Accepted: icu 3.8-6 (source)

Ubuntu Installer archive at ubuntu.com
Fri Feb 8 13:35:15 GMT 2008


Accepted:
 OK: icu_3.8.orig.tar.gz
 OK: icu_3.8-6.diff.gz
 OK: icu_3.8-6.dsc
     -> Component: main Section: libs

Origin: Debian/unstable
Format: 1.7
Date: Fri,  08 Feb 2008 13:24:37 +0000
Source: icu
Binary: libicu38, libicu38-dbg, libicu-dev, lib32icu38, lib32icu-dev, icu-doc
Architecture: source
Version: 3.8-6
Distribution: hardy
Urgency: high
Maintainer: Jay Berkenbilt <qjb at debian.org>
Changed-By: Michael Bienia <michael at vorlon.ping.de>
Closes: 463688
Changes: 
 icu (3.8-6) unstable; urgency=high
 .
   * Add debian/patches/00-cve-2007-4770-4771.patch created from with
     svn diff -c 23292 \
     http://source.icu-project.org/repos/icu/icu/branches/maint/maint-3-8
     to address the following security vulnerablilities:
      - CVE-2007-4770: reference to non-existent capture group may
        cause access to invalid memory
      - CVE-2007-4771: buffer overflow in regexcmp.cpp
     (Closes: #463688)
   * Updated standards version to 3.7.3: no changes required.
Files: 
 072afed03a6c137388a0fa9c632cfe4f 11860 libs optional icu_3.8-6.diff.gz
 33af53f873f321b6e209bfff05c1e424 889 libs optional icu_3.8-6.dsc





More information about the Hardy-changes mailing list