Publishing details

Changelog

coreutils (7.4-2ubuntu3.1) lucid-security; urgency=medium

  * SECURITY UPDATE: infinite loop or crash in TZ environment variable
    handling.
    - debian/patches/CVE-2014-9471.dpatch: modify lib/getdate.y and
      tests/misc/date to avoid crashing with malformed TZ
    - CVE-2014-9471
  * SECURITY UPDATE: local privilege escalation via /tmp file race in
    dist-check.mk
    - debian/patches/CVE-2009-4135.dpatch: modify dist-check.mk to no longer
      use system /tmp directory for predictable names
    - CVE-2009-4135
 -- Seth Arnold <email address hidden>   Tue, 13 Jan 2015 19:31:18 -0800

Available diffs

Builds

Package files