Ubuntu Archive Auto-Sync
katie at jackass.ubuntu.com
Mon Nov 14 13:11:49 CST 2005
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Origin: Debian/unstable
Format: 1.7
Date: Mon, 14 Nov 2005 19:01:49 +0000
Source: libungif4
Binary: libungif4g, libungif4-dev, libungif-bin
Architecture: source
Version: 4.1.4-1
Distribution: dapper
Urgency: high
Maintainer: Michael Fedrowitz <michaelf at debian.org>
Changed-By: Ubuntu Archive Auto-Sync <katie at jackass.ubuntu.com>
Closes: 337972 338542
Changes:
libungif4 (4.1.4-1) unstable; urgency=high
.
* New upstream release (closes #338065):
- Incorporates fixes for CVE-2005-2974 and CVE-2005-3350.
- Fixes double free bugs. (closes: #338542)
* Re-libtoolized.
* Stop creating overly tight shlibs.
* Urgency high to get security fixes into testing (4.1.3-4 was accidently
uploaded with urgency low).
.
libungif4 (4.1.3-4) unstable; urgency=low
.
* Applied security patch from Ubuntu (thanks to Martin Pitt):
* SECURITY UPDATE: Arbitrary code execution with crafted GIF files.
* lib/dgif_lib.c:
- Fix NULL dereference crash with crafted LZW termination blocks.
- CVE-2005-2974
* lib/dgif_lib.c, lib/egif_lib.c, lib/gifalloc.c:
- Fix multiple buffer overflows with crafted GIF files, possibly
exploitable:
- CVE-2005-3350
(closes: #337972)
Files:
20c947fcea5ec6e92d5425165baf0415 50078 graphics optional libungif4_4.1.4-1.diff.gz
efdfcf8e32e35740288a8c5625a70ccb 602359 graphics optional libungif4_4.1.4.orig.tar.gz
99ddcec5bc83d7c795ea0caac38c3fa9 621 graphics optional libungif4_4.1.4-1.dsc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iQEVAwUBQ3jfHQF4adwMEr3XAQKNaQf/RfLUSBTkbD1fSQze10mHcrkRtj0BIDPq
96BDd5e4V1wR53RHVGDkehOJOUjFOzM/Evu27GlXk/mmu/hxxaRhTqCWzdYFkKHk
iMjbNwldOYzqS53wSQU89Sx392jihM55f4tj+IcTZtewnSjO4CNWAWC3SkRev7Nf
vontvpDPiQ/0madX5KBJD5I6wemQVaVu04FPOMSLKXZSpBdE0lyno2AxqONF6bVr
ZAfufV66FoyjhU22AK/2bhqXHTp3mBlGDWUMssFBxPXiXNERodscBdAHOGMW4niH
65l6qMHttffjhdwKdDLwhSG7bplWeYxpUDO1QYfmxjxWfojPmQFxag==
=d9fj
-----END PGP SIGNATURE-----
Accepted:
libungif4_4.1.4-1.diff.gz
to pool/main/libu/libungif4/libungif4_4.1.4-1.diff.gz
libungif4_4.1.4-1.dsc
to pool/main/libu/libungif4/libungif4_4.1.4-1.dsc
libungif4_4.1.4.orig.tar.gz
to pool/main/libu/libungif4/libungif4_4.1.4.orig.tar.gz
More information about the ubuntu-changes-auto
mailing list