[ubuntu/artful-updates] exempi 2.4.3-1ubuntu1.1 (Accepted)

[Ubuntu Archive Robot]

exempi (2.4.3-1ubuntu1.1) artful-security; urgency=medium

  * SECURITY UPDATE: integer overflow in RIFF.cpp
    - debian/patches/CVE-2017-18233.patch: fix overflow in
      XMPFiles/source/FormatSupport/RIFF.cpp.
    - CVE-2017-18233
  * SECURITY UPDATE: infinite loop via a crafted asf file
    - debian/patches/CVE-2017-18236.patch: check size in
      XMPFiles/source/FormatSupport/ASF_Support.cpp.
    - CVE-2017-18236
  * SECURITY UPDATE: infinite loop via XMP data in qt file
    - debian/patches/CVE-2017-18238.patch: exit loop in
      XMPFiles/source/FormatSupport/QuickTime_Support.cpp.
    - CVE-2017-18238
  * SECURITY UPDATE: heap-based buffer over-read in the MD5Update()
    - debian/patches/CVE-2018-7728.patch: check dataLen in
      XMPFiles/source/FileHandlers/TIFF_Handler.cpp.
    - CVE-2018-7728
  * SECURITY UPDATE: buffer over-read in ParsePSFile()
    - debian/patches/CVE-2018-7729.patch: check limit in
      XMPFiles/source/FileHandlers/PostScript_Handler.cpp.
    - CVE-2018-7729
  * SECURITY UPDATE: buffer over-read in CacheFileData()
    - debian/patches/CVE-2018-7730.patch: check dataLen in
      XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp.
    - CVE-2018-7730
  * SECURITY UPDATE: NULL pointer dereference in WEBP::VP8XChunk
    - debian/patches/CVE-2018-7731.patch: check for NULL in
      XMPFiles/source/FormatSupport/WEBP_Support.cpp.
    - CVE-2018-7731

Date: 2018-06-01 17:54:13.544731+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/exempi/2.4.3-1ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.