diff -u coreutils-8.13/debian/changelog coreutils-8.13/debian/changelog --- coreutils-8.13/debian/changelog +++ coreutils-8.13/debian/changelog @@ -1,11 +1,12 @@ -coreutils (8.13-3ubuntu3.3~sarnold2) precise-security; urgency=medium +coreutils (8.13-3ubuntu3.3) precise-security; urgency=medium * SECURITY UPDATE: infinite loop or crash in TZ environment variable handling. - - debian/patches/CVE-2014-9471.dpatch + - debian/patches/CVE-2014-9471.dpatch: modify lib/parse-datetime.y and + tests/misc/date to avoid crashing with malformed TZ - CVE-2014-9471 - -- Seth Arnold Fri, 09 Jan 2015 17:48:36 -0800 + -- Seth Arnold Tue, 13 Jan 2015 19:31:30 -0800 coreutils (8.13-3ubuntu3.2) precise-proposed; urgency=low diff -u coreutils-8.13/debian/patches/CVE-2014-9471.dpatch coreutils-8.13/debian/patches/CVE-2014-9471.dpatch --- coreutils-8.13/debian/patches/CVE-2014-9471.dpatch +++ coreutils-8.13/debian/patches/CVE-2014-9471.dpatch @@ -2,11 +2,11 @@ ## CVE-2014-9471.dpatch by Seth Arnold ## ## All lines beginning with `## DP:' are a description of the patch. -## DP: http://debbugs.gnu.org/cgi/bugreport.cgi?msg=11;filename=date-tz-crash.patch;att=1;bug=16872 -## DP: http://debbugs.gnu.org/cgi/bugreport.cgi?msg=19;filename=coreutils-date-crash.patch;att=1;bug=16872 +## DP: Origin: http://debbugs.gnu.org/cgi/bugreport.cgi?msg=11;filename=date-tz-crash.patch;att=1;bug=16872 +## DP: Origin: http://debbugs.gnu.org/cgi/bugreport.cgi?msg=19;filename=coreutils-date-crash.patch;att=1;bug=16872 ## DP: Combined from previous two URLs, dropping NEWS entries -## DP: parse-datetime: fix crash or infloop in TZ="" parsing -## DP: From =?UTF-8?q?P=C3=A1draig=20Brady?= +## DP: Description: parse-datetime: fix crash or infloop in TZ="" parsing +## DP: Author: =?UTF-8?q?P=C3=A1draig=20Brady?= @DPATCH@