[ubuntu/lucid-updates] expat 2.0.1-7ubuntu1.1 (Accepted)

Fri Aug 10 09:42:14 UTC 2012

expat (2.0.1-7ubuntu1.1) lucid-security; urgency=low

  * SECURITY UPDATE: Denial of service via hash collisions
    - debian/patches/577777_CVE_2012_0876.dpatch: Add random salt value to
      hash inputs. Based on upstream patch.
    - CVE-2012-0876
  * SECURITY UPDATE: Denial of service via memory leak
    - debian/patches/588888_CVE_2012_1148.dpatch: Properly reallocate memory.
      Based on upstream patch.
    - CVE-2012-1148

Date: 2012-08-09 20:15:34.543923+00:00
Changed-By: Tyler Hicks <tyhicks at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/lucid/+source/expat/2.0.1-7ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.