diff -Nru gtk+2.0-2.24.25/debian/changelog gtk+2.0-2.24.25/debian/changelog
--- gtk+2.0-2.24.25/debian/changelog	2015-03-03 21:39:59.000000000 +0300
+++ gtk+2.0-2.24.25/debian/changelog	2015-09-17 15:17:24.000000000 +0300
@@ -1,3 +1,12 @@
+gtk+2.0 (2.24.25-3.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * 0004-gdkcairo-Avoid-integer-overflow.patch:
+    Cherry-pick upstream commit from GTK+3 to avoid integer overflow when
+    allocating a large block of memory in gdk_cairo_set_source_pixbuf.
+
+ -- Vlad Orlov <monsta@inbox.ru>  Thu, 17 Sep 2015 15:14:00 +0300
+
 gtk+2.0 (2.24.25-3) unstable; urgency=medium
 
   * 0002-gdk-Fix-GdkWindowFilter-internal-refcounting.patch
diff -Nru gtk+2.0-2.24.25/debian/patches/0004-gdkcairo-Avoid-integer-overflow.patch gtk+2.0-2.24.25/debian/patches/0004-gdkcairo-Avoid-integer-overflow.patch
--- gtk+2.0-2.24.25/debian/patches/0004-gdkcairo-Avoid-integer-overflow.patch	1970-01-01 03:00:00.000000000 +0300
+++ gtk+2.0-2.24.25/debian/patches/0004-gdkcairo-Avoid-integer-overflow.patch	2015-09-17 15:19:49.000000000 +0300
@@ -0,0 +1,24 @@
+From 894b1ae76a32720f4bb3d39cf460402e3ce331d6 Mon Sep 17 00:00:00 2001
+From: Matthias Clasen <mclasen@redhat.com>
+Date: Sat, 29 Jun 2013 22:06:54 -0400
+Subject: Avoid integer overflow
+
+Use g_malloc_n in gdk_cairo_set_source_pixbuf when allocating
+a large block of memory, to avoid integer overflow.
+
+Pointed out by Bert Massop in
+https://bugzilla.gnome.org/show_bug.cgi?id=703220
+
+Index: gtk+2.0-2.24.25/gdk/gdkcairo.c
+===================================================================
+--- gtk+2.0-2.24.25.orig/gdk/gdkcairo.c
++++ gtk+2.0-2.24.25/gdk/gdkcairo.c
+@@ -210,7 +210,7 @@ gdk_cairo_set_source_pixbuf (cairo_t
+     format = CAIRO_FORMAT_ARGB32;
+ 
+   cairo_stride = cairo_format_stride_for_width (format, width);
+-  cairo_pixels = g_malloc (height * cairo_stride);
++  cairo_pixels = g_malloc_n (height, cairo_stride);
+   surface = cairo_image_surface_create_for_data ((unsigned char *)cairo_pixels,
+                                                  format,
+                                                  width, height, cairo_stride);
diff -Nru gtk+2.0-2.24.25/debian/patches/series gtk+2.0-2.24.25/debian/patches/series
--- gtk+2.0-2.24.25/debian/patches/series	2015-03-03 21:36:04.000000000 +0300
+++ gtk+2.0-2.24.25/debian/patches/series	2015-09-17 15:19:18.000000000 +0300
@@ -14,3 +14,4 @@
 061_use_pdf_as_default_printing_standard.patch
 065_gir_set_packages.patch
 098_multiarch_module_path.patch
+0004-gdkcairo-Avoid-integer-overflow.patch