package: src:icu version: 52.1-7 severity: important tags: security openjdk's changes for CVE-2014-6585 [0] add some additional checking for the pointers in source/layout/ContextualSubstSubtables.cpp that have yet to be included in upstream icu.
Also see even more checks added to embedded icu in the latest openjdk-8 package: jdk-jdk8u40-b22/src/share/native/sun/font/layout/ContextualSubstSubtables.cpp These are possibly the currently private changes hinted at in upstream bug #11422: http://bugs.icu-project.org/trac/ticket/11422 Best wishes, Mike [0] https://bugzilla.redhat.com/attachment.cgi?id=981489 -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
