lp:ubuntu/oneiric/netpbm-free

Created by James Westby and last modified
Get this branch:
bzr branch lp:ubuntu/oneiric/netpbm-free
Members of Ubuntu branches can upload to this branch. Log in for directions.

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Status:
Mature

Recent revisions

14. By Nico Golde <email address hidden>

* Non-maintainer upload by the Security Team.
* Fix stack-based buffer overflow when processing XPM
  image header fields. This can result in the execution
  of arbitrary code (CVE-2009-4274; Closes: #569060)

13. By Jamie Strandboge

* SECURITY UPDATE: fix stack-based overflow in ppm/xpmtoppm.c
  - http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076&pathrev=1076
  - CVE-2009-4274

12. By Jari Aalto

[Jari Aalto]
* Non-maintainer upload.
* debian/compat
  - update to 7.
* debian/control
  + top level
    - (Standards-Version): update from 3.6.1.0 to 3.8.4 (W: lintian).
    - (Homepage): Move here (P: lintian).
    - (Vcs-*): Add new fields.
  + netpbm
    - (Build-Depends): update to debhelper 7 (W: lintian).
    - (Depends): change obsolete gs, gs-aladdin to ghostscript (E:
      lintian). Add ${misc:Depends} for debhelper (W: lintian). Use newer
      tag ${source:Version} (W: lintian).
    - (Section): Remove inherited field (I: lintian).
  + libnetpbm9
    - Depends): Add ${misc:Depends} for debhelper (W: lintian).
    - (Description): Add 'v9' to make line unique (I: lintian).
  + libnetpbm9-dev
    - (Depends): Add ${misc:Depends} for debhelper' (W: lintian).
      Add ${binary:Version} (E: lintian).
    - (Description): Add 'v9' to make line unique (I: lintian).
  + libnetpbm10
    - (Description): Improve first line (I: lintian).
    - (Depends): Add ${misc:Depends} for debhelper (W: lintian).
      Add ${binary:Version} (E: lintian).
  + libnetpbm10-dev
    - (Description): Improve first line (I: lintian).
    - (Depends): Add ${misc:Depends} for debhelper (W: lintian).
* debian/copyright
  - Change to UTF-8 (W: lintian).
* ppm/{xpmtoppm.c,xvminitoppm.c}
  - Fix Gcc 4.4 error: conflicting types for getline (FTBFS serious;
    Closes: #549929). Patch thanks to Colin Watson <email address hidden>.
* ppm/ppmquantall
  - Change 'set' to 'declare' to fix "line 58: syntax error"
    (E: lintian; shell-script-fails-syntax-check).
* debian/rules
  - (binary-arch): change dh_clean to dh_prep (E: lintian).

11. By Alexander Sack

rebuild rest of main for armel armv7/thumb2 optimization;
UbuntuSpec:mobile-lucid-arm-gcc-v7-thumb2

10. By Colin Watson

Rename getline functions to get_line to avoid conflict with POSIX:2008.

9. By Andreas Barth <email address hidden>

Reupload to unstable.

8. By Nico Golde <email address hidden>

* Non-maintainer upload by security team.
* This update addresses the following security issue:
  - CVE-2008-0554: The readImageData function in giftopnm.c does not
  properly check the upper bound of a fixed size array leading to a
  buffer overflow and possibly code execution (Closes: #464056).

7. By Andreas Barth <email address hidden>

* Fix heap corruption in pnmtopng (no CVE yet),
  thanks to Christoph Biedl for detection and the patch.
  Closes: #407605
* Fix xwdtopnm on 64-bit systems. Thanks to Jim Paris for
  detection and the patch. Closes: #352261
* Use current location of rgb.txt. Thanks to Roland Stigge.
  Closes: #362983

6. By Florian Weimer

* Non-maintainer upload
* Patch from Martin Pitt <email address hidden>. Closes: #351639.
* SECURITY UPDATE: Arbitrary code execution with crafted images.
* pnm/pnmtopng.c:
  - Increase size of alphas_first_index and alphas_of_color_cnt arrays to
    fix off-by-one buffer overflow when using -alpha with an image with
    exactly 256 colors.
  - CVE-2005-3662
* pnm/pnmtopng.c:
  - Fix buffer overflow on overly long text lines.
  - CVE-2005-3632

5. By Martin Pitt

* SECURITY UPDATE: Arbitrary code execution with crafted images.
* pnm/pnmtopng.c:
  - Increase size of alphas_first_index and alphas_of_color_cnt arrays to
    fix off-by-one buffer overflow when using -alpha with an image with
    exactly 256 colors.
  - CVE-2005-3662
* pnm/pnmtopng.c:
  - Fix buffer overflow on overly long text lines.
  - CVE-2005-3632

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/precise/netpbm-free
This branch contains Public information 
Everyone can see this information.

Subscribers