-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Mon, 07 Sep 2009 20:21:59 -0400 Source: icu Binary: libicu36-dev libicu36 icu-doc Architecture: source all i386 Version: 3.6-2etch3 Distribution: oldstable-security Urgency: high Maintainer: Jay Berkenbilt <qjb@debian.org> Changed-By: Jay Berkenbilt <qjb@debian.org> Description: icu-doc - API documentation for ICU classes and functions libicu36 - International Components for Unicode (libraries) libicu36-dev - International Components for Unicode (development files) Closes: 534590 Changes: icu (3.6-2etch3) oldstable-security; urgency=high . * Apply patch CVE-2009-0153.patch to fix problem handling invalid byte sequences during Unicode conversion. Thanks to Red Hat for backporting the patch to ICU version 3.6. Applying this patch to the debian package required pulling in three additional Red Hat patches for tickets 5483, 5797, 6001, and 6002 in ICU's issue tracking system as well as adjusting offsets in CVE-2008-1036.patch. (Closes: #534590) Files: 8b600075600533ce08c9801ffa571a19 592 libs optional icu_3.6-2etch3.dsc 601af38fe10a27e08e40985c409bc6c4 45190 libs optional icu_3.6-2etch3.diff.gz 8bf16fb7db375fb14de7082bcb814733 3239572 doc optional icu-doc_3.6-2etch3_all.deb f5d9e50ecb224df9ae4f0c7057097f54 5470148 libs optional libicu36_3.6-2etch3_i386.deb d8e1c31e6f1d238353340a9b82da1ed8 6466444 libdevel optional libicu36-dev_3.6-2etch3_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFKr8TrXm3vHE4uyloRAtbEAJ9FHPzNYtHX8cuG3Xf8mpD1+bP39wCgndMb pIx4vAu9EHFoerZ+8wRn4Rs= =xhfn -----END PGP SIGNATURE----- Accepted: icu-doc_3.6-2etch3_all.deb to pool/main/i/icu/icu-doc_3.6-2etch3_all.deb icu_3.6-2etch3.diff.gz to pool/main/i/icu/icu_3.6-2etch3.diff.gz icu_3.6-2etch3.dsc to pool/main/i/icu/icu_3.6-2etch3.dsc libicu36-dev_3.6-2etch3_i386.deb to pool/main/i/icu/libicu36-dev_3.6-2etch3_i386.deb libicu36_3.6-2etch3_i386.deb to pool/main/i/icu/libicu36_3.6-2etch3_i386.deb
