Accepted: icu, icu, icu, icu, icu, icu 3.6-2ubuntu0.1 (source, amd64, i386, ia64, powerpc, sparc)

[Ubuntu Installer]

Accepted:
 OK: icu_3.6.orig.tar.gz
 OK: icu_3.6-2ubuntu0.1.diff.gz
 OK: icu_3.6-2ubuntu0.1.dsc
     -> Component: main Section: libs
 OK: libicu36_3.6-2ubuntu0.1_amd64.deb
 OK: libicu36-dev_3.6-2ubuntu0.1_amd64.deb
 OK: icu-doc_3.6-2ubuntu0.1_all.deb
 OK: libicu36_3.6-2ubuntu0.1_i386.deb
 OK: libicu36-dev_3.6-2ubuntu0.1_i386.deb
 OK: libicu36_3.6-2ubuntu0.1_ia64.deb
 OK: libicu36-dev_3.6-2ubuntu0.1_ia64.deb
 OK: libicu36_3.6-2ubuntu0.1_powerpc.deb
 OK: libicu36-dev_3.6-2ubuntu0.1_powerpc.deb
 OK: libicu36_3.6-2ubuntu0.1_sparc.deb
 OK: libicu36-dev_3.6-2ubuntu0.1_sparc.deb

Format: 1.7
Date: Thu, 20 Mar 2008 14:45:12 -0400
Source: icu
Binary: icu-doc libicu36 libicu36-dev
Architecture: amd64 all i386 ia64 powerpc source sparc
Version: 3.6-2ubuntu0.1
Distribution: feisty-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
 libicu36   - International Components for Unicode (libraries)
 libicu36-dev - International Components for Unicode (development files)
 icu-doc    - API documentation for ICU classes and functions
Changes:
 icu (3.6-2ubuntu0.1) feisty-security; urgency=low
 .
   * SECURITY UPDATE: possible read from and write to out of bounds memory
     locations via back reference '\0' in regular expressions
   * SECURITY UPDATE: denial of service due to memory exhaustion via a
     crafted regular expression
   * debian/patches/SECURITY_CVE-2007-4770_4771.patch: fix regexcmp.cpp to
     return error on invalid back reference. fix rematch.cpp, uvectr32.h and
     uvectr32.cpp to return error when capacity is greater than maxCapacity
   * References
     CVE-2007-4770
     CVE-2007-4771
   * Modify Maintainer value to match the DebianMaintainerField
     specification.
Files:
 3b37f4197509a3815a588837377926ab 5494132 libs optional libicu36_3.6-2ubuntu0.1_amd64.deb
 05738b95cbea7e71f1c7389acea343c0 6582372 libdevel optional libicu36-dev_3.6-2ubuntu0.1_amd64.deb
 59e41f56b3e9b0967586f601fc786686 3239258 doc optional icu-doc_3.6-2ubuntu0.1_all.deb
 cc171e6c651af8798679d670317aecb4 5502928 libs optional libicu36_3.6-2ubuntu0.1_i386.deb
 6131cb6505978764cfa87cc00f3bde55 6455976 libdevel optional libicu36-dev_3.6-2ubuntu0.1_i386.deb
 69d3b5064e15821146e3ac164f07926d 5915388 libs optional libicu36_3.6-2ubuntu0.1_ia64.deb
 fd9d8c41220510168312a0c8cd319d03 7248158 libdevel optional libicu36-dev_3.6-2ubuntu0.1_ia64.deb
 3e87c31f56a17142293819375fb9b055 5847506 libs optional libicu36_3.6-2ubuntu0.1_powerpc.deb
 3fc12666b60c32e1e766940458e86f8b 6914678 libdevel optional libicu36-dev_3.6-2ubuntu0.1_powerpc.deb
 811a2836307eb6b553a47234455782c8 683 libs optional icu_3.6-2ubuntu0.1.dsc
 992a805cfdf2bef53375bb692fade0ae 9568 libs optional icu_3.6-2ubuntu0.1.diff.gz
 6a81975ae3038438ce649b104524c66c 5722818 libs optional libicu36_3.6-2ubuntu0.1_sparc.deb
 abe3146ed84e2bf73a406d031c07bb1b 6782112 libdevel optional libicu36-dev_3.6-2ubuntu0.1_sparc.deb
Original-Maintainer: Jay Berkenbilt <qjb at debian.org>