-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 07 Sep 2009 20:00:39 -0400 Source: icu Binary: libicu38 libicu38-dbg libicu-dev lib32icu38 lib32icu-dev icu-doc Architecture: source all i386 Version: 3.8.1-3+lenny2 Distribution: stable-security Urgency: high Maintainer: Jay Berkenbilt <qjb@debian.org> Changed-By: Jay Berkenbilt <qjb@debian.org> Description: icu-doc - API documentation for ICU classes and functions lib32icu-dev - Development files for International Components for Unicode (32-bi lib32icu38 - International Components for Unicode (32-bit) libicu-dev - Development files for International Components for Unicode libicu38 - International Components for Unicode libicu38-dbg - International Components for Unicode Closes: 534590 Changes: icu (3.8.1-3+lenny2) stable-security; urgency=high . * Apply patch CVE-2009-0153.patch to fix problem handling invalid byte sequences during Unicode conversion. Thanks to Red Hat for backporting the patch to ICU version 3.8.1. Applying this patch to the debian package required pulling in three additional Red Hat patches for tickets 5797, 6001, and 6002 in ICU's issue tracking system as well as adjusting offsets in CVE-2008-1036.patch. (Closes: #534590) Checksums-Sha1: 9e19a04c83c78507a17a4b63fc3cd888dff1f0fe 1298 icu_3.8.1-3+lenny2.dsc 380e3dffcf780226e3c48c5a1c075513554f5083 41943 icu_3.8.1-3+lenny2.diff.gz fd1b481cf86ffe12f003bbb88202a089b7f7ab90 3659700 icu-doc_3.8.1-3+lenny2_all.deb 61be29d34827455982116937e8722928c3af625e 5918780 libicu38_3.8.1-3+lenny2_i386.deb 08f530b306a9dd05dcb27cabb8e49cc82089817c 2278340 libicu38-dbg_3.8.1-3+lenny2_i386.deb 75862e07dfc12a6bd37aab9ca0b7bcd7d09effa9 6975168 libicu-dev_3.8.1-3+lenny2_i386.deb Checksums-Sha256: 47afc1ac4ae7d37f8f26d894de75082a71a6653b6336eca853ec165a9e6b4d90 1298 icu_3.8.1-3+lenny2.dsc ba7999f8ff453a10163edffcaf5f7f9ca946100b4f83da47c68616860ee1cb4f 41943 icu_3.8.1-3+lenny2.diff.gz ad8ded72ac122d6609b88e66cc0f75c2e06f079466cd8287e8ef9d9c11c5259d 3659700 icu-doc_3.8.1-3+lenny2_all.deb 6450aab55d8ea87cf14a46f804a0c5ebdce82890cd4c51b67026db4820bb467d 5918780 libicu38_3.8.1-3+lenny2_i386.deb 5a5c53fda354063f299a9c5d06d2a0d97c096b9d7707ece07987c574162aaf4a 2278340 libicu38-dbg_3.8.1-3+lenny2_i386.deb 942a3560e7d1c4a8641cb1a11283ce72c99b5473366acffea5244efe77f365a0 6975168 libicu-dev_3.8.1-3+lenny2_i386.deb Files: e0528ce00964025af9b2f940f588664a 1298 libs optional icu_3.8.1-3+lenny2.dsc 57d76fe9884c543a634bfd44425a42c6 41943 libs optional icu_3.8.1-3+lenny2.diff.gz 69882d02e07863b195b7e9b798bdeff2 3659700 doc optional icu-doc_3.8.1-3+lenny2_all.deb a471bd785fecadc4a7acd91be38a1bca 5918780 libs optional libicu38_3.8.1-3+lenny2_i386.deb b95d691813f7d32d7bc1a8aa96ddcd94 2278340 libs extra libicu38-dbg_3.8.1-3+lenny2_i386.deb e5c844c5ce908655075dd49c57182b3f 6975168 libdevel optional libicu-dev_3.8.1-3+lenny2_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAkqvzHkACgkQXm3vHE4uylps0gCcCkfaGXyWtJrz8fqno3S/XXoM zfwAoNAmgYLnJww5PNtseCjH1TVNeV0q =1o3y -----END PGP SIGNATURE----- Accepted: icu-doc_3.8.1-3+lenny2_all.deb to pool/main/i/icu/icu-doc_3.8.1-3+lenny2_all.deb icu_3.8.1-3+lenny2.diff.gz to pool/main/i/icu/icu_3.8.1-3+lenny2.diff.gz icu_3.8.1-3+lenny2.dsc to pool/main/i/icu/icu_3.8.1-3+lenny2.dsc libicu-dev_3.8.1-3+lenny2_i386.deb to pool/main/i/icu/libicu-dev_3.8.1-3+lenny2_i386.deb libicu38-dbg_3.8.1-3+lenny2_i386.deb to pool/main/i/icu/libicu38-dbg_3.8.1-3+lenny2_i386.deb libicu38_3.8.1-3+lenny2_i386.deb to pool/main/i/icu/libicu38_3.8.1-3+lenny2_i386.deb
