* SECURITY UPDATE: heap overflow in __gconv_translit_find() (LP: #1362409)
- debian/patches/any/cvs-CVE-2014-5119.diff: Backport upstream commit to
completely remove support for loadable gconv transliteration modules.
* SECURITY REGRESSION: localplt regression introduced in 2.11.1-0ubuntu7.14
- debian/patches/any/submitted-CVE-2014-0475.diff: update with a backport
of upstream commit ca38dc17 to include memmem hidden alias declaration.
-- Adam Conrad <email address hidden> Wed, 27 Aug 2014 22:08:11 -0600
This bug was fixed in the package eglibc - 2.11.1-0ubuntu7.16
--------------- 0ubuntu7. 16) lucid; urgency=medium
eglibc (2.11.1-
* SECURITY UPDATE: heap overflow in __gconv_ translit_ find() (LP: #1362409) patches/ any/cvs- CVE-2014- 5119.diff: Backport upstream commit to patches/ any/submitted- CVE-2014- 0475.diff: update with a backport
- debian/
completely remove support for loadable gconv transliteration modules.
* SECURITY REGRESSION: localplt regression introduced in 2.11.1-0ubuntu7.14
- debian/
of upstream commit ca38dc17 to include memmem hidden alias declaration.
-- Adam Conrad <email address hidden> Wed, 27 Aug 2014 22:08:11 -0600