Format: 1.8 Date: Mon, 13 Feb 2017 11:50:02 -0800 Source: libgc Binary: libgc1c2 libgc-dev Architecture: amd64 Version: 1:7.4.2-8ubuntu0.1 Distribution: yakkety Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: libgc-dev - conservative garbage collector for C (development) libgc1c2 - conservative garbage collector for C and C++ Changes: libgc (1:7.4.2-8ubuntu0.1) yakkety-security; urgency=medium . * SECURITY UPDATE: multiple integer overflows leading to pointers to memory zones smaller than requested size. - d/p/CVE-2016-9427-1.patch: Fix calloc_explicitly_typed in case of lb*n overflow. - d/p/CVE-2016-9427-2.patch: Fix malloc routines to prevent size value wrap-around of lb*n overflow. - d/p/CVE-2016-9427-3.patch: Fix GC_collect_or_expand to prevent allocation size value wrap-around - d/p/CVE-2016-9427-test.patch: add test cases - CVE-2016-9427 * d/p/workaround-gcc-6-gnu++14.patch: Work around libgc test failure due to --std=gnu++14 (https://github.com/ivmai/bdwgc/issues/87) Checksums-Sha1: a02983422988d9f45eb769f6fa62aed64d453886 224106 libgc-dev_7.4.2-8ubuntu0.1_amd64.deb 0031e25991b8c691983e22888bd6ac78f8618a30 141984 libgc1c2-dbgsym_7.4.2-8ubuntu0.1_amd64.ddeb aa36ad6dd33c2ba63acb5280e83a56f2efadbc4b 81792 libgc1c2_7.4.2-8ubuntu0.1_amd64.deb Checksums-Sha256: 30ec9e0269aff6f498f28be1898f3bce42d8028bc741355c6eb601485a4363cb 224106 libgc-dev_7.4.2-8ubuntu0.1_amd64.deb 0e9dd67fc87673c601f35e23ce3f9826bbf004801a0bb04c40f0013d07596f3a 141984 libgc1c2-dbgsym_7.4.2-8ubuntu0.1_amd64.ddeb 605d11f02ee6adc92fee8c3f860ac58787f12d3ff4989c2f2b34ed54307ddb95 81792 libgc1c2_7.4.2-8ubuntu0.1_amd64.deb Files: abbf524d0aeb894dd8bb23c59961bd6d 224106 libdevel optional libgc-dev_7.4.2-8ubuntu0.1_amd64.deb f8a3b2217beae4d309f7d7988c41dc0e 141984 libs extra libgc1c2-dbgsym_7.4.2-8ubuntu0.1_amd64.ddeb dd7d333d3c182b979bedbf7f2e079b63 81792 libs standard libgc1c2_7.4.2-8ubuntu0.1_amd64.deb Original-Maintainer: Christoph Egger