Accepted imlib2 1.1.2-2.1 (i386 source)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 6 Jan 2005 16:29:53 -0500
Source: imlib2
Binary: libimlib2 libimlib2-dev
Architecture: source i386
Version: 1.1.2-2.1
Distribution: unstable
Urgency: high
Maintainer: Laurence J. Lane <ljlane@debian.org>
Changed-By: Joey Hess <joeyh@debian.org>
Description:
libimlib2 - powerful image loading and rendering library
libimlib2-dev - Imlib2 development files
Closes: 284925
Changes:
imlib2 (1.1.2-2.1) unstable; urgency=HIGH
.
* NMU with the following changes taken from the Ubuntu patch by Martin Pitt
Closes: #284925
* SECURITY UPDATE: fix several buffer overflows
* loaders/loader_bmp.c: check for negative image width/height
* loaders/loader_xpm.c:
- check for negative image attributes
- check the length of the "col" buffer to avoid overflowing it
- patch taken from upstream CVS
* References:
CAN-2004-1025
CAN-2004-1026
Files:
4e044b53efef6571d6754f660b04e1be 730 libs optional imlib2_1.1.2-2.1.dsc
f7544bcfd3e37b180cb664b4bc2a193e 81653 libs optional imlib2_1.1.2-2.1.diff.gz
e8042c1cc46f7ffd464d65e6287c31e4 188690 libs optional libimlib2_1.1.2-2.1_i386.deb
ccccd58406e6dbdce73724d5b9ff03e2 605216 libdevel optional libimlib2-dev_1.1.2-2.1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFB3bIe2tp5zXiKP0wRAsLGAKDAQ21pewzIoMo0cT/CqVduBdQHVACgyqEg
yWkZ3yo0hIubBkIahMZjHQs=
=uH3I
-----END PGP SIGNATURE-----
Accepted:
imlib2_1.1.2-2.1.diff.gz
to pool/main/i/imlib2/imlib2_1.1.2-2.1.diff.gz
imlib2_1.1.2-2.1.dsc
to pool/main/i/imlib2/imlib2_1.1.2-2.1.dsc
libimlib2-dev_1.1.2-2.1_i386.deb
to pool/main/i/imlib2/libimlib2-dev_1.1.2-2.1_i386.deb
libimlib2_1.1.2-2.1_i386.deb
to pool/main/i/imlib2/libimlib2_1.1.2-2.1_i386.deb
Reply to: