Debian-LTS alert DLA-419-1 (gtk+2.0)

From:
    	     
 
santiagorr@riseup.net 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 419-1] gtk+2.0 security update 
Date:
    	     
 
Wed, 17 Feb 2016 11:21:04 +0100
Message-ID:
    	     
 
<20160217102104.GA4931@riseup.net>
Package        : gtk+2.0
Version        : 2.20.1-2+deb6u1
CVE ID         : CVE-2013-7447
Debian Bug     : 799275

Gtk+2.0, a graphical user interface library, was susceptible to an integer
overflow in its gdk_cairo_set_source_pixbuf function when allocating a
large block of memory.

For Debian 6 "Squeeze", this issue has been fixed in gtk+2.0 version
2.20.1-2+deb6u1. We recommend you to upgrade your gtk+2.0 packages.

Learn more about the Debian Long Term Support (LTS) Project and how to
apply these updates at: https://wiki.debian.org/LTS/