[Secure-testing-team] Bug#699649: Boost.Locale library security flaw

[Xiyue Deng]

Package: libboost-locale1.49-dev
Version: 1.49.0-3.1
Severity: grave
Tags: security

Boost has issued a security notice:
http://www.boost.org/users/news/boost_locale_security_notice.html

Boost versions from 1.48.0 to 1.52.0 are affected. A patch is provided:
http://cppcms.com/files/locale/boost_locale_utf.patch

Please incorporate the patch.

-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: mipsel (mips64)

Kernel: Linux 3.2.0-4-loongson-2f
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libboost-locale1.49-dev depends on:
ii  libboost-locale1.49.0  1.49.0-3.1
ii  libboost1.49-dev       1.49.0-3.1

libboost-locale1.49-dev recommends no packages.

libboost-locale1.49-dev suggests no packages.

-- no debconf information