pkgsrc/graphics/gdk-pixbuf/distinfo
salo 11ee09f4bd Security fixes for CVE-2005-2975, CVE-2005-2976 and CVE-2005-3186:
"io-xpm.c in the gdk-pixbuf XPM image rendering library allows attackers
to cause a denial of service (infinite loop) via a crafted XPM image
with a large number of colors."

"Integer overflow in io-xpm.c in gdk-pixbuf allows attackers to cause a
denial of service (crash) or execute arbitrary code via an XPM file with
large height, width, and colour values, a different vulnerability than
CVE-2005-3186."

"Integer overflow in the gdk-pixbuf XPM image rendering library allows
attackers to execute arbitrary code via an XPM file with a number of
colors that causes insufficient memory to be allocated, which leads to
a heap-based buffer overflow."

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2975
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2976
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3186
2005-11-26 09:40:49 +00:00

18 lines
1 KiB
Text

$NetBSD: distinfo,v 1.19 2005/11/26 09:40:49 salo Exp $
SHA1 (gdk-pixbuf-0.22.0.tar.bz2) = 495324afb5abebc14567ffd5a6cd72333bcc7f5b
RMD160 (gdk-pixbuf-0.22.0.tar.bz2) = 0e56a0f883fd8e3fb4d49b9a38f984b95cd96ece
Size (gdk-pixbuf-0.22.0.tar.bz2) = 398208 bytes
SHA1 (patch-aa) = 484feb3482c6832a33f428ce0db26719452dd274
SHA1 (patch-ab) = 2edd8fdd72d5dfaecc92974c6930e5d175e3b69f
SHA1 (patch-ac) = 16fc33898fc1cb10b3e11ee26e7ea046d1f68032
SHA1 (patch-ad) = 5c834eceaea7cef2ae964bba586c1e90ea4d0684
SHA1 (patch-ae) = 8331a216051cd1bbfbeee7d2b54ab9e51be6f38d
SHA1 (patch-af) = af8bf66d1cc445bdf7affaa119fd4c24e96e53c7
SHA1 (patch-ag) = f798fefe61f7c22ee8480e39bf19d57c72b33282
SHA1 (patch-ah) = 37df772bd4c818eb2dd567169598436467ea4f1c
SHA1 (patch-ai) = df681c98b2e265548504eeecbd5a2962b4d3359d
SHA1 (patch-aj) = 107cbe0e9756818ae2529cc4791d7cd06d476a7c
SHA1 (patch-ak) = 123b32f70b0feb91bb3e0c2ca8e705ff2ae381bf
SHA1 (patch-al) = cf05f283c7676c9fa51b822f5ced66524dfa487e
SHA1 (patch-am) = 44180cb58cba4b5cc5663acc0215978001f82fa0