lp:ubuntu/gutsy-security/icu

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

13. By Marc Deslauriers on 2009-03-25

* SECURITY UPDATE: Cross-site scripting attack via invalid character
  sequences (LP: #341834)
  - debian/patches/03-cve-2008-1036.patch: Improve parsing logic in
    source/common/{ucnv2022.c,ucnv_bld.*,ucnv.c,ucnvhz.c} to replace
    invalid character sequences. Also, add test case to
    source/test/{cintltst/nucnvtst.c,testdata/conversion.txt}.
  - CVE-2008-1036

12. By Jamie Strandboge on 2008-03-20

* SECURITY UPDATE: possible read from and write to out of bounds memory
  locations via back reference '\0' in regular expressions
* SECURITY UPDATE: denial of service due to memory exhaustion via a
  crafted regular expression
* debian/patches/SECURITY_CVE-2007-4770_4771.patch: fix regexcmp.cpp to
  return error on invalid back reference. fix rematch.cpp, uvectr32.h and
  uvectr32.cpp to return error when capacity is greater than maxCapacity
* References
  CVE-2007-4770
  CVE-2007-4771
* Modify Maintainer value to match the DebianMaintainerField
  specification.

11. By Jay Berkenbilt <email address hidden> on 2007-07-10

Include patch from Samuel Thibault to allow icu to build on gnu hurd.
(Closes: #414446)

10. By Matthias Klose on 2007-03-05

Rebuild for changes in the amd64 toolchain.

9. By Jay Berkenbilt <email address hidden> on 2006-11-27

Include patch to fix error in IndicClassTables to fix
worstCaseExpansion for Sinhala. Thanks to Harshula for forwarding
this.

8. By Matthias Klose on 2006-11-02

Rebuild for ldbl128 change on powerpc and sparc.

7. By Matthias Klose on 2006-04-24

Synchronize with Debian unstable.

6. By Matthias Klose on 2006-03-15

Fix Bengali rendering. Ubuntu #35085.

5. By Matthias Klose on 2006-02-16

Rebuild using g++-4.0.

4. By Jay Berkenbilt <email address hidden> on 2005-11-19

Explicitly build with g++ 3.4. The current ICU fails its test suite
with 4.0 but not with 3.4. Future versions should work properly with
4.0.