Control: retitle -1 icu: CVE-2017-7867 CVE-2017-7868: Heap-buffer-overflow in 
utf8TextAccess

Adding as well

CVE-2017-7868:
| International Components for Unicode (ICU) for C/C++ before 2017-02-13
| has an out-of-bounds write caused by a heap-based buffer overflow
| related to the utf8TextAccess function in common/utext.cpp and the
| utext_moveIndex32* function.

which has the same upstream ticket (closed) and same changeset to fix,
but are for issues via two different functions.

Still think both affect icu back to 52.1, but please double check if
I'm wrong possibly.

Regards,
Salvatore

Reply via email to