amd64.deb
 36e16655295b956ea1c3c638ce8ca7a88dc6551c 2396950 icu-doc_57.1-7_all.deb
 207f2a46d23036583b8b6004e77d38ab2f78af72 7627 icu_57.1-7_amd64.buildinfo
 4d4890523ac91f316a40555ab50680b95b71965a 16568332 libicu-dev_57.1-7_amd64.deb
 a5085de9634d29695c1c9764002761f8e4ad1d8b 7366738 libicu57-dbg_57.1-7_amd64.deb
 dfabd5296cd5d1f06481fe212724ca7eba8960a0 7699328 libicu57_57.1-7_amd64.deb
Checksums-Sha256:
 f003ae5827e43f79cb3ab5afb34c46886ac438a0d3afa6f3c3b6d7e499af58f1 2105 icu_57.1-7.dsc
 7edb7536b98f4f48336f6d909f39ccfb2edbad6f8e2422edc8b6318022eb702d 32968 icu_57.1-7.debian.tar.xz
 cdb74de653541250039dd6c5006af7c934e6fdf35d8870c493f2fbe8e0ad510b 640210 icu-devtools-dbg_57.1-7_amd64.deb
 7826728eb5d846f7dc5920cbb7e05325c5bf3888ede827a4b1689195e6392f1d 177318 icu-devtools_57.1-7_amd64.deb
 313c54f37716e70a424d386c84115ce93e7902c1a73ef6c0a1d9a7a5c2b749ed 2396950 icu-doc_57.1-7_all.deb
 65c4a9354e92bd24602e9cbf8924315d766f49fd412e704e50c6759abd52ec98 7627 icu_57.1-7_amd64.buildinfo
 c1c6d7afbe2b6ec3351821e95146d0b4a75a7d57f29841c5ad3f6df6c8f1f501 16568332 libicu-dev_57.1-7_amd64.deb
 6d18d6b29822044d69076ea35e600d920d317734b263c664703081ebb0f08f79 7366738 libicu57-dbg_57.1-7_amd64.deb
 6d58f65de684078bc6ba358e19c38bff80712fb6dc78e5081fd0939cce33b2ea 7699328 libicu57_57.1-7_amd64.deb
Files:
 9f2787381c76ffe015990331cdbacd50 2105 libs optional icu_57.1-7.dsc
 811848ad96e0d31c7a3cbdd632518112 32968 libs optional icu_57.1-7.debian.tar.xz
 82db47f9933e9b47fe120c208bad5b21 640210 debug extra icu-devtools-dbg_57.1-7_amd64.deb
 684d5e422bdaad0931fddbe986b07a68 177318 libdevel optional icu-devtools_57.1-7_amd64.deb
 6cd35c97355a6417f10dd16f68f167f5 2396950 doc optional icu-doc_57.1-7_all.deb
 37bf784a7c3d3085f4d99ff52d614c39 7627 libs optional icu_57.1-7_amd64.buildinfo
 a2b7c6cdaae2f7015a07d7731089a59d 16568332 libdevel optional libicu-dev_57.1-7_amd64.deb
 8c901a63bb7363022e7daa989caf096a 7366738 debug extra libicu57-dbg_57.1-7_amd64.deb
 57c531b85e789b93e151fa18c1a25c8e 7699328 libs optional libicu57_57.1-7_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=tPji
-----END PGP SIGNATURE-----

Message #15 received at 878840-close@bugs.debian.org (full text, mbox, reply):

From: Laszlo Boszormenyi (GCS) <gcs@debian.org>

To: 878840-close@bugs.debian.org

Subject: Bug#878840: fixed in icu 57.1-6+deb9u1

Date: Wed, 29 Nov 2017 09:02:39 +0000

Source: icu
Source-Version: 57.1-6+deb9u1

We believe that the bug you reported is fixed in the latest version of
icu, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 878840@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <gcs@debian.org> (supplier of updated icu package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 24 Oct 2017 17:28:30 +0000
Source: icu
Binary: libicu57 libicu57-dbg libicu-dev icu-devtools icu-devtools-dbg icu-doc
Architecture: source amd64 all
Version: 57.1-6+deb9u1
Distribution: stretch
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 icu-devtools - Development utilities for International Components for Unicode
 icu-devtools-dbg - Development utilities for International Components for Unicode (d
 icu-doc    - API documentation for ICU classes and functions
 libicu-dev - Development files for International Components for Unicode
 libicu57   - International Components for Unicode
 libicu57-dbg - International Components for Unicode (debug symbols)
Closes: 878840
Changes:
 icu (57.1-6+deb9u1) stretch; urgency=high
 .
   * Backport upstream security fix for CVE-2017-14952: double free in
     createMetazoneMappings() (closes: #878840).
Checksums-Sha1:
 d37f55725ebbcc87423fc6e1db0b5f36881a42ca 2133 icu_57.1-6+deb9u1.dsc
 313d22ae492d8b7d560d486ed775190686e2b042 32960 icu_57.1-6+deb9u1.debian.tar.xz
 0a593f9476b8f9478ca573d22248fd361c36fc08 642474 icu-devtools-dbg_57.1-6+deb9u1_amd64.deb
 0ca9cfaca17f7e7061d50eb8235884ff8118af83 177590 icu-devtools_57.1-6+deb9u1_amd64.deb
 c7111085e4f04ba2458f6774c012d633033e1a20 2397192 icu-doc_57.1-6+deb9u1_all.deb
 cc37df72c2acea221cc8efc52d1a58f1d779b418 7410 icu_57.1-6+deb9u1_amd64.buildinfo
 b5772b3980b3a954e10bf6c569e1a61fe91b7075 16482724 libicu-dev_57.1-6+deb9u1_amd64.deb
 a1701f9b8b07b3d9ee0cfca0efda8c453ad59bc4 7368464 libicu57-dbg_57.1-6+deb9u1_amd64.deb
 70b1a76f4cf40c8944a6b247ff135bc9a0760596 7697116 libicu57_57.1-6+deb9u1_amd64.deb
Checksums-Sha256:
 e87306d83886a6a66d5f261cb4acc32dec74e755459ee395e95f84861ea2bb45 2133 icu_57.1-6+deb9u1.dsc
 5c028d093a0a8e9dee18597bcd9150fbbc400237c14400009f160e13480b026b 32960 icu_57.1-6+deb9u1.debian.tar.xz
 e44c6f41491eb2d8e8eaea52f7309cbace494de9da972f58fa64d29695d7bef4 642474 icu-devtools-dbg_57.1-6+deb9u1_amd64.deb
 068950364ecf26f02754047ebcdc4ff6fe28e23273b880889cbef595fef449c9 177590 icu-devtools_57.1-6+deb9u1_amd64.deb
 43ed7cba1fc26fac18bd6b622353939c3509b01bb5c04d8fdd0f5553ec163123 2397192 icu-doc_57.1-6+deb9u1_all.deb
 d29a3e10f4ff7c26dc2cc372a0be1daa22a6453e973668dd8a78ee5b8e1b1eb9 7410 icu_57.1-6+deb9u1_amd64.buildinfo
 d32b7755a4ada83da57aa72dc272078565e75d7249f2740216b189ad7a7d93ff 16482724 libicu-dev_57.1-6+deb9u1_amd64.deb
 ac1334b7e5187355db93be2e1a793ba5b38dee09c855ed7b60c67f50bf495e31 7368464 libicu57-dbg_57.1-6+deb9u1_amd64.deb
 d7a5382b6aa772df09c8d30170de1c2e562ad72ea4324400e65dc7439114b1da 7697116 libicu57_57.1-6+deb9u1_amd64.deb
Files:
 1270576d156f8f0b87a4eefb721234f5 2133 libs optional icu_57.1-6+deb9u1.dsc
 3b6cce8d5399292d587bf6ea09cbb2da 32960 libs optional icu_57.1-6+deb9u1.debian.tar.xz
 06a7ab617b9a1dcd5674b742c159ef0a 642474 debug extra icu-devtools-dbg_57.1-6+deb9u1_amd64.deb
 3a69ad63f61d66b38ed8026c55cc70d3 177590 libdevel optional icu-devtools_57.1-6+deb9u1_amd64.deb
 c0cd9dc6c71921295131151f1cf0a635 2397192 doc optional icu-doc_57.1-6+deb9u1_all.deb
 1f9af6d4a212885335207acbe59e09c6 7410 libs optional icu_57.1-6+deb9u1_amd64.buildinfo
 30a6551c42e1b66122b00ed57a2d6d9d 16482724 libdevel optional libicu-dev_57.1-6+deb9u1_amd64.deb
 a88da194fa147071e67cc749abcc7876 7368464 debug extra libicu57-dbg_57.1-6+deb9u1_amd64.deb
 c871b37f42ce3c4e81c5ee682563ddab 7697116 libs optional libicu57_57.1-6+deb9u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAloa9wEACgkQ3OMQ54ZM
yL89ihAAtNe0UzUSpVe8D2yrx3chDuzD9592DwMZsxohDO9nYIsN5rG7P8hDTa5d
xdP1hwX+2usdrrhIOYNB38ZkX6Rmpw3Zsh8y7VCWhEbgXeRBLaIAFwgM9749CRCw
UY6+Ngy/l0sU2VNp/O2ny11cc7MhX/gOWiVb0iWDUt5oCxaIBwcHvSzcSAHPDSZh
oyBT9JLqZ1I3C4WCpaJLuf1bW3+4zOyVhBYZge3c8cv1Q9OkHQxDDdicAOxS4i5c
Z6eLA25S+J2DsjuRGVhFD79jA6NhNSHysbApmQvujrOhcloLWKCacvYvZm4MU81u
kmy+O8U106/BOFIs2wP+S//UUpoHDZbzjZJ0bQ8kkN4CMpjPkZnr7jyTv+q0LdJ4
4jhSoEyoRdQXmN5RWfJxvsm9r42a3SZZV0Fp1ew0vppplEyuFqTBoEd/lQ8e0hUN
XcyGCvCmhBt9I9ACb5kOGQjM5LJpodworiohlBdZhLiREC4PqIzgsZztMXSWlM8q
HZ2SU3S/42Ah9LlyGvb/8fNsRG+yCF2HMxI7EJy9AatSqP/WxGGBPrLjlGetu6GB
i0cZcRBXKAmGnfnGMJOYFYD5N+2JPtkH8+hadfVYb6+KxWasjYN1313FKkr6cNhA
SjhhYBzFRv/Se+Fxl+q9sabmfxLTA25Ekspjg5nELjho26GrocI=
=6vGK
-----END PGP SIGNATURE-----

Message #20 received at 878840-close@bugs.debian.org (full text, mbox, reply):

From: Laszlo Boszormenyi (GCS) <gcs@debian.org>

To: 878840-close@bugs.debian.org

Subject: Bug#878840: fixed in icu 52.1-8+deb8u6

Date: Sat, 02 Dec 2017 19:32:53 +0000

Source: icu
Source-Version: 52.1-8+deb8u6

We believe that the bug you reported is fixed in the latest version of
icu, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 878840@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <gcs@debian.org> (supplier of updated icu package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 24 Oct 2017 17:28:29 +0000
Source: icu
Binary: libicu52 libicu52-dbg libicu-dev icu-devtools icu-doc
Architecture: source all amd64
Version: 52.1-8+deb8u6
Distribution: jessie
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 icu-devtools - Development utilities for International Components for Unicode
 icu-doc    - API documentation for ICU classes and functions
 libicu-dev - Development files for International Components for Unicode
 libicu52   - International Components for Unicode
 libicu52-dbg - International Components for Unicode
Closes: 878840
Changes:
 icu (52.1-8+deb8u6) jessie; urgency=high
 .
   * Backport upstream security fix for CVE-2017-14952: double free in
     createMetazoneMappings() (closes: #878840).
Checksums-Sha1:
 a059f9d2544dd58c12ddc26d599d9217520dea80 2015 icu_52.1-8+deb8u6.dsc
 6da9aa24cd5e2ee491f973a764f2e22b1e9e5f54 38108 icu_52.1-8+deb8u6.debian.tar.xz
 f3509dd6258efc15655db2a42fa7b34c10410620 2591742 icu-doc_52.1-8+deb8u6_all.deb
 607c2b440bc3e7089d1736947eddfaf6253799fd 6803594 libicu52_52.1-8+deb8u6_amd64.deb
 0a112a342801d62fed0307302767f38fcd8653d8 5935972 libicu52-dbg_52.1-8+deb8u6_amd64.deb
 138bf3a0fe5726f3d845e3374d07379391a78987 7664374 libicu-dev_52.1-8+deb8u6_amd64.deb
 76110676809d89f2890b644626992948d802dd4c 172870 icu-devtools_52.1-8+deb8u6_amd64.deb
Checksums-Sha256:
 1c77ead0935b29bb80b8f2756faf9dd7262b20aac632aef1eedd3fabf56fa6f6 2015 icu_52.1-8+deb8u6.dsc
 fd2df1a8d55fb7e093117e5dc761bbf01521f25a8076490d05fcebd3c005e77f 38108 icu_52.1-8+deb8u6.debian.tar.xz
 f5ff28f32f7d16dfda2414fa75eaae7d26afb4f81bf471b2b34b1cc7ca472e72 2591742 icu-doc_52.1-8+deb8u6_all.deb
 e31bb51c4b60f81709d8217ce69192bc0698045fd16d249d155217c4600e9d27 6803594 libicu52_52.1-8+deb8u6_amd64.deb
 f317e71e644cb8d7a521db9c07a059fe90bcef8f0b65cbd57a893e2c87d139fa 5935972 libicu52-dbg_52.1-8+deb8u6_amd64.deb
 1981860bd0cac88b42326aac8ed822f68a472c3f9943678492f7e00bdf939e77 7664374 libicu-dev_52.1-8+deb8u6_amd64.deb
 521b6055a74d00050777e0206604e1b81b01f95a476b6f36330323b3727730ef 172870 icu-devtools_52.1-8+deb8u6_amd64.deb
Files:
 7a34ae986c3721267ba744fe460165c4 2015 libs optional icu_52.1-8+deb8u6.dsc
 c48978b7960167db3e3beb4d0befdbf2 38108 libs optional icu_52.1-8+deb8u6.debian.tar.xz
 3ee5985eff634c1627b081bfdbce391d 2591742 doc optional icu-doc_52.1-8+deb8u6_all.deb
 1623cecd68e44004892f14269b6602fb 6803594 libs optional libicu52_52.1-8+deb8u6_amd64.deb
 222220222e626c1157e2c633e96088c2 5935972 debug extra libicu52-dbg_52.1-8+deb8u6_amd64.deb
 db16d93c903509bc6d33cf202b59de3b 7664374 libdevel optional libicu-dev_52.1-8+deb8u6_amd64.deb
 8f6eda2ef4329d196c14244b80c8428b 172870 libdevel optional icu-devtools_52.1-8+deb8u6_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=k8nQ
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.