Format: 1.8 Date: Tue, 03 Oct 2023 14:30:11 -0400 Source: libxpm Binary: libxpm-dev libxpm4 xpmutils Built-For-Profiles: noudeb Architecture: riscv64 riscv64_translations Version: 1:3.5.12-1.1ubuntu1 Distribution: mantic-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libxpm-dev - X11 pixmap library (development headers) libxpm4 - X11 pixmap library xpmutils - X11 pixmap utilities Changes: libxpm (1:3.5.12-1.1ubuntu1) mantic; urgency=medium . * SECURITY UPDATE: stack exhaustion from infinite recursion in PutSubImage() in libx11 - d/p/0004-test-Add-test-case-for-CVE-2023-43786-stack-exhausti.patch - d/p/0005-Avoid-CVE-2023-43786-stack-exhaustion-in-XPutImage.patch - CVE-2023-43786 * SECURITY UPDATE: integer overflow in XCreateImage() leading to a heap overflow in libx11 - d/p/0006-test-Add-test-case-for-CVE-2023-43787-integer-overfl.patch - d/p/0007-Avoid-CVE-2023-43787-integer-overflow-in-XCreateImag.patch - CVE-2023-43787 * SECURITY UPDATE: out of bounds read in XpmCreateXpmImageFromBuffer() - d/p/0001-Fix-CVE-2023-43788-Out-of-bounds-read-in-XpmCreateXp.patch - CVE-2023-43788 * SECURITY UPDATE: out of bounds read on XPM with corrupted colormap - d/p/0003-Fix-CVE-2023-43789-Out-of-bounds-read-on-XPM-with-co.patch - CVE-2023-43789 Checksums-Sha1: 7118e354ca2a733607e1ffcc61baca5c80f3e0f9 147268 libxpm-dev_3.5.12-1.1ubuntu1_riscv64.deb e4ba8936c40a3feaa4e63135e3ab58086602e88d 98962 libxpm4-dbgsym_3.5.12-1.1ubuntu1_riscv64.ddeb 4487db27d26ce8d82331e867cc90997cbc676eb9 37382 libxpm4_3.5.12-1.1ubuntu1_riscv64.deb 0b296d9a195bf49193d1368cc6c01ad6d1a5ae83 7540 libxpm_3.5.12-1.1ubuntu1_riscv64.buildinfo c3c5213a0393f4da03a2a1eb4bc4244558d109cd 2180 libxpm_3.5.12-1.1ubuntu1_riscv64_translations.tar.gz 325d07ed206a91a3db6d2fd116ce47f6da126c70 53550 xpmutils-dbgsym_3.5.12-1.1ubuntu1_riscv64.ddeb fc6f2a01395d33b3b7295d156e88ca8d4f726edb 24038 xpmutils_3.5.12-1.1ubuntu1_riscv64.deb Checksums-Sha256: 0b41e571e2d603d00a7cbdbd1d95bdae7c97ac1a6aa40ff7cd7790a6febb6fa9 147268 libxpm-dev_3.5.12-1.1ubuntu1_riscv64.deb b132b3af15e7304a6c9b4eede4d3254d8cbe71843089f43422d331e94523d59e 98962 libxpm4-dbgsym_3.5.12-1.1ubuntu1_riscv64.ddeb e77618a96a889d6a362155cde83c1e08192aab2899fccaed3ddc4f522f1a4521 37382 libxpm4_3.5.12-1.1ubuntu1_riscv64.deb 9271aad7b8457677cb54f8469fa5ffe2172a14441263bef4ad39a47f602d9505 7540 libxpm_3.5.12-1.1ubuntu1_riscv64.buildinfo 4cacd3104fb6b9b72875cddc01ad5805dde6e218aa1f49ac829e3987cf854b10 2180 libxpm_3.5.12-1.1ubuntu1_riscv64_translations.tar.gz ba20afcdb87158257c93856434fbc24486eb6721ef369714f8a0af95c2325799 53550 xpmutils-dbgsym_3.5.12-1.1ubuntu1_riscv64.ddeb 5abf847c13876d14cf65b1f2ad1274794e78bab0d10aaaa47e5850e4fed4c5e5 24038 xpmutils_3.5.12-1.1ubuntu1_riscv64.deb Files: 5c8aa64df81a4c5a1c2b3039a9061fa7 147268 libdevel optional libxpm-dev_3.5.12-1.1ubuntu1_riscv64.deb 7f01044f779ade988d4559e3cc769688 98962 debug optional libxpm4-dbgsym_3.5.12-1.1ubuntu1_riscv64.ddeb 7f4d4b9130783459a60c2e58802f3c3c 37382 libs optional libxpm4_3.5.12-1.1ubuntu1_riscv64.deb 401d55a0798a0707923e04f8bc6da678 7540 x11 optional libxpm_3.5.12-1.1ubuntu1_riscv64.buildinfo 78de81d4314316efcde634f3440e99dc 2180 raw-translations - libxpm_3.5.12-1.1ubuntu1_riscv64_translations.tar.gz bcba3a7d33998858f5bb7287be775c13 53550 debug optional xpmutils-dbgsym_3.5.12-1.1ubuntu1_riscv64.ddeb fd17fc7c545e8cac85fc485ec9f9ecb1 24038 x11 optional xpmutils_3.5.12-1.1ubuntu1_riscv64.deb Original-Maintainer: Debian X Strike Force