* SECURITY UPDATE: denial of service and code execution via load function
in the XPM and PNG loaders (LP: #235915)
- debian/patches/211_SECURITY_CVE-2008-2426.patch: add checks to make sure
we don't overflow the buffers in XPM and PNG loaders.
- CVE-2008-2426
-- Marc Deslauriers <email address hidden> Thu, 18 Dec 2008 14:07:46 -0500
This bug was fixed in the package imlib2 - 1.4.0-1ubuntu1.2
---------------
imlib2 (1.4.0-1ubuntu1.2) hardy-security; urgency=low
* SECURITY UPDATE: denial of service and code execution via load function patches/ 211_SECURITY_ CVE-2008- 2426.patch: add checks to make sure
in the XPM and PNG loaders (LP: #235915)
- debian/
we don't overflow the buffers in XPM and PNG loaders.
- CVE-2008-2426
-- Marc Deslauriers <email address hidden> Thu, 18 Dec 2008 14:07:46 -0500