~ubuntu-branches/ubuntu/lucid/ghostscript/lucid-updates

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2011-12-20 15:44:19 UTC
  • mfrom: (68.1.2 lucid-proposed)
  • Revision ID: package-import@ubuntu.com-20111220154419-1dwajjyf5v2g4jb8
Tags: 8.71.dfsg.1-0ubuntu5.4
* SECURITY UPDATE: integer overflows via integer multiplication for
  memory allocation
  - debian/patches/CVE-2008-352x.dpatch: introduce new size-checked
    allocation functions and use them in:
    * jasper/src/libjasper/base/{jas_cm.c,jas_icc.c,jas_image.c,
      jas_malloc.c,jas_seq.c}
    * jasper/src/libjasper/bmp/bmp_dec.c
    * jasper/src/libjasper/include/jasper/jas_malloc.h
    * jasper/src/libjasper/jp2/{jp2_cod.c,jp2_dec.c,jp2_enc.c}
    * jasper/src/libjasper/jpc/{jpc_cs.c,jpc_dec.c,jpc_enc.c,jpc_mqdec.c,
      jpc_mqenc.c,jpc_qmfb.c,jpc_t1enc.c,jpc_t2cod.c,jpc_t2dec.c,
      jpc_t2enc.c,jpc_tagtree.c,jpc_util.c}
    * jasper/src/libjasper/mif/mif_cod.c
  - CVE-2008-3520
* SECURITY UPDATE: buffer overflow via vsprintf in jas_stream_printf()
  - debian/patches/CVE-2008-352x.dpatch: use vsnprintf() in
    jasper/src/libjasper/base/jas_stream.c
  - CVE-2008-3522
* SECURITY UPDATE: denial of service and possible code execution via
  heap-based buffer overflows.
  - debian/patches/CVE-2011-451x.dpatch: validate compparms->numrlvls
    and allocate proper size in jasper/src/libjasper/jpc/jpc_cs.c.
  - CVE-2011-4516
  - CVE-2011-4517
Filename Latest Rev Last Changed Committer Comment Size
..
base 1.1.10 15 years ago Bazaar Package Importer Import upstream version 8.64.dfsg.1~svn9377 Diff
contrib 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
cups 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
debian 2 17 years ago Bazaar Package Importer * This is the first Debian/Ubuntu package reflecti Diff
doc 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
examples 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
expat 1.1.7 16 years ago Bazaar Package Importer Import upstream version 8.61.dfsg.1 Diff
icclib 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
ijs 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
imdi 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
jasper 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
jbig2dec 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
jpeg 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
lib 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
libpng 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
man 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
psi 1.1.10 15 years ago Bazaar Package Importer Import upstream version 8.64.dfsg.1~svn9377 Diff
Resource 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
tiff 1.1.17 14 years ago Bazaar Package Importer Import upstream version 8.71.dfsg.1 Diff
toolbin 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
zlib 1 17 years ago Bazaar Package Importer Import upstream version 8.60.dfsg.1 Diff
File autogen.sh 1.1.10 15 years ago Bazaar Package Importer Import upstream version 8.64.dfsg.1~svn9377 1.1 KB Diff Download File
File configure 64 14 years ago Bazaar Package Importer * New upstream release o libtiff-based tiff fil 410 KB Diff Download File
Symlink configure.ac 1.1.10 15 years ago Bazaar Package Importer Import upstream version 8.64.dfsg.1~svn9377 .
File ghostscript.vcproj 1.1.17 14 years ago Bazaar Package Importer Import upstream version 8.71.dfsg.1 148 KB Diff Download File
LICENSE 1.1.16 14 years ago Bazaar Package Importer Import upstream version 8.70.dfsg.1 2.5 KB Diff Download File
Symlink Makefile.in 1.1.10 15 years ago Bazaar Package Importer Import upstream version 8.64.dfsg.1~svn9377 .