Ubuntu Archive Auto-Sync katie at jackass.ubuntu.com
Mon Nov 14 13:11:49 CST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Origin: Debian/unstable
Format: 1.7
Date: Mon,  14 Nov 2005 19:01:49 +0000
Source: libungif4
Binary: libungif4g, libungif4-dev, libungif-bin
Architecture: source
Version: 4.1.4-1
Distribution: dapper
Urgency: high
Maintainer: Michael Fedrowitz <michaelf at debian.org>
Changed-By: Ubuntu Archive Auto-Sync <katie at jackass.ubuntu.com>
Closes: 337972 338542
Changes: 
 libungif4 (4.1.4-1) unstable; urgency=high
 .
   * New upstream release (closes #338065):
     - Incorporates fixes for CVE-2005-2974 and CVE-2005-3350.
     - Fixes double free bugs. (closes: #338542)
   * Re-libtoolized.
   * Stop creating overly tight shlibs.
   * Urgency high to get security fixes into testing (4.1.3-4 was accidently
     uploaded with urgency low).
 .
 libungif4 (4.1.3-4) unstable; urgency=low
 .
   * Applied security patch from Ubuntu (thanks to Martin Pitt):
     * SECURITY UPDATE: Arbitrary code execution with crafted GIF files.
     * lib/dgif_lib.c:
       - Fix NULL dereference crash with crafted LZW termination blocks.
       - CVE-2005-2974
     * lib/dgif_lib.c, lib/egif_lib.c, lib/gifalloc.c:
       - Fix multiple buffer overflows with crafted GIF files, possibly
         exploitable:
       - CVE-2005-3350
     (closes: #337972)
Files: 
 20c947fcea5ec6e92d5425165baf0415 50078 graphics optional libungif4_4.1.4-1.diff.gz
 efdfcf8e32e35740288a8c5625a70ccb 602359 graphics optional libungif4_4.1.4.orig.tar.gz
 99ddcec5bc83d7c795ea0caac38c3fa9 621 graphics optional libungif4_4.1.4-1.dsc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iQEVAwUBQ3jfHQF4adwMEr3XAQKNaQf/RfLUSBTkbD1fSQze10mHcrkRtj0BIDPq
96BDd5e4V1wR53RHVGDkehOJOUjFOzM/Evu27GlXk/mmu/hxxaRhTqCWzdYFkKHk
iMjbNwldOYzqS53wSQU89Sx392jihM55f4tj+IcTZtewnSjO4CNWAWC3SkRev7Nf
vontvpDPiQ/0madX5KBJD5I6wemQVaVu04FPOMSLKXZSpBdE0lyno2AxqONF6bVr
ZAfufV66FoyjhU22AK/2bhqXHTp3mBlGDWUMssFBxPXiXNERodscBdAHOGMW4niH
65l6qMHttffjhdwKdDLwhSG7bplWeYxpUDO1QYfmxjxWfojPmQFxag==
=d9fj
-----END PGP SIGNATURE-----


Accepted:
libungif4_4.1.4-1.diff.gz
  to pool/main/libu/libungif4/libungif4_4.1.4-1.diff.gz
libungif4_4.1.4-1.dsc
  to pool/main/libu/libungif4/libungif4_4.1.4-1.dsc
libungif4_4.1.4.orig.tar.gz
  to pool/main/libu/libungif4/libungif4_4.1.4.orig.tar.gz




More information about the ubuntu-changes-auto mailing list