[ubuntu/xenial-security] gdk-pixbuf 2.32.2-1ubuntu1.3 (Accepted)

[Leonidas S. Barbosa]

gdk-pixbuf (2.32.2-1ubuntu1.3) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflow checks not enough
    - debian/patch/CVE-2017-2870.patch: checks for integer overflow
      in multiplication in gdk-pixbuf/io-tiff.c.
    - CVE-2017-2870
  * SECURITY UPDATE: exploitable heap overflow
    - debian/patches/CVE-2017-2862-part1.patch: Throw error
      when number of colour components is unsupported in
      gdk-pixbuf/io-jpeg.c.
    - debian/patches/CVE-2017-2862-part2.patch: restore grayscale
      support in gdk-pixbuf/io-jpeg.c
  * SECURITY UPDATE: context-dependent to cause DoS
    - debian/patches/CVE-2017-6311.patch: return an error when ICO
      didn't load in gdk-pixbuf/io-ico.c.
    - CVE-2017-6311

Date: 2017-09-14 18:02:53.064863+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/gdk-pixbuf/2.32.2-1ubuntu1.3
-------------- next part --------------
Sorry, changesfile not available.