Format: 1.8
Date: Mon, 02 Oct 2023 16:12:10 -0400
Source: libxpm
Binary: libxpm-dev libxpm4 xpmutils
Architecture: ppc64el ppc64el_translations
Version: 1:3.5.12-1ubuntu0.20.04.2
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-ppc64el-001.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libxpm-dev - X11 pixmap library (development headers)
 libxpm4    - X11 pixmap library
 xpmutils   - X11 pixmap utilities
Changes:
 libxpm (1:3.5.12-1ubuntu0.20.04.2) focal-security; urgency=medium
 .
   * SECURITY UPDATE: stack exhaustion from infinite recursion in
     PutSubImage() in libx11
     - d/p/0004-test-Add-test-case-for-CVE-2023-43786-stack-exhausti.patch
     - d/p/0005-Avoid-CVE-2023-43786-stack-exhaustion-in-XPutImage.patch
     - CVE-2023-43786
   * SECURITY UPDATE: integer overflow in XCreateImage() leading to a heap
     overflow in libx11
     - d/p/0006-test-Add-test-case-for-CVE-2023-43787-integer-overfl.patch
     - d/p/0007-Avoid-CVE-2023-43787-integer-overflow-in-XCreateImag.patch
     - CVE-2023-43787
   * SECURITY UPDATE: out of bounds read in XpmCreateXpmImageFromBuffer()
     - d/p/0001-Fix-CVE-2023-43788-Out-of-bounds-read-in-XpmCreateXp.patch
     - CVE-2023-43788
   * SECURITY UPDATE: out of bounds read on XPM with corrupted colormap
     - d/p/0003-Fix-CVE-2023-43789-Out-of-bounds-read-on-XPM-with-co.patch
     - CVE-2023-43789
Checksums-Sha1:
 a56dd44665503e7ce50837087580de70c8a5a643 97880 libxpm-dev_3.5.12-1ubuntu0.20.04.2_ppc64el.deb
 3dc8cfe8919b71f27233f314d64348670724cfd0 115224 libxpm4-dbgsym_3.5.12-1ubuntu0.20.04.2_ppc64el.ddeb
 1f3431342c69889c12d3ae3841020a720bf6a0e2 42040 libxpm4_3.5.12-1ubuntu0.20.04.2_ppc64el.deb
 07c62b7b10aeed54baf2f1b7b4c83ee7929eebff 7721 libxpm_3.5.12-1ubuntu0.20.04.2_ppc64el.buildinfo
 d5e670259afb3478e2d10f9bdfaae99dd27f8112 2177 libxpm_3.5.12-1ubuntu0.20.04.2_ppc64el_translations.tar.gz
 9ad7946db61c131166ed37d193ac34729c1f719c 64784 xpmutils-dbgsym_3.5.12-1ubuntu0.20.04.2_ppc64el.ddeb
 4147e1186448831339059bbd737cd13066d63a28 26636 xpmutils_3.5.12-1ubuntu0.20.04.2_ppc64el.deb
Checksums-Sha256:
 3a38b8457266536160439df8b42289df23c7a316f2271972764a453ff05272da 97880 libxpm-dev_3.5.12-1ubuntu0.20.04.2_ppc64el.deb
 1ee638338017660a6cbfd7ef683eb57d8dc7d88b2bfc09181fe78b02e653d6a7 115224 libxpm4-dbgsym_3.5.12-1ubuntu0.20.04.2_ppc64el.ddeb
 e11c02f5f4d7a7d272c9fe43238dc137183dda2591cc78f43e62a1c1baf2a6d5 42040 libxpm4_3.5.12-1ubuntu0.20.04.2_ppc64el.deb
 1f024105735215c538ed182a8748ba88f3f2f4089b0f23a1b949761a64c1b102 7721 libxpm_3.5.12-1ubuntu0.20.04.2_ppc64el.buildinfo
 4fdbf3945b5a7e39b115029124a722375c9673e9b1764760d1254e2a6914b6ba 2177 libxpm_3.5.12-1ubuntu0.20.04.2_ppc64el_translations.tar.gz
 16418fd32a409667a089fed7f8feef8ef976c6ef9e568357680ba45c55e57fd2 64784 xpmutils-dbgsym_3.5.12-1ubuntu0.20.04.2_ppc64el.ddeb
 7c404b377160f2b5324b044f4ed62e436f7213a9013d310a7faccc5a6795dfb5 26636 xpmutils_3.5.12-1ubuntu0.20.04.2_ppc64el.deb
Files:
 8b9f4c9eb6805ae7b857dfa101c2ceca 97880 libdevel optional libxpm-dev_3.5.12-1ubuntu0.20.04.2_ppc64el.deb
 2fa9b635b0297c83e7e578ebf65d2f54 115224 debug optional libxpm4-dbgsym_3.5.12-1ubuntu0.20.04.2_ppc64el.ddeb
 f80e9ee597abfc5fc3ee47f04eddbd1e 42040 libs optional libxpm4_3.5.12-1ubuntu0.20.04.2_ppc64el.deb
 d924279538c622baac1a98dfbebd0d68 7721 x11 optional libxpm_3.5.12-1ubuntu0.20.04.2_ppc64el.buildinfo
 935cbda1052cdecf1ad9341e9984a926 2177 raw-translations - libxpm_3.5.12-1ubuntu0.20.04.2_ppc64el_translations.tar.gz
 ba5a79b0630800cf319318d0ade9a137 64784 debug optional xpmutils-dbgsym_3.5.12-1ubuntu0.20.04.2_ppc64el.ddeb
 89f231b7e25a535c66137a532d2c6cc8 26636 x11 optional xpmutils_3.5.12-1ubuntu0.20.04.2_ppc64el.deb
Original-Maintainer: Debian X Strike Force <debian-x@lists.debian.org>