package: argyll severity: important tags: security Hi,
CVE-2009-0792 has been issued for argyll. The details are: Multiple integer overflows and multiple insufficient upper-bounds checks on certain variable sizes were originally discovered in the Ghostscript's International Color Consortium Format Library (icclib). It was found, the original patch, addressing this issue was incomplete. For more details, see the fedora security announcement [1]. Please be sure to include the CVE number in your changelog if you upload a fix. Regards, Mike [1] http://lwn.net/Articles/328044/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org