Format: 1.8
Date: Mon, 02 Oct 2023 16:12:10 -0400
Source: libxpm
Binary: libxpm-dev libxpm4 xpmutils
Architecture: arm64 arm64_translations
Version: 1:3.5.12-1ubuntu0.20.04.2
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-027.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libxpm-dev - X11 pixmap library (development headers)
 libxpm4    - X11 pixmap library
 xpmutils   - X11 pixmap utilities
Changes:
 libxpm (1:3.5.12-1ubuntu0.20.04.2) focal-security; urgency=medium
 .
   * SECURITY UPDATE: stack exhaustion from infinite recursion in
     PutSubImage() in libx11
     - d/p/0004-test-Add-test-case-for-CVE-2023-43786-stack-exhausti.patch
     - d/p/0005-Avoid-CVE-2023-43786-stack-exhaustion-in-XPutImage.patch
     - CVE-2023-43786
   * SECURITY UPDATE: integer overflow in XCreateImage() leading to a heap
     overflow in libx11
     - d/p/0006-test-Add-test-case-for-CVE-2023-43787-integer-overfl.patch
     - d/p/0007-Avoid-CVE-2023-43787-integer-overflow-in-XCreateImag.patch
     - CVE-2023-43787
   * SECURITY UPDATE: out of bounds read in XpmCreateXpmImageFromBuffer()
     - d/p/0001-Fix-CVE-2023-43788-Out-of-bounds-read-in-XpmCreateXp.patch
     - CVE-2023-43788
   * SECURITY UPDATE: out of bounds read on XPM with corrupted colormap
     - d/p/0003-Fix-CVE-2023-43789-Out-of-bounds-read-on-XPM-with-co.patch
     - CVE-2023-43789
Checksums-Sha1:
 38ecdd910e6000a032126974bdb58065236c70b5 87040 libxpm-dev_3.5.12-1ubuntu0.20.04.2_arm64.deb
 e3f2d8ea59287b4324071d1e25282bb8689d0876 105708 libxpm4-dbgsym_3.5.12-1ubuntu0.20.04.2_arm64.ddeb
 ad6c7062e3443174383cf8da0d89b6b346c8af2a 32212 libxpm4_3.5.12-1ubuntu0.20.04.2_arm64.deb
 358fcfcbc06bb32a0b2bcb929f48802955df4096 7636 libxpm_3.5.12-1ubuntu0.20.04.2_arm64.buildinfo
 7c2de083e92eef70cf6b364d4f57229699233d19 2177 libxpm_3.5.12-1ubuntu0.20.04.2_arm64_translations.tar.gz
 db267263424e8b377b2694cac3d741b7bf4a0d29 51924 xpmutils-dbgsym_3.5.12-1ubuntu0.20.04.2_arm64.ddeb
 dbd0f7b54a1852cc304d722a50c3efdd4f912455 21084 xpmutils_3.5.12-1ubuntu0.20.04.2_arm64.deb
Checksums-Sha256:
 03e2ba4a48c553bf4ec8fe2252a413ce0113cca71adfda5e08f68f13118f6107 87040 libxpm-dev_3.5.12-1ubuntu0.20.04.2_arm64.deb
 fb7c209fb896ddd62aac334c9db738d0542b534babef63e3fafe97c907c6a28e 105708 libxpm4-dbgsym_3.5.12-1ubuntu0.20.04.2_arm64.ddeb
 13e381112be33778c4095e943ee0a825cbdae485d38e03c5c758052a88ae9f44 32212 libxpm4_3.5.12-1ubuntu0.20.04.2_arm64.deb
 e31aa275f10892afde03e47fcd5cd5fea9a84a39e31af74f68e161ab5071736a 7636 libxpm_3.5.12-1ubuntu0.20.04.2_arm64.buildinfo
 baaac99571aec2452e1b66ac9fc542f3f270e7b7b17db65785918cdf504d3cb6 2177 libxpm_3.5.12-1ubuntu0.20.04.2_arm64_translations.tar.gz
 0e66f244f46d3de91e507122aa734afddd4fa0f769d39f2039d9c6286b3de098 51924 xpmutils-dbgsym_3.5.12-1ubuntu0.20.04.2_arm64.ddeb
 8ee91cbd696a019f3d31cbf60e95b1898b296543b24d9f75192b41272e4f5d41 21084 xpmutils_3.5.12-1ubuntu0.20.04.2_arm64.deb
Files:
 6d1e418ba239c4061318aadad73630fa 87040 libdevel optional libxpm-dev_3.5.12-1ubuntu0.20.04.2_arm64.deb
 96470addca9c3572135983c496df2371 105708 debug optional libxpm4-dbgsym_3.5.12-1ubuntu0.20.04.2_arm64.ddeb
 8d736b42d601b8c48da80aeab30e0282 32212 libs optional libxpm4_3.5.12-1ubuntu0.20.04.2_arm64.deb
 e02fba27f418f83fcc4c1927771797e0 7636 x11 optional libxpm_3.5.12-1ubuntu0.20.04.2_arm64.buildinfo
 f4d2fd67c318d4a88b537f546b36a84a 2177 raw-translations - libxpm_3.5.12-1ubuntu0.20.04.2_arm64_translations.tar.gz
 c402bceb94197e5ef3bb4841e6953e41 51924 debug optional xpmutils-dbgsym_3.5.12-1ubuntu0.20.04.2_arm64.ddeb
 e567eeb166f0ce0168e7a31816bdf2c5 21084 x11 optional xpmutils_3.5.12-1ubuntu0.20.04.2_arm64.deb
Original-Maintainer: Debian X Strike Force <debian-x@lists.debian.org>