[ubuntu/zesty-security] libiberty 20161220-1ubuntu0.2 (Accepted)

[Marc Deslauriers]

libiberty (20161220-1ubuntu0.2) zesty-security; urgency=medium

  * SECURITY UPDATE: denial of service via infinite recursion
    - debian/patches/CVE-2016-4491-1.patch: limit recursion in
      include/demangle.h, libiberty/cp-demangle.c, libiberty/cp-demint.c,
      added test to libiberty/testsuite/demangle-expected. 
    - debian/patches/CVE-2016-4491-2.patch: limit more recursion in
      libiberty/cp-demangle.c.
    - debian/patches/CVE-2016-4491-3.patch: initialize d_printing in
      libiberty/cp-demangle.c.
    - CVE-2016-4491

Date: 2017-06-12 16:47:13.548569+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libiberty/20161220-1ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.