* SECURITY UPDATE: heap overflow in __gconv_translit_find() (LP: #1362409)
- debian/patches/any/cvs-CVE-2014-5119.diff: Backport upstream commit to
completely remove support for loadable gconv transliteration modules.
* SECURITY REGRESSION: localplt regression introduced in 2.15-0ubuntu10.6
- debian/patches/any/submitted-CVE-2014-0475.diff: update with a backport
of upstream commit ca38dc17 to include memmem hidden alias declaration.
-- Adam Conrad <email address hidden> Wed, 27 Aug 2014 22:18:52 -0600
This bug was fixed in the package eglibc - 2.15-0ubuntu10.7
---------------
eglibc (2.15-0ubuntu10.7) precise; urgency=medium
* SECURITY UPDATE: heap overflow in __gconv_ translit_ find() (LP: #1362409) patches/ any/cvs- CVE-2014- 5119.diff: Backport upstream commit to patches/ any/submitted- CVE-2014- 0475.diff: update with a backport
- debian/
completely remove support for loadable gconv transliteration modules.
* SECURITY REGRESSION: localplt regression introduced in 2.15-0ubuntu10.6
- debian/
of upstream commit ca38dc17 to include memmem hidden alias declaration.
-- Adam Conrad <email address hidden> Wed, 27 Aug 2014 22:18:52 -0600