Format: 1.8
Date: Mon, 02 Oct 2023 16:10:52 -0400
Source: libxpm
Binary: libxpm-dev libxpm4 xpmutils
Built-For-Profiles: noudeb
Architecture: riscv64 riscv64_translations
Version: 1:3.5.12-1ubuntu0.22.04.2
Distribution: jammy
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@riscv64-qemu-lgw01-080.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libxpm-dev - X11 pixmap library (development headers)
 libxpm4    - X11 pixmap library
 xpmutils   - X11 pixmap utilities
Changes:
 libxpm (1:3.5.12-1ubuntu0.22.04.2) jammy-security; urgency=medium
 .
   * SECURITY UPDATE: stack exhaustion from infinite recursion in
     PutSubImage() in libx11
     - d/p/0004-test-Add-test-case-for-CVE-2023-43786-stack-exhausti.patch
     - d/p/0005-Avoid-CVE-2023-43786-stack-exhaustion-in-XPutImage.patch
     - CVE-2023-43786
   * SECURITY UPDATE: integer overflow in XCreateImage() leading to a heap
     overflow in libx11
     - d/p/0006-test-Add-test-case-for-CVE-2023-43787-integer-overfl.patch
     - d/p/0007-Avoid-CVE-2023-43787-integer-overflow-in-XCreateImag.patch
     - CVE-2023-43787
   * SECURITY UPDATE: out of bounds read in XpmCreateXpmImageFromBuffer()
     - d/p/0001-Fix-CVE-2023-43788-Out-of-bounds-read-in-XpmCreateXp.patch
     - CVE-2023-43788
   * SECURITY UPDATE: out of bounds read on XPM with corrupted colormap
     - d/p/0003-Fix-CVE-2023-43789-Out-of-bounds-read-on-XPM-with-co.patch
     - CVE-2023-43789
Checksums-Sha1:
 99babc8e3d32c060b59ac03fedd5e6e129d9b2f4 140254 libxpm-dev_3.5.12-1ubuntu0.22.04.2_riscv64.deb
 94e6cf15cc1d44a5bb0c79cb1347e969a4770e06 100920 libxpm4-dbgsym_3.5.12-1ubuntu0.22.04.2_riscv64.ddeb
 da1a904c69b61668b3a568a13cdcb59780d492f0 33640 libxpm4_3.5.12-1ubuntu0.22.04.2_riscv64.deb
 681a8fbd50d354fc3a7cb628e71b4090cb952d31 8173 libxpm_3.5.12-1ubuntu0.22.04.2_riscv64.buildinfo
 c9604e6b9d545072b49b645f53d25744028f437b 2180 libxpm_3.5.12-1ubuntu0.22.04.2_riscv64_translations.tar.gz
 14833adba8b0a1f6222a3480ef9791238bf83127 54864 xpmutils-dbgsym_3.5.12-1ubuntu0.22.04.2_riscv64.ddeb
 6dcd71c08d64f682e3963d68a5551f218ddb156c 22256 xpmutils_3.5.12-1ubuntu0.22.04.2_riscv64.deb
Checksums-Sha256:
 4d15a5fa219de817a64b4d43a361667e714225f611ae5a8c6111ab07d5f9034b 140254 libxpm-dev_3.5.12-1ubuntu0.22.04.2_riscv64.deb
 70fac5d32a83307cca7933ac59c67ac338b3ebe9d6b08dd53b207c43069ccbbe 100920 libxpm4-dbgsym_3.5.12-1ubuntu0.22.04.2_riscv64.ddeb
 c9b2bfe0016d62868c6c7b5c2e8a3d135e3b3d9b48adc152b8527dbfe87352c5 33640 libxpm4_3.5.12-1ubuntu0.22.04.2_riscv64.deb
 f93a003c4a2a415b8042685f32f0709d9ee2b885c46a5b721c0aa54d4f43eee7 8173 libxpm_3.5.12-1ubuntu0.22.04.2_riscv64.buildinfo
 7ab70d11f68cbc9e1ea20f9ddd8f3819f7436fca0730ea611e9d4f3f0110e5bb 2180 libxpm_3.5.12-1ubuntu0.22.04.2_riscv64_translations.tar.gz
 af8ad255061f8021d56142de923b4d878bf8b06074fdd3678e7244542b439275 54864 xpmutils-dbgsym_3.5.12-1ubuntu0.22.04.2_riscv64.ddeb
 a77a90f94ead5f1414aa36a541bbe55c40ddba675e8d3cdca3d3f9230c700418 22256 xpmutils_3.5.12-1ubuntu0.22.04.2_riscv64.deb
Files:
 3a2a54003296cffdd45b37abf9b57e7b 140254 libdevel optional libxpm-dev_3.5.12-1ubuntu0.22.04.2_riscv64.deb
 a50c07d4b324e174a38268a4c65acf42 100920 debug optional libxpm4-dbgsym_3.5.12-1ubuntu0.22.04.2_riscv64.ddeb
 2d226dd782ddd8463b22c0ff76c0bda8 33640 libs optional libxpm4_3.5.12-1ubuntu0.22.04.2_riscv64.deb
 01c1498d6453090cee36a613c1eef0c2 8173 x11 optional libxpm_3.5.12-1ubuntu0.22.04.2_riscv64.buildinfo
 72019210d5bd37cc8954a344eddffadb 2180 raw-translations - libxpm_3.5.12-1ubuntu0.22.04.2_riscv64_translations.tar.gz
 f218a7ca72e94e305efbac1c7a730f15 54864 debug optional xpmutils-dbgsym_3.5.12-1ubuntu0.22.04.2_riscv64.ddeb
 16f83500a0d1445d63b4dc6f7d16476f 22256 x11 optional xpmutils_3.5.12-1ubuntu0.22.04.2_riscv64.deb
Original-Maintainer: Debian X Strike Force <debian-x@lists.debian.org>