Accepted xli 1.17.0-18 (source)

Daniel Holbach dh at mailempfang.de
Tue Mar 22 07:15:08 CST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Origin: Debian/unstable
Format: 1.7
Date: Tue,  22 Mar 2005 13:10:37 +0000
Source: xli
Binary: xli
Architecture: source
Version: 1.17.0-18
Distribution: hoary
Urgency: high
Maintainer: Graham Wilson <graham at debian.org>
Changed-By: Daniel Holbach <dh at mailempfang.de>
Description: 
 xli        - view images under X11
Closes: 298039
Changes: 
 xli (1.17.0-18) unstable; urgency=high
 .
   * Properly quote shell meta-characters when uncompressing files.
     Addresses CAN-2005-0638.
   * Enable on-the-fly decompression using gunzip.
   * Add CVE numbers to the previous changelog entry.
 .
 xli (1.17.0-17) unstable; urgency=high
 .
   * Fix some old and new security bugs. (closes: #298039)
 .
   * In face.c, use strncat instead of strcat, which won't overflow the image
     name buffer in case the first and last names are too long. Addresses
     CAN-2001-0775.
 .
   * In new.c, check that new*Image functions don't overflow when determining
     how much memory to allocate for images. Addresses CAN-2005-0639.
 .
   * Use upstream's code to avoid an overflow in buildIndex, rather than the
     code I wrote to fix #274310.
Files: 
 a186420baa70ba476b5cefc491a88a64 20527 graphics optional xli_1.17.0-18.diff.gz
 1c3b398801c12de993fc58a241fde1a1 914 graphics optional xli_1.17.0-18.dsc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iQEVAwUBQkAZTQF4adwMEr3XAQKjGgf/dt0KYbxmj+rVKyCl0rnPsNkOiXO9MIUJ
PztAS+arkb3t4xvNNS5qZ2DOuk6wQIxtAiG8Imu01wsiPCO4N4WQtLnU8dI8Iakw
hCS3IacTMZ2ZP6O44XqlIfjj68ovpmTg2ObaJafflU+Ag+mre64Yv4tEsnFsVRxH
RJG/1Uhn0VidC9RKU7zRQ/2NkLTcASRXE6Osyb3eUndDzAZQshIKpyJkEuJszPyD
hSEC4cXrohzSgZyzLxOv+A1fmuTrT6pKgnpAcm5HLxaXDlcHd4RQ3EEAj7ZqwqPq
zRwQ0nfvrGto9BPjLiiq93py0XzGxSMhfFhder1GFdRHbhaVJGvpIw==
=kyZ4
-----END PGP SIGNATURE-----


Accepted:
xli_1.17.0-18.diff.gz
  to pool/universe/x/xli/xli_1.17.0-18.diff.gz
xli_1.17.0-18.dsc
  to pool/universe/x/xli/xli_1.17.0-18.dsc




More information about the hoary-changes mailing list