Format: 1.8
Date: Mon, 12 Jun 2017 12:36:49 -0400
Source: libiberty
Binary: libiberty-dev
Architecture: source
Version: 20161220-1ubuntu0.2
Distribution: zesty-security
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libiberty-dev - library of utility functions used by GNU programs
Changes:
 libiberty (20161220-1ubuntu0.2) zesty-security; urgency=medium
 .
   * SECURITY UPDATE: denial of service via infinite recursion
     - debian/patches/CVE-2016-4491-1.patch: limit recursion in
       include/demangle.h, libiberty/cp-demangle.c, libiberty/cp-demint.c,
       added test to libiberty/testsuite/demangle-expected.
     - debian/patches/CVE-2016-4491-2.patch: limit more recursion in
       libiberty/cp-demangle.c.
     - debian/patches/CVE-2016-4491-3.patch: initialize d_printing in
       libiberty/cp-demangle.c.
     - CVE-2016-4491
Checksums-Sha1:
 edfd2a65f05df866c84246dba4a5cb296eaa4c31 1915 libiberty_20161220-1ubuntu0.2.dsc
 71be6bba21bfda0a48ad0fbf37436b4d471bf11b 8960 libiberty_20161220-1ubuntu0.2.debian.tar.xz
Checksums-Sha256:
 a80767b01dfd7aa7981d6f32e0187c0c340080f9fb520ba3628ffa5994b50ff6 1915 libiberty_20161220-1ubuntu0.2.dsc
 080bd87549e85dc851e289bd9ae2eb6d3bb5bee72824534544f8b7a2b5bd3fa8 8960 libiberty_20161220-1ubuntu0.2.debian.tar.xz
Files:
 04230707351e7fc741db9057f7dc55bf 1915 libdevel optional libiberty_20161220-1ubuntu0.2.dsc
 7e394edde21c3c1b355656c60d3a844d 8960 libdevel optional libiberty_20161220-1ubuntu0.2.debian.tar.xz
Original-Maintainer: Debian GCC Maintainers <debian-gcc@lists.debian.org>