Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4644 > unrolled thread

Re: [SECURITY] [DSA 3525-1] pixman security update

Back to article view | Back to linux.debian.security

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Re: [SECURITY] [DSA 3525-1] pixman security update Scott Murphy <smurphy.it@gmail.com> - 2016-03-22 17:40 +0100
    Re: [SECURITY] [DSA 3525-1] pixman security update jack <jack@jackpot.uk.net> - 2016-03-23 21:00 +0100
      Re: [SECURITY] [DSA 3525-1] pixman security update Paul Wise <pabs@debian.org> - 2016-03-24 05:20 +0100

#4644 — Re: [SECURITY] [DSA 3525-1] pixman security update

[Multipart message — attachments visible in raw view] — view raw

Yes was a good trip.  Everyone is OK.  Thanks.  We had a tremendous time.
On Mar 22, 2016 12:52 PM, "Salvatore Bonaccorso" <carnil@debian.org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> - -------------------------------------------------------------------------
> Debian Security Advisory DSA-3525-1                   security@debian.org
> https://www.debian.org/security/                     Salvatore Bonaccorso
> March 22, 2016                        https://www.debian.org/security/faq
> - -------------------------------------------------------------------------
>
> Package        : pixman
> CVE ID         : CVE-2014-9766
>
> Vincent LE GARREC discovered an integer overflow in pixman, a
> pixel-manipulation library for X and cairo. A remote attacker can
> exploit this flaw to cause an application using the pixman library to
> crash, or potentially, to execute arbitrary code with the privileges of
> the user running the application.
>
> For the oldstable distribution (wheezy), this problem has been fixed
> in version 0.26.0-4+deb7u2.
>
> For the stable distribution (jessie), the testing distribution (stretch)
> and the unstable distribution (sid), this problem was already fixed in
> version 0.32.6-1.
>
> We recommend that you upgrade your pixman packages.
>
> Further information about Debian Security Advisories, how to apply
> these updates to your system and frequently asked questions can be
> found at: https://www.debian.org/security/
>
> Mailing list: debian-security-announce@lists.debian.org
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQIcBAEBCgAGBQJW8WnmAAoJEAVMuPMTQ89EdBUP/3QNCG32ByfI7ekG7kV0bGjV
> C/zKvv5wbW7aTE93OPBXYYBnUE4thCNf5THX4DKL92y/rIYNjzgeYecbqkdTGibo
> hj/d49vkqXwPus8qUnChqR9e2AWHplFfGsQE9C3DAbTXmi0gOl7bvXEeMbJu7Mnd
> ygj4zHMw/d6Yay1/HI1idrK+6t33XKhkPqfJsKxGKEBXwS08sGdVvcvJFvxjE2p8
> 1RgSHUA2AAvyDY8mCh03uKwE3+XghidPlile3NI4UbGn0TR59xFWFUzbeCaDZAwY
> jbenr1lk672AbEZiJsL3WdGlZF8NrUt0wOGo3iW9J2tHAhBkcXbEI/PVj2S3BOL6
> x6smh4/r0bw6v5makdoLAqI6jjC4vPqom5Tch7frc/sHDHRunSMJq0NbcAVB+vxY
> CyNTKMUag3oygwzbA3A0Skg4RPHt9ynBGhinozrVLKVtYl3oUewPSAjGug2iC7WY
> Qb/4j/pcf/1HRiuipq+JtEFUjCDRkhXwWbt13XvwFdJZVHzqJ4PyqeQescQYC5ZV
> m2pFugvKTTp+mB2ujgDUpfr8p2HcaPMMUKkI4zTBoKEdPMT8UuRmT9rK84yQvqMz
> g5Y/TXnQoKw6Bf2j3nqoNwXKRtJkemQjBPzKwUGposnjlP4jG23qu00RepI/TIU9
> 66jFFw6xBlRbfL7Z0zU6
> =epWN
> -----END PGP SIGNATURE-----
>
>

[toc] | [next] | [standalone]

#4650

Splendid! Where did you go? Who is "Everyone"?

Who are you, for that matter?

And what does your tremendous time have to do with Salvatore's notice?

On 22/03/2016 16:15, Scott Murphy wrote:
> Yes was a good trip.  Everyone is OK.  Thanks.  We had a tremendous time.
> 
> On Mar 22, 2016 12:52 PM, "Salvatore Bonaccorso" <carnil@debian.org
> <mailto:carnil@debian.org>> wrote:
> 
> -
> -------------------------------------------------------------------------
> Debian Security Advisory DSA-3525-1                 
>  security@debian.org <mailto:security@debian.org>
> https://www.debian.org/security/                     Salvatore
> Bonaccorso
> March 22, 2016                       
> https://www.debian.org/security/faq
> -
> -------------------------------------------------------------------------
> 
> Package        : pixman
> CVE ID         : CVE-2014-9766
> 
> Vincent LE GARREC discovered an integer overflow in pixman, a
> pixel-manipulation library for X and cairo. A remote attacker can
> exploit this flaw to cause an application using the pixman library to
> crash, or potentially, to execute arbitrary code with the privileges of
> the user running the application.
> 
> For the oldstable distribution (wheezy), this problem has been fixed
> in version 0.26.0-4+deb7u2.
> 
> For the stable distribution (jessie), the testing distribution (stretch)
> and the unstable distribution (sid), this problem was already fixed in
> version 0.32.6-1.
> 
> We recommend that you upgrade your pixman packages.
> 
> Further information about Debian Security Advisories, how to apply
> these updates to your system and frequently asked questions can be
> found at: https://www.debian.org/security/
> 
> Mailing list: debian-security-announce@lists.debian.org
> <mailto:debian-security-announce@lists.debian.org>
> 

[toc] | [prev] | [next] | [standalone]

#4651

On Thu, Mar 24, 2016 at 3:47 AM, jack wrote:

> ...

It is unlikely that the person who posted message you are responding
to is subscribed to debian-security, since they responded to a message
on debian-security-announce instead. So they probably didn't receive
the mail containing your questions, which are better suited towards
being asked off-list anyway.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.security

csiph-web