coreutils (7.4-2ubuntu3.1) lucid-security; urgency=medium

  * SECURITY UPDATE: infinite loop or crash in TZ environment variable
    handling.
    - debian/patches/CVE-2014-9471.dpatch: modify lib/getdate.y and
      tests/misc/date to avoid crashing with malformed TZ
    - CVE-2014-9471
  * SECURITY UPDATE: local privilege escalation via /tmp file race in
    dist-check.mk
    - debian/patches/CVE-2009-4135.dpatch: modify dist-check.mk to no longer
      use system /tmp directory for predictable names
    - CVE-2009-4135

Date: 2015-01-14 03:39:11.849833+00:00
Changed-By: Seth Arnold <seth.arn...@canonical.com>
https://launchpad.net/ubuntu/+source/coreutils/7.4-2ubuntu3.1
Sorry, changesfile not available.
-- 
Lucid-changes mailing list
Lucid-changes@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lucid-changes

Reply via email to