lp:ubuntu/gutsy-security/lcms

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

11. By Marc Deslauriers on 2009-03-20

* SECURITY UPDATE: Denial of service via large memory leak
  - debian/patches/91_security_CVE-2009-0581_0723_0733.dpatch: properly
    free memory in src/cmsio1.c.
  - CVE-2009-0581
* SECURITY UPDATE: Arbitrary code execution due to integer overflows
  - debian/patches/91_security_CVE-2009-0581_0723_0733.dpatch: add new
    calloc function in include/lcms.h and fix overflows in src/cmsgamma.c,
    src/cmsio0.c, src/cmsio1.c and src/cmslut.c.
  - CVE-2009-0723
* SECURITY UPDATE: Arbitrary code execution due to buffer overflow
  - debian/patches/91_security_CVE-2009-0581_0723_0733.dpatch: add
    _cmsValidateLUT() and use in src/cmsio1.c and src/cmslut.c.
  - CVE-2009-0733

10. By Kees Cook on 2008-12-10

* SECURITY UPDATE: heap overflow via gamma entries.
  - 90_fix-CVE-2008-5317.dpatch: upstream fixes thanks to
    Devin Carraway.

9. By Jonathan Riddell on 2007-08-08

[ Stefan Skotte ]
Fix compile, s/2.4/2.5/ for new python version

8. By Matthias Klose on 2007-08-08

Regenerate swig files. LP: #127962.

7. By Matthias Klose on 2007-08-07

* Fix libdir in /usr/lib/_lcms.la (another default python version).
* Set Ubuntu maintainer address.

6. By Oleksandr Moskalenko on 2007-05-07

* Upload into unstable since it's through the NEW queue.
* debian/control: Added XS-Vcs-Svn and XS-Vcs-Browser headers.

5. By Oleksandr Moskalenko on 2007-04-12

Revert liblcms1-dev file location from /usr/include/liblcms1 to
/usr/include before people start complaining about FTBFS bugs in other
packages. Temporarily remove python-liblcms to avoid NEW queue.

4. By Shiju on 2006-03-27

New upstream release

3. By Shiju on 2004-09-30

* New upstream release. (Closes: #270842, #232666, #263411)
* Created Manpages for utilities in the liblcms-utils. (Closes: #244999)

2. By Luis Arocha <email address hidden> on 2002-01-04

Yes. Now Maintainer changed.