~ubuntu-branches/ubuntu/dapper/icu/dapper-security : changes

~ubuntu-branches/ubuntu/dapper/icu/dapper-security » Changes from revision 9

From Revision 9

Rev	Summary	Authors	Tags	Date
9	* SECURITY UPDATE: Cross-site scripting attack via invalid c... * SECURITY UPDATE: Cross-site scripting attack via invalid character sequences (LP: #341834) - debian/patches/03-cve-2008-1036.patch: Improve parsing logic in source/common/{ucnv2022.c,ucnv_bld.*,ucnv.c,ucnvhz.c} to replace invalid character sequences. Also, add test case to source/test/{cintltst/nucnvtst.c,testdata/conversion.txt}. - CVE-2008-1036	Marc Deslauriers	3.4.1a-1ubuntu1.6.06.2	15 years ago
8	* SECURITY UPDATE: possible read from and write to out of bo... * SECURITY UPDATE: possible read from and write to out of bounds memory locations via back reference '\0' in regular expressions * SECURITY UPDATE: denial of service due to memory exhaustion via a crafted regular expression * debian/patches/SECURITY_CVE-2007-4770_4771.patch: fix regexcmp.cpp to return error on invalid back reference. fix rematch.cpp, uvectr32.h and uvectr32.cpp to return error when capacity is greater than maxCapacity * References CVE-2007-4770 CVE-2007-4771	Jamie Strandboge	3.4.1a-1ubuntu1.6.06.1	16 years ago
7	Synchronize with Debian unstable. Synchronize with Debian unstable.	Matthias Klose	3.4.1a-1ubuntu1	18 years ago
6	Fix Bengali rendering. Ubuntu #35085. Fix Bengali rendering. Ubuntu #35085.	Matthias Klose	3.4-4ubuntu1	18 years ago
5	Rebuild using g++-4.0. Rebuild using g++-4.0.	Matthias Klose	3.4-4build1	18 years ago
4	Explicitly build with g++ 3.4. The current ICU fails its te... Explicitly build with g++ 3.4. The current ICU fails its test suite with 4.0 but not with 3.4. Future versions should work properly with 4.0.	Jay Berkenbilt	3.4-3	18 years ago
3	Rename icu-doc to icu21-doc. icu-doc is built by the icu28 p... Rename icu-doc to icu21-doc. icu-doc is built by the icu28 package.	Matthias Klose	2.1-2.1	19 years ago
2	* Fixed a crash in uconv when no argument is passed to -f or... * Fixed a crash in uconv when no argument is passed to -f or -t. * Other upstream changes. * Fresh upload with an up to date orig tar file so that future diffs won't be 6 megabytes long!	Yves Arrouye	2.0-2.1pre20020303-1	22 years ago
1	Import upstream version 2.0-2.1pre20020303 Import upstream version 2.0-2.1pre20020303	Yves Arrouye	upstream-2.0-2.1pre20020303	22 years ago