[ubuntu/trusty-security] gdk-pixbuf 2.30.7-0ubuntu1.7 (Accepted)

[Leonidas S. Barbosa]

gdk-pixbuf (2.30.7-0ubuntu1.7) trusty-security; urgency=medium

  * SECURITY UPDATE: Integer overflow checks not enough
    - debian/patch/CVE-2017-2870.patch: checks for integer overflow
      in multiplication in gdk-pixbuf/io-tiff.c.
    - CVE-2017-2870
  * SECURITY UPDATE: exploitable heap overflow
    - debian/patches/CVE-2017-2862-part1.patch: Throw error
      when number of colour components is unsupported in
      gdk-pixbuf/io-jpeg.c.
    - debian/patches/CVE-2017-2862-part2.patch: restore grayscale
      support in gdk-pixbuf/io-jpeg.c
  * SECURITY UPDATE: context-dependent to cause DoS
    - debian/patches/CVE-2017-6311.patch: return an error when ICO didn't
      load in gdk-pixbuf/io-ico.
    - CVE-2017-6311

Date: 2017-09-14 15:19:13.609698+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/gdk-pixbuf/2.30.7-0ubuntu1.7
-------------- next part --------------
Sorry, changesfile not available.