Ubuntu
icu package

Change logs for icu source package in Edgy

  1. Edgy (6.10)
  2. Change log 
  • icu (3.4.1a-1ubuntu1.6.10.1) edgy-security; urgency=low

  * SECURITY UPDATE: possible read from and write to out of bounds memory
    locations via back reference '\0' in regular expressions
  * SECURITY UPDATE: denial of service due to memory exhaustion via a
    crafted regular expression
  * debian/patches/SECURITY_CVE-2007-4770_4771.patch: fix regexcmp.cpp to
    return error on invalid back reference. fix rematch.cpp, uvectr32.h and
    uvectr32.cpp to return error when capacity is greater than maxCapacity
  * References
    CVE-2007-4770
    CVE-2007-4771

 -- Jamie Strandboge <email address hidden>   Thu, 20 Mar 2008 14:29:07 -0400
  • icu (3.4.1a-1ubuntu1) dapper; urgency=low

  * Synchronize with Debian unstable.

 -- Matthias Klose <email address hidden>   Mon, 24 Apr 2006 18:37:52 +0000