[USN-1727-1] Boost vulnerability

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=JKFH
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1727-1
February 18, 2013

boost1.49 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.10

Summary:

Boost incorrectly validated certain UTF-8 sequences.

Software Description:
- boost1.49: C++ representation of time duration, time point, and clocks

Details:

It was discovered that the Boost.Locale library incorrectly validated some
invalid UTF-8 sequences. An attacker could possibly use this issue to
bypass input validation in certain applications.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
libboost-locale1.49.0 1.49.0-3.1ubuntu1.2

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1727-1
CVE-2013-0252

Package Information:
https://launchpad.net/ubuntu/+source/boost1.49/1.49.0-3.1ubuntu1.2