Re: [icu-support] Request for patch review

[Roberto C. S. <ro...@co...>]

Hi John,

I'm not sure.  The issue I am trying to resolve is to patch the CVEs I
listed in an older version of ICU still available and in use in the
Debian oldstable release.

Regards,

-Roberto

On Thu, Jul 07, 2016 at 01:55:24PM +0000, McCann, John wrote:
> Thanks Roberto,
> 
> Is your issue similar to mine?
> 
> Kind regards
> 
> John
> 
> -----Original Message-----
> From: Roberto C. Sánchez [mailto:ro...@co...]
> Sent: 07 July 2016 13:49
> To: icu...@li...
> Subject: [icu-support] Request for patch review
> 
> Hello,
> 
> I posted the below to trac [0] last week:
> 
> ----------------------------------------
> Greetings. I have prepared patches for the Debian package of ICU 4.8.1.1 (in Wheezy, or the oldstable distribution, 7.11) that cover CVE-2015-2632, CVE-2015-4844, and CVE-2016-0494. They are based on specific commits to the OpenJDK upstream source. I would like to upload the patched ICU to Debian Wheezy in order to address the stated CVEs.
> Would it be possible for someone from upstream, who is more familiar with the inner workings of ICU, to review the patches?
> ----------------------------------------
> 
> I have not yet received a reply, so I decided to post here to the list to inquire if this is in fact the correct approach to get the patches reviewed or to see if someone who hasn't seen the trac ticket might be able to assist me.
> 
> Regards,
> 
> -Roberto
> 
> [0] http://bugs.icu-project.org/trac/ticket/12276
> 
> --
> Roberto C. Sánchez
> http://people.connexer.com/~roberto
> http://www.connexer.com
> 
> ------------------------------------------------------------------------------
> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today.
> http://sdm.link/attshape
> _______________________________________________
> icu-support mailing list - icu...@li... To Un/Subscribe: https://lists.sourceforge.net/lists/listinfo/icu-support
> Archives/Project Info: http://site.icu-project.org/contacts
> -----------------
> Siemens Industry Software Limited is a limited company registered in England and Wales.
> Registered number: 3476850.
> Registered office: Faraday House, Sir William Siemens Square, Frimley, Surrey, GU16 8QD.
> 
> ------------------------------------------------------------------------------
> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
> present their vision of the future. This family event has something for
> everyone, including kids. Get more information and register today.
> http://sdm.link/attshape
> _______________________________________________
> icu-support mailing list - icu...@li...
> To Un/Subscribe: https://lists.sourceforge.net/lists/listinfo/icu-support
> Archives/Project Info: http://site.icu-project.org/contacts

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com