Package "coreutils"

  coreutils (8.13-3ubuntu3.3) precise-security; urgency=medium

  * SECURITY UPDATE: infinite loop or crash in TZ environment variable
    handling.
    - debian/patches/CVE-2014-9471.dpatch: modify lib/parse-datetime.y and
      tests/misc/date to avoid crashing with malformed TZ
    - CVE-2014-9471
 -- Seth Arnold <email address hidden> Tue, 13 Jan 2015 19:31:30 -0800

  coreutils (8.13-3ubuntu3.2) precise-proposed; urgency=low

  * Backport upstream patch to avoid data-corrupting free-memory-read in
    cp/mv/install when dealing with a very fragmented and sparse input file
    on certain filesystems (LP: #1073514).
  * Build-depend on valgrind (except on armhf, where it breaks) in order to
    be able to run the test for the above fix.
  * Fix 99_sort_-u_data_loss.dpatch so that the added test is actually run.
  * Backport require_valgrind_ so that tests work better.
  * Make valgrind failures non-fatal; we don't have sufficiently accurate
    suppressions for linker startup issues on all architectures. However,
    do still run those tests and check for corrupted output.
 -- Colin Watson <email address hidden> Fri, 09 Nov 2012 14:23:10 +0000

  coreutils (8.13-3ubuntu3.1) precise-proposed; urgency=low

  * Backport upstream patches to fix data-loss and free-memory read bugs in
    'sort -u' (LP: #1038468).
 -- Colin Watson <email address hidden> Mon, 10 Sep 2012 14:32:58 +0100