Accepted: icu 3.8-6 (source)
Ubuntu Installer
archive at ubuntu.com
Fri Feb 8 13:35:15 GMT 2008
Accepted:
OK: icu_3.8.orig.tar.gz
OK: icu_3.8-6.diff.gz
OK: icu_3.8-6.dsc
-> Component: main Section: libs
Origin: Debian/unstable
Format: 1.7
Date: Fri, 08 Feb 2008 13:24:37 +0000
Source: icu
Binary: libicu38, libicu38-dbg, libicu-dev, lib32icu38, lib32icu-dev, icu-doc
Architecture: source
Version: 3.8-6
Distribution: hardy
Urgency: high
Maintainer: Jay Berkenbilt <qjb at debian.org>
Changed-By: Michael Bienia <michael at vorlon.ping.de>
Closes: 463688
Changes:
icu (3.8-6) unstable; urgency=high
.
* Add debian/patches/00-cve-2007-4770-4771.patch created from with
svn diff -c 23292 \
http://source.icu-project.org/repos/icu/icu/branches/maint/maint-3-8
to address the following security vulnerablilities:
- CVE-2007-4770: reference to non-existent capture group may
cause access to invalid memory
- CVE-2007-4771: buffer overflow in regexcmp.cpp
(Closes: #463688)
* Updated standards version to 3.7.3: no changes required.
Files:
072afed03a6c137388a0fa9c632cfe4f 11860 libs optional icu_3.8-6.diff.gz
33af53f873f321b6e209bfff05c1e424 889 libs optional icu_3.8-6.dsc
More information about the Hardy-changes
mailing list