Your message dated Wed, 17 Feb 2016 09:51:02 +0000
with message-id <[email protected]>
and subject line Bug#799275: fixed in gtk+2.0 2.20.1-2+deb6u1
has caused the Debian Bug report #799275,
regarding [GDK] patch - avoid integer overflow when allocating a large block of
memory (CVE-2013-7447)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
799275: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799275
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: gtk+2.0
Version: 2.24.25-3
Severity: serious
Control: tags -1 jessie patch
Control: affects -1 eom
Due to a logic error, an attempt to allocate a large block of memory
fails in gdk_cairo_set_source_pixbuf, leading to a crash of the app
that called it, for example, eom [1].
This issue had been fixed [2] in GTK+3, but the commit never made it
to GTK+2 branch. I've converted it into a patch for GTK+2.
The debdiff is in the attachment. Please apply it in Jessie.
[1] https://github.com/mate-desktop/eom/issues/93
[2]
https://git.gnome.org/browse/gtk+/commit?id=894b1ae76a32720f4bb3d39cf460402e3ce331d6
gtk2-gdk-debdiff
Description: Binary data
--- End Message ---
--- Begin Message ---
Source: gtk+2.0
Source-Version: 2.20.1-2+deb6u1
We believe that the bug you reported is fixed in the latest version of
gtk+2.0, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Santiago Ruano Rincón <[email protected]> (supplier of updated gtk+2.0
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 16 Feb 2016 22:57:59 +0100
Source: gtk+2.0
Binary: libgtk2.0-0 libgtk2.0-0-udeb libgtk2.0-common libgtk2.0-bin
libgtk2.0-dev libgtk2.0-0-dbg libgtk2.0-doc gtk2.0-examples gtk2-engines-pixbuf
libgail18 libgail-common libgail-dev libgail-dbg libgail-doc
Architecture: source all amd64
Version: 2.20.1-2+deb6u1
Distribution: squeeze-lts
Urgency: medium
Maintainer: Sebastien Bacher <[email protected]>
Changed-By: Santiago Ruano Rincón <[email protected]>
Description:
gtk2-engines-pixbuf - Pixbuf-based theme for GTK+ 2.x
gtk2.0-examples - Examples files for the GTK+ 2.0
libgail-common - GNOME Accessibility Implementation Library -- common modules
libgail-dbg - Gail libraries and debugging symbols
libgail-dev - GNOME Accessibility Implementation Library -- development files
libgail-doc - documentation files of the Gail library
libgail18 - GNOME Accessibility Implementation Library -- shared libraries
libgtk2.0-0 - The GTK+ graphical user interface library
libgtk2.0-0-dbg - The GTK+ libraries and debugging symbols
libgtk2.0-0-udeb - The GTK+ graphical user interface library - minimal runtime
(udeb)
libgtk2.0-bin - The programs for the GTK+ graphical user interface library
libgtk2.0-common - Common files for the GTK+ graphical user interface library
libgtk2.0-dev - Development files for the GTK+ library
libgtk2.0-doc - Documentation for the GTK+ graphical user interface library
Closes: 799275
Changes:
gtk+2.0 (2.20.1-2+deb6u1) squeeze-lts; urgency=medium
.
* Non-maintainer upload by the Debian LTS Team.
* Fix CVE-2013-7447: integer overflow when allocating a large block of
memory in gdk_cairo_set_source_pixbuf. Closes: #799275.
Checksums-Sha1:
d83b626eae5abb2f68b9ca193286da6963910b3d 3017 gtk+2.0_2.20.1-2+deb6u1.dsc
256b268115aef32c0c7f6fb332cc388f799f4399 264068 gtk+2.0_2.20.1-2+deb6u1.diff.gz
6f40a5b1f2d458790236bf95172fcf87f3753251 7107792
libgtk2.0-common_2.20.1-2+deb6u1_all.deb
1b23c606e655aecf6bdf90a0606c6ebabe1dcf63 335400
libgtk2.0-bin_2.20.1-2+deb6u1_all.deb
34174cc95eb8df851d603b590a3afcd71f5749a1 4126008
libgtk2.0-doc_2.20.1-2+deb6u1_all.deb
c479d6d2dc1d4d2fb501ee72c159b514e69ab9e0 339012
libgail-doc_2.20.1-2+deb6u1_all.deb
ebd2c8c88e0b1de180b7ec5dbe065bcc2c7fb50c 2709320
libgtk2.0-0_2.20.1-2+deb6u1_amd64.deb
71982533b75b81f9062498a4bf5ec8f4ba59f388 2162456
libgtk2.0-0-udeb_2.20.1-2+deb6u1_amd64.udeb
feb28e0c205237d5c9f82e806420d4ece490a9fb 3659908
libgtk2.0-dev_2.20.1-2+deb6u1_amd64.deb
8e7252e1f96ff4082defbb2c73a0c57efbf2f416 6004708
libgtk2.0-0-dbg_2.20.1-2+deb6u1_amd64.deb
377da18a0914af7651a68efaf6e492eddf7d1bfb 1017898
gtk2.0-examples_2.20.1-2+deb6u1_amd64.deb
e3d24426c2a40ea6d196ab3f1aee7ac238649574 736460
gtk2-engines-pixbuf_2.20.1-2+deb6u1_amd64.deb
7c9df120d717f7e9eec0f78fc46ac4196295ab49 339602
libgail18_2.20.1-2+deb6u1_amd64.deb
ac72c75f28a1320b912b00b35f24b05a69e80187 468018
libgail-common_2.20.1-2+deb6u1_amd64.deb
c634aa1f120ee857547cdff06e9489866e1e9b15 341166
libgail-dev_2.20.1-2+deb6u1_amd64.deb
0b0bc49f34a825a09cbcfecca1cefd0770af2c57 882568
libgail-dbg_2.20.1-2+deb6u1_amd64.deb
Checksums-Sha256:
8f6ca04002cf15397bdb1e356f9689f8d1018795c3873e3d749c9ce4670dafc8 3017
gtk+2.0_2.20.1-2+deb6u1.dsc
641208342f2fa159adbc32c37c1df73630897af92182ea20c15f7531d6d5f75e 264068
gtk+2.0_2.20.1-2+deb6u1.diff.gz
a0bee467091bbbde054df48c8636dfe3ee6497fd284b272acbae4c5db2dc28fb 7107792
libgtk2.0-common_2.20.1-2+deb6u1_all.deb
7293f1f1ee0113b8b31e3d3da2221d5ad4e73a37b956a23dbccd2b2cb52833fa 335400
libgtk2.0-bin_2.20.1-2+deb6u1_all.deb
046ba47fd93c0cdf71f57cabc33e17a3c5833449c6523a32722db1c3a5f76a01 4126008
libgtk2.0-doc_2.20.1-2+deb6u1_all.deb
ca7da875614b0c82398c01d1b0e5784a46a5caa00b8b14b4e91babf19211a964 339012
libgail-doc_2.20.1-2+deb6u1_all.deb
69cb51feecd679c3527094a1e5bfa69abf0a2f8b15ed60c6d21ceefe52746878 2709320
libgtk2.0-0_2.20.1-2+deb6u1_amd64.deb
5107e812fd70e67cc4b66855569ffeffbc7a152adb2a06dd17999674b9e9bb51 2162456
libgtk2.0-0-udeb_2.20.1-2+deb6u1_amd64.udeb
620df496470957e32a565f97b926d300cedfa397a8297666e67b676636d10d51 3659908
libgtk2.0-dev_2.20.1-2+deb6u1_amd64.deb
8520c2a5f34c0fee7f5453173eb423322da132575137b46df1b09f48ee35c2d3 6004708
libgtk2.0-0-dbg_2.20.1-2+deb6u1_amd64.deb
9c55396448817287d7694888005a1bc2926cdb72a7b33ce31a0cefdb6085e042 1017898
gtk2.0-examples_2.20.1-2+deb6u1_amd64.deb
add61a3d4d23ce1969fd380bd6896d2cff2bb22f318e584a3449c244daeeb18b 736460
gtk2-engines-pixbuf_2.20.1-2+deb6u1_amd64.deb
b34f2bba21cb79076b717393a9b96580b383320770fb403fe86cfa4fb1790c4d 339602
libgail18_2.20.1-2+deb6u1_amd64.deb
d8b6c41a46ca9985ad3e90934be44e2e458c0432ffd0875a0b5d650344a014c2 468018
libgail-common_2.20.1-2+deb6u1_amd64.deb
a019d5cda7ea70d6ce77d976696ff3f10e5a0e29bc78289653422b6659cc0b8e 341166
libgail-dev_2.20.1-2+deb6u1_amd64.deb
fa76ef81b3c74e3996a1122d94518d86ea72003bf15ea7b9baffbf29fd151ac1 882568
libgail-dbg_2.20.1-2+deb6u1_amd64.deb
Files:
066cbd8e0c34eddb6b3f4111377389c9 3017 libs optional gtk+2.0_2.20.1-2+deb6u1.dsc
67c803a73ffd016f925a87637de9f126 264068 libs optional
gtk+2.0_2.20.1-2+deb6u1.diff.gz
34e8a8d4a9bd7327201072f13a6c508f 7107792 misc optional
libgtk2.0-common_2.20.1-2+deb6u1_all.deb
8246576282e73b02db1486044e89ce82 335400 misc optional
libgtk2.0-bin_2.20.1-2+deb6u1_all.deb
1674bdb5af6bbfdcba18112738ea1e79 4126008 doc optional
libgtk2.0-doc_2.20.1-2+deb6u1_all.deb
917615f12ff65cb5de5ff28cf9a3aa94 339012 doc optional
libgail-doc_2.20.1-2+deb6u1_all.deb
102694998c1d6cbd5bbf33d416c2a3a1 2709320 libs optional
libgtk2.0-0_2.20.1-2+deb6u1_amd64.deb
12d3dbfe447e66cdc5c08b192e2ef7a7 2162456 debian-installer extra
libgtk2.0-0-udeb_2.20.1-2+deb6u1_amd64.udeb
e0eddeac84df6853f3c42d120a423939 3659908 libdevel optional
libgtk2.0-dev_2.20.1-2+deb6u1_amd64.deb
a96e2205a3b8703d1d3d6d75bac7ba96 6004708 debug extra
libgtk2.0-0-dbg_2.20.1-2+deb6u1_amd64.deb
0deffd83b6b1122de33d15fcafd7b19c 1017898 x11 extra
gtk2.0-examples_2.20.1-2+deb6u1_amd64.deb
71244c7d58d74fbb54b8bf2d0cd0025c 736460 graphics optional
gtk2-engines-pixbuf_2.20.1-2+deb6u1_amd64.deb
465f31037bdb62748953784b70405266 339602 libs optional
libgail18_2.20.1-2+deb6u1_amd64.deb
2272cccaeaab72922b7594e69ea601fc 468018 libs optional
libgail-common_2.20.1-2+deb6u1_amd64.deb
db2d34fcd720e882f3095cd47c0bb0f5 341166 libdevel optional
libgail-dev_2.20.1-2+deb6u1_amd64.deb
f132b1e8db0e6dd16d5a42819b4c00aa 882568 debug extra
libgail-dbg_2.20.1-2+deb6u1_amd64.deb
Package-Type: udeb
-----BEGIN PGP SIGNATURE-----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=Mgiw
-----END PGP SIGNATURE-----
--- End Message ---
