Debian-LTS alert DLA-401-1 (imlib2)

From:
    	     
 
Thorsten Alteholz <debian@alteholz.de> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 401-1] imlib2 security update 
Date:
    	     
 
Sun, 24 Jan 2016 13:32:35 +0100 (CET)
Message-ID:
    	     
 
<alpine.DEB.2.02.1601241331390.16972@jupiter.server.alteholz.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : imlib2
Version        : 1.4.2-8+deb6u1
CVE ID         : CVE-2014-9762 CVE-2014-9763 CVE-2014-9764

CVE-2014-9762
    GIF loader: Fix segv on images without colormap

CVE-2014-9763
    Prevent division-by-zero crashes

CVE-2014-9764
    Fix segfault when opening input/queue/id:000007,src:000000,op:flip1,pos:51 with feh

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=c9NG
-----END PGP SIGNATURE-----