-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 May 2017 13:44:55 +0200 Source: icu Binary: libicu48 libicu48-dbg libicu-dev icu-doc Architecture: source all amd64 Version: 4.8.1.1-12+deb7u7 Distribution: wheezy-security Urgency: high Maintainer: Jay Berkenbilt <qjb@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: icu-doc - API documentation for ICU classes and functions libicu-dev - Development files for International Components for Unicode libicu48 - International Components for Unicode libicu48-dbg - International Components for Unicode Changes: icu (4.8.1.1-12+deb7u7) wheezy-security; urgency=high . * Non-maintainer upload by the LTS Team. * Backport upstream security fix for CVE-2017-7867 and CVE-2017-7868, heap-buffer-overflow in utf8TextAccess. (basically taken from Jessie version created by Laszlo Boszormenyi) * additional patch to adapt the original fix to the Wheezy version Many, many thanks to Roberto C. Sánchez who dug deep into the code and created this patch! Checksums-Sha1: bfeaaf43c8b8e56ba1b5218567d4cef9a886a9b4 2137 icu_4.8.1.1-12+deb7u7.dsc 7146ee269b39273fa98d750f73136b14f781758a 18675781 icu_4.8.1.1.orig.tar.gz 75ca802e910f7f65029ec161f0b81999f1185fe4 208620 icu_4.8.1.1-12+deb7u7.debian.tar.gz ed560fa7dbe954aceb0f3db0547705e683b362d3 1888834 icu-doc_4.8.1.1-12+deb7u7_all.deb 2ca7682d92e743e369c10c5b062149bcd01fc104 4658714 libicu48_4.8.1.1-12+deb7u7_amd64.deb 2353d27207a16a42e9cdfe1ecf67e64b23e390fb 219768 libicu48-dbg_4.8.1.1-12+deb7u7_amd64.deb 14dd970c2ee2a090ed39d7e075a81acf7d0b9974 5797240 libicu-dev_4.8.1.1-12+deb7u7_amd64.deb Checksums-Sha256: 7847819e8a2c12252ef5eb7c9da5cbc2475e9aac85f43f18edf82bf4958b2f9e 2137 icu_4.8.1.1-12+deb7u7.dsc 0a70491c5fdfc5a0fa7429f820da73951e07d59a268b3d8ffe052eec65820ca1 18675781 icu_4.8.1.1.orig.tar.gz 8b3f75992f518cec97d8ed7cb062f31aa8b184eb0af1d27238a3bdf57dda28bb 208620 icu_4.8.1.1-12+deb7u7.debian.tar.gz 27e06f7951a8b60c648bdd70841a60d75d5a168de8dcddee5e73f3c2f32d3824 1888834 icu-doc_4.8.1.1-12+deb7u7_all.deb 986cea3ef48c27353fe0e6c2e675c6b496c9a7f0eb477eacad00f85864fb31a7 4658714 libicu48_4.8.1.1-12+deb7u7_amd64.deb 9194d5efde7587e033923eb3e34ba8d77c06411ce56638a8a845b4edf0f28412 219768 libicu48-dbg_4.8.1.1-12+deb7u7_amd64.deb 1fc63b699a87f583b8e36e647a6a0015cf66a41879259e49ec3f27bd5943f6ae 5797240 libicu-dev_4.8.1.1-12+deb7u7_amd64.deb Files: 8b5f25de6ff4326c586199fbd2b831aa 2137 libs optional icu_4.8.1.1-12+deb7u7.dsc ea93970a0275be6b42f56953cd332c17 18675781 libs optional icu_4.8.1.1.orig.tar.gz b71a79b2019c8b588ce2bd4e2f093da3 208620 libs optional icu_4.8.1.1-12+deb7u7.debian.tar.gz 4002bc1bd76d7862c8723a460dd5a6da 1888834 doc optional icu-doc_4.8.1.1-12+deb7u7_all.deb 54881659b317d5028c70c77cf3219a30 4658714 libs optional libicu48_4.8.1.1-12+deb7u7_amd64.deb a9dde9612d2d051aebb67d574ef4e7c4 219768 debug extra libicu48-dbg_4.8.1.1-12+deb7u7_amd64.deb bfa6985d7bf69bcf9630cbaaa8488ab7 5797240 libdevel optional libicu-dev_4.8.1.1-12+deb7u7_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAlkgLOtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR3qnEACmO/QFX5mJfmRSw9aZDUs4Lko3rnQ+ u6kylJpjZKD+ZBtJUk2qMa6LM0c6osbm/ccsRfGm8E14SZbd6q55NLEgEoUYqv8n Vf4D6XWqVCtoRUxs/thUxaYctSuhIH+QYjYEdPoXJZiRZzCOFS8wJIYdukPaPnkY CzjzR57FC3N9WUe8oT+ptYpnMqsPG34w+MrYdyL/9CK/I0m0qrZ2ykTV9sT7wL9B CCDmzHUj+BCxxIeqE2zk4ZRkPwF+Z55wuzugJ+XygZfXWvz+GykkQ5C0C/57J18W 19RITRhKmSIJdjK+snC25mGo1yG1UHcn2UL842ehlbQ/B504xqTbvg6ppmrIreVr /9V3PQ+leqM3aHtzbZa1Q2t1ibWgxky80tzwy57HnSdxnvvjjti8wc9fEo7T4G1g kjOaQMgP2McRFwkh/2mgBtvdlY33axwzI+o0GOkgvtGwYtsJii8O1N+PohYQ8BnS vdKyyU7+LE9747MllbNCHlyPme9xa144P1i44G11i1tOtjfACCNgNGAfnr/BcZ5F esYsz7sWu9eYMIY/RvmaoaYszO06VfLv+objBV25r9ESbqt4rzUp0bxgBpVC6aEC BaUn0JUxOut2ZM8eD8TTzWswtgwP02KQBvgSinf/v8Alxhm7+xhYI4yRTwLrivMe rNGWpWZsRRdOsQ== =PKF9 -----END PGP SIGNATURE-----