Re: Bug#886721: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

2018-01-09 Thread Chris Lamb
Version: 2.26.1-1+deb7u8 Hi Simon et al., > It looks like GNOME cgit's line-number marking and browser scrolling > behaviour interacts poorly with the fixed top navigation bar D'oh! Note that this was fixed in: gdk-pixbuf (2.26.1-1+deb7u8) wheezy-security; urgency=medium * debian/patche

Re: Wheezy update of poco?

2018-01-09 Thread Chris Lamb
Ben Hutchings wrote: > > I'm still unsure if adding isValidPath() is a ABI break > > Adding a non-virtual member function or static member variable > is not an ABI break. Thanks Ben. :) > > Will continue this evening. How are you getting on, Jochen? Please let me know what you need from us.

Re: [Pkg-gmagick-im-team] Wheezy update of imagemagick?

2018-01-09 Thread Roberto C . Sánchez
On Tue, Jan 09, 2018 at 08:04:53PM -0500, Luciano Bello wrote: > On 2018-01-07 03:29, Chris Lamb wrote: > > If you don't want to take care of this update, it's not a problem, we > > will do our best with your package. Just let us know whether you would > > like to review and/or test the updated pac

Re: [Pkg-gmagick-im-team] Wheezy update of imagemagick?

2018-01-09 Thread Luciano Bello
On 2018-01-07 03:29, Chris Lamb wrote: > If you don't want to take care of this update, it's not a problem, we > will do our best with your package. Just let us know whether you would > like to review and/or test the updated package before it gets released. Please, update. You can go ahead a take

Strech update of gifsicle ? [Was - Re: Wheezy update of gifsicle?]

2018-01-09 Thread Herbert Fortes
Hi Chris Lamb, > Hi Herbert, > >> Hope that helps. The files are at: > > Thank you for this. I have uploaded it and announced it in DLA > 1233-1. :) > Uploads to Stretch and Jessie are still missing. I did the patch for Stretch. But I do not know to where I send them exactly. Here are the fi

Re: [SECURITY] [DLA 1232-1] linux security update - hidepid not working in Wheezy (regression)

2018-01-09 Thread Stefan Benter
Hello everyone, I am facing multiple reproducible issues after updating to 3.2.0-5-amd64 when using the option hidepid=2 for mounting /proc. These issues did not exist with 3.2.0-4-amd64. And are solved by removing hidepid=2 from fstab and rebooting. When I am trying to start Firefox or Thun

Re: Wheezy update of poco?

2018-01-09 Thread Ben Hutchings
On Tue, 2018-01-09 at 09:44 +0100, Jochen Sprickerhof wrote: > Hi Chris, > > * Chris Lamb [2018-01-09 05:39]: > > Any update on this? :) > > I'm still unsure if adding isValidPath() is a ABI break: Adding a non-virtual member function or static member variable is not an ABI break. Deleting a s

Re: Bug#886721: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

2018-01-09 Thread Simon McVittie
On Tue, 09 Jan 2018 at 11:07:49 +, Chris Lamb wrote: > Hi Emilio, > > > If you don't have the time now I can take a look at this later today. > > Please, although it's more that my IEEE 754 is pretty rusty… :) It looks like GNOME cgit's line-number marking and browser scrolling behaviour int

Bug#886734: libgdk-pixbuf2.0-0: undefined symbol after upgrade (wheezy-security): gdk_pixbuf_calculate_rowstride

2018-01-09 Thread root
Package: libgdk-pixbuf2.0-0 Version: 2.26.1-1+deb7u7 Severity: important Dear Maintainer, after security upgrade i get following eror message due to an undefined symbol: g_module_open() failed for /usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-gif.so: /usr/lib/x86_64-l

Re: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

2018-01-09 Thread Chris Lamb
Hi Emilio, > If you don't have the time now I can take a look at this later today. Please, although it's more that my IEEE 754 is pretty rusty… :) Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

2018-01-09 Thread Emilio Pozuelo Monfort
On 09/01/18 11:50, Chris Lamb wrote: > [adding 886721 to CC] > > Hi Emilio, > >> g_uint64_checked_mul was introduced in glib 2.48, but wheezy has 2.32 > > JFTR that is here: > > > https://developer.gnome.org/glib/stable/glib-Bounds-checked-integer-arithmetic.html#g-uint64-checked-mul > >> T

Re: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

2018-01-09 Thread Chris Lamb
[adding 886721 to CC] Hi Emilio, > g_uint64_checked_mul was introduced in glib 2.48, but wheezy has 2.32 JFTR that is here: https://developer.gnome.org/glib/stable/glib-Bounds-checked-integer-arithmetic.html#g-uint64-checked-mul > The patch should be updated to do a manual overflow check.

Re: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

2018-01-09 Thread Emilio Pozuelo Monfort
On 08/01/18 20:22, Pascal Hambourg wrote: > Hello, > > Le 08/01/2018 à 15:55, Chris Lamb a écrit : >> >> Package    : gdk-pixbuf >> Version    : 2.26.1-1+deb7u7 >> CVE ID : CVE-2017-1000422 >> >> It was discovered that there were several integer overflows in >> gdk-pixbuf, a librar

Re: Wheezy update of poco?

2018-01-09 Thread Jochen Sprickerhof
Hi Chris, * Chris Lamb [2018-01-09 05:39]: Any update on this? :) I'm still unsure if adding isValidPath() is a ABI break: ++ static bool isValidPath(const std::string& path); https://anonscm.debian.org/cgit/collab-maint/poco.git/commit/?h=wheezy/CVE-2017-1000472&id=b131b35b6a4a8477665