Ubuntu
imlib2 package

imlib2 1.4.4-1ubuntu0.1 source package in Ubuntu

Changelog

imlib2 (1.4.4-1ubuntu0.1) precise-security; urgency=medium

  * SECURITY UPDATE: denial of service (divide-by-zero) via drawing
    a 2x1 ellipse.
    - debian/patches/debian/patches/009_CVE-2011-5326.patch: ensure
      denominators are not zero.
    - CVE-2011-5326
  * SECURITY UPDATE: denial of service (segmentation fault) via a
    GIF image without a colormap.
    - debian/patches/debian/patches/006_CVE-2014-9762.patch: return
      error if no colormap.
    - CVE-2014-9762
  * SECURITY UPDATE: denial of service (divide-by-zero) handling
    PNM files.
    - debian/patches/debian/patches/007_CVE-2014-9763.patch: ensure
      denominators are not zero.
    - CVE-2014-9763
  * SECURITY UPDATE: denial of service (segmentation fault) handling
    certain GIF images
    - debian/patches/debian/patches/008_CVE-2014-9764.patch: check
      for NULL.
    - CVE-2014-9764
  * SECURITY UPDATE: integer overflow leading to denial of service
    - debian/patches/debian/patches/010_CVE-2014-9771.patch: reduce
      maximum allowed image dimensions.
    - CVE-2014-9771
  * SECURITY UPDATE: denial of service due to out-of-bounds read.
    - debian/patches/debian/patches/011_CVE-2016-3993.patch: check
      boundary condition before reading array element.
    - CVE-2016-3993
  * SECURITY UPDATE: out-of-bounds read handling GIFs leading to denial
    of service or information disclosure.
    - debian/patches/debian/patches/012_CVE-2016-3994.patch: ensure
      colormap limits are honored.
    - CVE-2016-3994
  * SECURITY UPDATE: different integer overflow on 32 bit arches
    leading to a denial of service
    - debian/patches/debian/patches/013_CVE-2016-4024.patch: reduce
      allowed dimensions even further.
    - CVE-2016-4024

 -- Steve Beattie <email address hidden>  Thu, 01 Sep 2016 12:59:21 -0700

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates main libs
Precise security main libs

Downloads

File Size SHA-256 Checksum
imlib2_1.4.4.orig.tar.gz 626.8 KiB e2a26fd483d92e03c2965a06c704b14f1598147daa05b24d83e21acd97591c57
imlib2_1.4.4-1ubuntu0.1.debian.tar.gz 13.6 KiB eaadd8770ccc0d1db02ec0536ce76782ee49fb6156640efc94f5f3ab2b022366
imlib2_1.4.4-1ubuntu0.1.dsc 1.9 KiB d7729eccb710bc49ab9f9f97aeaded1f351b12050b5ad2408e44109eb5879c88

View changes file

Binary packages built by this source

libimlib2: powerful image loading and rendering library

 Imlib2 is an advanced replacement for libraries like libXpm.
 Imlib2 provides many more features with much greater flexibility
 and speed than standard libraries, including font rasterization,
 rotation, RGBA space rendering and blending, dynamic binary
 filters, scripting, and more.
 .
 Imlib2 is not a drop-in replacement for Imlib 1.x.

libimlib2-dbgsym: debug symbols for package libimlib2

 Imlib2 is an advanced replacement for libraries like libXpm.
 Imlib2 provides many more features with much greater flexibility
 and speed than standard libraries, including font rasterization,
 rotation, RGBA space rendering and blending, dynamic binary
 filters, scripting, and more.
 .
 Imlib2 is not a drop-in replacement for Imlib 1.x.

libimlib2-dev: Imlib2 development files

 Headers, static library and documentation for developing
 software that uses Imlib2.
 .
 Imlib2 is an advanced replacement for libraries like libXpm.
 Imlib2 provides many more features with much greater flexibility
 and speed than standard libraries, including font rasterization,
 rotation, RGBA space rendering and blending, dynamic binary
 filters, scripting, and more.
 .
 Imlib2 is not a drop-in replacement for Imlib 1.x.