Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 572884 (CVE-2014-9762, CVE-2014-9763, CVE-2014-9764)

Summary: <media-libs/imlib2-1.4.7: multiple vulnerabilities
Product: Gentoo Security Reporter: Agostino Sarubbo <ago>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Severity: normal CC: enlightenment+disabled
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: B2 [glsa]
Package list:
Runtime testing required: ---

Description Agostino Sarubbo gentoo-dev 2016-01-25 14:42:01 UTC
From ${URL} :

> GIF loader: Fix segv on images without colormap.

Use CVE-2014-9762.

> Prevent division-by-zero crashes

Use CVE-2014-9763.

> Fix segfault when opening input/queue/id:000007,src:000000,op:flip1,pos:51 with feh

Use CVE-2014-9764.

@maintainer(s): since the fixed package is already in the tree, please let us know if it is ready for the stabilization or not.
Comment 1 SpanKY gentoo-dev 2016-01-26 07:52:37 UTC
should be fine to stabilize
Comment 2 Agostino Sarubbo gentoo-dev 2016-01-26 16:43:18 UTC
amd64 stable
Comment 3 Jeroen Roovers (RETIRED) gentoo-dev 2016-01-27 17:42:03 UTC
Stable for HPPA PPC64.
Comment 4 Tobias Klausmann (RETIRED) gentoo-dev 2016-01-30 16:55:14 UTC
Stable on alpha.
Comment 5 Markus Meier gentoo-dev 2016-02-03 20:52:49 UTC
arm stable
Comment 6 Agostino Sarubbo gentoo-dev 2016-03-15 16:42:31 UTC
x86 stable
Comment 7 Agostino Sarubbo gentoo-dev 2016-03-16 12:06:03 UTC
ppc stable
Comment 8 Agostino Sarubbo gentoo-dev 2016-03-19 11:38:47 UTC
sparc stable
Comment 9 Agostino Sarubbo gentoo-dev 2016-03-20 12:02:29 UTC
ia64 stable.

Maintainer(s), please cleanup.
Security, please add it to the existing request, or file a new one.
Comment 10 GLSAMaker/CVETool Bot gentoo-dev 2016-11-20 22:08:46 UTC
This issue was resolved and addressed in
 GLSA 201611-12 at
by GLSA coordinator Aaron Bauman (b-man).