UbuntuUpdates.org

Package "libv8-3.6.6.14"




Name: libv8-3.6.6.14

Description:

v8 JavaScript engine - runtime library

Latest version: *DELETED*
Release: precise (12.04)
Level: base
Repository: universe
Head package: libv8
Homepage: http://code.google.com/p/v8/

Links


Download "libv8-3.6.6.14"


Other versions of "libv8-3.6.6.14" in Precise

No other version of this package is available in the Precise release.

Changelog

Version: *DELETED* 2012-04-09 11:06:55 UTC
No changelog for deleted or moved packages.

Version: 3.6.6.14-2 2012-03-06 13:09:22 UTC

libv8 (3.6.6.14-2) unstable; urgency=low

  * Land hash collision fix for V8 3.6. Closes: bug#653962.
    This fixes CVE-2011-5037.
  * snapshot=off, because hash is randomized by a secret key that is
    otherwise readable in the snapshot.

 -- Jérémy Lal Sat, 07 Jan 2012 22:29:06 +0100

CVE-2011-5037 Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attacke

Version: *DELETED* 2012-03-06 10:41:20 UTC
No changelog for deleted or moved packages.



About   -   Send Feedback to @ubuntu_updates