[SECURITY] Fedora 7 Update: icu-3.6-20.fc7

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1076
2008-01-27 06:42:59
--------------------------------------------------------------------------------

Name        : icu
Product     : Fedora 7
Version     : 3.6
Release     : 20.fc7
URL         : http://www.ibm.com/software/globalization/icu/
Summary     : International Components for Unicode
Description :
The International Components for Unicode (ICU) libraries provide
robust and full-featured Unicode services on a wide variety of
platforms. ICU supports the most current version of the Unicode
standard, and they provide support for supplementary Unicode
characters (needed for GB 18030 repertoire support).
As computing environments become more heterogeneous, software
portability becomes more important. ICU lets you produce the same
results across all the various platforms you support, without
sacrificing performance. It offers great flexibility to extend and
customize the supplied services.

--------------------------------------------------------------------------------
Update Information:

CVE-2007-4770 & CVE-2007-4771    Flaws in icu regexp handling.     Technical
details can be found at http://sourceforge.net/mailarchive/message.php?msg_name=
d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%2540mail.gmail.com
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2008 Caolan McNamara <caolanm at redhat.com> - 3.6-20
- CVE-2007-4770 CVE-2007-4771 add icu.regexp.patch
* Mon Apr 30 2007 Caolan McNamara <caolanm at redhat.com> - 3.6-19
- Resolves: rhbz#220867 Malayalam rendering
--------------------------------------------------------------------------------
References:

--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update icu' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------